Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File:                     kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier:          S6UOtfohEcQ4F5FSSTdBZTlJ1EgMey3nGgZLdcHuu84=
Subject key identifier:   FC:81:D3:34:77:F3:D1:BE:82:1A:0C:A2:DB:03:95:38:D6:60:04:5D
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer:       /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial:       019653B7513D8C6FF7EF2A1062C3F5227693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number:          089A
Signing time:             Sun 20 Apr 2025 15:00:44 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:44 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:44 +0000
Files and hashes:         1: 0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa (hash: +84Jtnm8y8lyPSa7rwRGvIOVFxMyvRwy6vUQccu0gmY=)
                          2: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
                          3: XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa (hash: 1W1CVZL0BwZJqQJ2Az9Lw99cQ4qD2ObuWZrSKPc6/mA=)
                          4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: cB/b14pK3zZbZNwNaajSjJh5T70hei+o2qjmEakdmjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b7:51:3d:8c:6f:f7:ef:2a:10:62:c3:f5:22:76:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
        Validity
            Not Before: Apr 20 15:00:44 2025 GMT
            Not After : Apr 21 15:00:44 2025 GMT
        Subject: CN=fc81d33477f3d1be821a0ca2db039538d660045d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:0b:6b:87:c7:4c:b4:d8:9a:f1:ab:ae:8e:
                    45:ed:f2:28:c6:aa:83:50:34:1a:61:8b:7c:fb:88:
                    7f:7e:b7:a8:da:f9:a9:84:e7:34:92:58:da:f2:ff:
                    0c:56:61:7d:e0:b1:72:15:61:bc:69:e8:ca:b0:61:
                    8c:17:c4:80:40:ea:cb:30:ac:87:8a:6b:ac:34:c4:
                    c9:fd:39:23:1b:82:32:79:1b:84:22:bf:ae:99:64:
                    d1:c6:af:a1:f7:5d:17:92:55:8b:ac:dc:89:56:cc:
                    cf:6c:2c:4c:5e:92:a0:b7:47:58:f1:ad:a0:65:bc:
                    46:99:15:59:54:18:10:0b:28:07:4d:31:63:a8:0d:
                    42:8c:2f:a7:d8:01:41:89:ae:7a:80:56:66:84:f5:
                    99:ae:fd:21:6d:d3:ab:8f:43:cc:9e:7a:ed:0b:d5:
                    e5:32:6f:56:78:d6:a7:d6:15:f0:d2:8a:7e:ef:38:
                    38:0e:77:02:b7:be:b3:73:f6:4c:ca:96:b3:82:e1:
                    98:f0:a3:09:e2:a6:9f:c0:e5:08:81:07:dd:15:79:
                    66:c4:29:b2:22:62:90:fb:df:90:f1:cf:7e:d2:cb:
                    30:40:51:84:cd:15:7a:20:c3:da:97:81:17:f4:f4:
                    4c:34:6d:57:a8:ed:8b:47:f4:00:8d:52:e9:14:06:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:D3:34:77:F3:D1:BE:82:1A:0C:A2:DB:03:95:38:D6:60:04:5D
            X509v3 Authority Key Identifier:
                keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:6e:23:8e:9b:dd:bb:f5:51:17:86:1c:85:2c:84:fc:c5:c0:
         fb:36:e6:e8:bb:3b:e4:60:33:ef:38:e8:b7:b7:3c:c9:02:15:
         26:1b:93:52:ed:a8:58:cf:7c:20:97:6d:6e:d2:09:dc:21:40:
         6f:1e:0d:2d:5c:7a:98:fc:f2:60:70:7e:d9:de:ac:b4:1d:82:
         44:93:e0:94:ce:1f:29:61:6f:6d:36:b6:1f:94:2b:1c:cb:77:
         79:af:b8:5a:bb:02:33:ab:41:79:e2:9c:6c:ff:63:0d:1c:ac:
         9b:fa:4f:83:49:06:a6:6a:06:96:e9:84:9a:4a:7d:e8:ae:7e:
         97:73:ce:8e:41:ca:be:71:e1:a8:6d:6e:b2:f7:5d:17:91:49:
         d4:7e:f3:4f:c3:7e:e0:fb:69:60:51:38:89:41:28:49:ac:bd:
         53:a0:7b:77:77:33:60:72:69:02:b6:99:5c:f8:c0:38:a9:ec:
         55:f0:26:d5:b2:cb:6c:46:d8:b7:84:ac:76:4a:ee:d0:5b:19:
         ca:c3:a2:ca:c3:42:aa:12:14:05:80:87:00:1b:ee:0e:52:ac:
         c6:44:0c:d0:a3:47:a0:8a:ae:2f:5c:59:7e:c2:88:11:94:16:
         9a:fa:88:52:91:c9:de:c1:27:fd:53:a4:62:7c:20:14:73:a4:
         df:ad:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:06 2025 by rpki-client