Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
File:                     5_7U53ggnDyuk9S3bTUHBEYsOqs.mft (raw, json)
Hash identifier:          G+8qCk+CHX6giQjyn+FeCrN8tWoLNzmFBHgA3F5/m7I=
Subject key identifier:   F3:95:7B:62:AF:48:83:C8:62:46:48:D4:56:0B:E6:08:1F:87:60:18
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       01964A469E504FE1088C78AD7687F8E06CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
Manifest number:          1285
Signing time:             Fri 18 Apr 2025 19:01:03 +0000
Manifest this update:     Fri 18 Apr 2025 19:01:03 +0000
Manifest next update:     Sat 19 Apr 2025 19:01:03 +0000
Files and hashes:         1: 5_7U53ggnDyuk9S3bTUHBEYsOqs.crl (hash: nRRpdIv81qSQfpzm/eUHTu2hLmAjzcr6m2Gb5fgv0OA=)
                          2: HgeaiXNp8oaIkVjkrRG17ULDd1I.roa (hash: wPu6bKujUWw8Q6Ywc1kUepdeVq7pWlsdycgmuKRoAys=)
                          3: NTo8wbiTR1K2HfWuJU9NIGO7ZNw.roa (hash: chETypjvCT3i5s+QcgGlph3xjE01ueClG2327nST8KQ=)
                          4: cM8VCwAToYUay8Cs8r_uqKsIbSU.roa (hash: 6pPF0krqdzFpgqEz+0MFM0HfAkc4fzw70yHfP6Ohc+4=)
                          5: wcnB-JJNXq_0bFPzZ6d2oZ9Vpto.roa (hash: 23Nhz5S2T6oMIxU1BET30KjpLb1Pj+emx/UM9kj1sew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:9e:50:4f:e1:08:8c:78:ad:76:87:f8:e0:6c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Apr 18 19:01:03 2025 GMT
            Not After : Apr 19 19:01:03 2025 GMT
        Subject: CN=f3957b62af4883c8624648d4560be6081f876018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:8a:9e:0c:10:65:d3:b5:4b:34:4f:03:63:
                    3d:7a:10:8f:52:70:10:0c:54:94:c8:be:9d:5b:8f:
                    4a:95:df:a1:6d:cd:70:de:b5:72:6c:e1:12:b0:e6:
                    a9:59:79:c9:7a:bd:dd:86:63:ba:aa:82:a5:df:d9:
                    93:67:ae:a1:95:1e:ef:a5:52:67:56:9d:16:7d:03:
                    2c:12:02:c5:9f:57:1c:3a:fa:98:b4:d3:c8:90:6e:
                    09:b2:26:f6:c3:e6:9a:0e:d6:8a:a4:99:9b:c3:fb:
                    2c:fd:fa:ac:ab:42:d7:be:b0:95:5f:7e:e4:61:d9:
                    63:69:47:05:38:33:ca:fe:ae:41:39:2b:e0:ec:55:
                    86:62:39:48:31:92:b4:34:7d:5b:69:ac:44:6d:3e:
                    b3:1f:d6:f2:ae:42:06:4c:d3:88:a3:fe:d6:60:ec:
                    c5:93:64:5f:72:d0:33:3a:82:8f:e5:08:8e:b0:00:
                    58:78:a7:5b:7a:05:03:e3:9f:32:c7:99:98:74:2e:
                    63:b9:f3:1a:7c:e7:5b:e5:f2:7a:bd:20:63:6d:fc:
                    26:e1:d5:6c:ff:e4:2c:8c:73:1b:1c:06:9d:62:b4:
                    b7:5a:72:1b:93:39:57:8d:96:f3:bc:dd:ba:2e:87:
                    b3:92:3a:aa:ed:c3:f9:36:a7:ff:01:11:3f:fd:d2:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:7B:62:AF:48:83:C8:62:46:48:D4:56:0B:E6:08:1F:87:60:18
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:61:3a:49:4e:54:33:26:e9:e5:49:86:bb:9f:16:85:23:d1:
         f6:88:9b:ff:54:ab:06:fc:95:65:ef:dc:4b:07:71:ab:6b:b6:
         51:dc:69:1e:9e:94:ea:23:01:36:25:f9:b5:01:71:0c:aa:5e:
         7f:15:b6:8d:db:ef:e9:29:a0:d2:dd:7a:4c:cf:a9:54:bb:c2:
         f5:f0:68:85:b1:b7:0f:93:86:b2:63:54:52:de:51:9d:2a:59:
         09:63:96:f8:62:26:70:d1:b3:59:04:84:b2:c0:c8:01:d1:a6:
         89:8c:85:25:c6:f7:a4:f2:79:7d:dd:1d:46:71:ef:df:9e:13:
         63:3e:40:6d:00:77:6d:12:59:a5:f1:1d:ce:bf:3c:3f:a1:29:
         52:31:88:75:e1:e0:16:bf:72:bc:ea:15:f2:8d:42:aa:d2:f8:
         20:aa:d6:80:a0:7a:1d:48:fe:9b:3b:eb:92:dc:16:13:a0:bb:
         eb:93:43:2f:ee:f1:6e:d5:12:d2:31:4a:77:96:b6:2e:c0:26:
         57:c1:4f:43:3e:ae:88:7a:f2:71:82:4b:b8:8b:81:a0:fc:e4:
         7f:89:be:de:1c:ea:78:1e:9a:bc:22:7d:df:e2:29:4d:30:38:
         9b:88:a8:fa:0c:5a:d0:d8:b6:97:2a:fd:9d:3b:07:5f:86:f8:
         e0:d0:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:31 2025 by rpki-client