Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          Mj8IJak2OGjY9ditBYydAXo7dVNCYVudiSGzbIJIMeM=
Subject key identifier:   B7:C4:E0:B7:EB:40:39:7C:D3:45:3B:FE:43:37:9D:1E:86:3A:EC:C6
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       01964F356421344E5F6BB0CA38DECA5971B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          0DFA
Signing time:             Sat 19 Apr 2025 18:00:21 +0000
Manifest this update:     Sat 19 Apr 2025 18:00:21 +0000
Manifest next update:     Sun 20 Apr 2025 18:00:21 +0000
Files and hashes:         1: 0YW6ttYVKOeqcJ5zyrGvaeUR2pw.roa (hash: NFpGYrDr9CdBDfnq5tg4cuAB0v9WLl3xgZZRL1xqhAY=)
                          2: 33xoh2Mhe12KC-0rM7-N2OC8juY.roa (hash: WHxjyT3+EtMIryAC/JwnPc9urARuQ9qJ9/o50uStOZk=)
                          3: QPyAJIUON4G4tX46dieXV6CSDPw.roa (hash: mWn0PQCuoeDc/wLK7pLB85zcCXi6wOqEnTUyXmjEFZw=)
                          4: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: F8OQ0weETCSSk+DQC49i7zKkoYmHMbYUu07nY+Ig1f8=)
                          5: ytHgJTSko6lE6q80ot6eCy_M1Uw.roa (hash: pUNQ4etbz9JSqETlm90fA/PxT0T+M8EEPtzIOUXQbV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:35:64:21:34:4e:5f:6b:b0:ca:38:de:ca:59:71:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Apr 19 18:00:21 2025 GMT
            Not After : Apr 20 18:00:21 2025 GMT
        Subject: CN=b7c4e0b7eb40397cd3453bfe43379d1e863aecc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:b2:f9:1c:cf:57:72:22:0d:ee:46:ae:6c:
                    4c:65:6a:bb:54:62:b7:ee:90:a0:01:3b:c8:0a:21:
                    53:40:b0:67:18:3a:4e:ab:ad:a7:70:85:fd:ab:94:
                    1e:d4:45:55:d6:aa:64:f3:44:37:fa:10:a5:ba:1f:
                    77:75:80:27:69:27:0c:0f:89:54:50:88:fa:6a:f4:
                    d0:99:34:c5:b2:92:1a:3b:78:d2:ca:7c:9d:d9:48:
                    15:57:1f:85:c7:46:1f:da:eb:3f:6b:0e:0a:7d:b2:
                    3b:0b:8c:c3:1e:26:5a:11:99:03:35:b2:f8:4b:81:
                    0b:9d:28:b1:8e:2b:ee:ca:4b:54:04:82:f8:2a:98:
                    07:e1:a1:97:78:5c:05:53:b8:18:ef:a9:de:29:49:
                    73:d5:87:32:35:4f:bb:bb:6f:76:2b:ac:40:09:b4:
                    fb:6a:0d:03:b8:90:29:29:c1:b1:b5:44:6a:49:5f:
                    30:70:b5:fc:22:16:9c:14:32:d7:97:5b:e1:a2:40:
                    62:bc:07:b4:84:ba:1b:3b:3c:1e:59:b3:1f:31:20:
                    a1:10:43:81:58:eb:2e:38:ac:41:89:5f:1e:6e:e0:
                    f7:e5:f9:5e:b7:83:89:2d:1d:51:71:65:0f:ef:28:
                    f4:3b:e9:24:75:cc:6d:b6:52:ac:57:5b:a0:ba:4d:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:E0:B7:EB:40:39:7C:D3:45:3B:FE:43:37:9D:1E:86:3A:EC:C6
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:35:3a:71:28:d8:a1:77:28:34:59:38:d7:af:49:8c:75:ee:
         04:44:31:2c:34:1e:bf:ab:80:8c:b3:f9:50:59:35:da:14:78:
         1e:48:ce:37:d8:96:67:86:6a:66:bb:45:1b:c6:2b:a8:40:18:
         8a:ea:99:19:99:21:8e:4b:42:f7:0e:95:43:0a:ee:e6:6b:9a:
         a3:78:f0:d4:67:68:79:0c:49:b6:32:46:e3:1d:2a:67:51:80:
         0f:49:9f:a7:c2:48:b6:5b:f8:b5:80:dc:25:12:b5:8a:1d:76:
         ff:f7:ba:60:48:da:4a:29:ee:a3:f4:40:e0:76:e7:cc:3a:82:
         d4:3d:d2:4b:bf:55:01:a3:9c:2a:89:18:7c:8c:6c:93:81:e1:
         7e:89:2d:54:07:ed:dd:6e:de:cb:c9:29:09:13:80:ec:fb:29:
         ef:ad:04:71:69:b5:c8:3a:13:c3:3d:3f:20:58:24:ae:e4:6e:
         c7:54:c8:c0:8f:1c:8e:95:32:48:d2:b5:45:3f:80:41:46:e8:
         ea:dd:66:63:e6:63:7c:87:a1:23:9d:c6:3b:05:44:dd:bd:45:
         ee:cf:b0:6f:a0:01:ed:39:c6:b1:1b:43:c3:3b:c5:7c:3c:45:
         e2:30:a0:d1:28:22:9c:27:2a:f2:37:c3:63:e8:3d:84:43:dc:
         5f:d8:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:49 2025 by rpki-client