Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File:                     phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier:          pIDxx09hFAA87WwhS71K4SQLfqCYEFs48L+G6+fOARY=
Subject key identifier:   FF:93:78:7D:A6:51:4E:39:0D:05:36:0E:03:DC:66:CE:AF:35:77:C4
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer:       /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial:       019632AC417DC2D75D9B4999760733BB3ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number:          14ED
Signing time:             Mon 14 Apr 2025 05:01:11 +0000
Manifest this update:     Mon 14 Apr 2025 05:01:11 +0000
Manifest next update:     Tue 15 Apr 2025 05:01:11 +0000
Files and hashes:         1: _6cfi2Dj44vxaZWzfEwd2jk1pu4.roa (hash: 0LoAOyQFdU27wEYvA4eRFUQBIfRX8L27NeM+jRnEJAQ=)
                          2: _TJtE7-5a5UX2DefIW3iB1z5iGY.roa (hash: PhkMKp+FPGv2w6bMrKJv4pkTot0QbsXs9wqx+PCqH+s=)
                          3: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: 5iiUzNIf/nH8xRDDkdHQ9BRAQgplewDkRe3xJvZRnzk=)
                          4: sZajNmManlPTaNoPcFuaAKck-nc.roa (hash: R4UFS0zdQGwYoD2q6eTRAVpHRYbKs3X1MYzT1lIbryU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:32:ac:41:7d:c2:d7:5d:9b:49:99:76:07:33:bb:3a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
        Validity
            Not Before: Apr 14 05:01:11 2025 GMT
            Not After : Apr 15 05:01:11 2025 GMT
        Subject: CN=ff93787da6514e390d05360e03dc66ceaf3577c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:28:65:fb:88:ba:11:ef:c7:63:74:65:60:
                    95:5c:50:f0:78:9e:0a:a2:0e:9a:fc:63:29:af:78:
                    9c:56:b0:75:97:93:8f:73:74:b4:a6:0e:36:f7:8b:
                    a1:c5:e8:d6:8b:ac:3b:85:2f:1e:c3:88:4c:a4:c8:
                    4b:a7:42:74:c3:4f:60:31:34:fe:68:b0:be:99:1f:
                    ba:2f:52:ea:d8:6f:c1:72:9c:9d:b5:02:44:da:11:
                    11:fd:81:32:c0:11:0a:91:01:58:3c:2d:35:30:09:
                    c9:3a:28:d0:05:9c:fe:fa:43:b6:95:2b:ad:b2:02:
                    26:76:cb:36:7c:90:a4:9e:ce:fd:e3:9a:26:7c:5d:
                    f9:65:b1:fd:f3:c3:af:0c:59:f3:c9:61:d3:9c:57:
                    29:53:de:b7:67:61:e5:a2:b3:61:77:7d:03:5c:40:
                    5e:ff:6e:e7:13:9f:47:d7:73:6a:96:78:86:75:50:
                    d1:37:bf:1c:93:ae:11:84:20:d3:9d:93:b8:d2:25:
                    0f:19:3b:d1:81:3e:94:3b:f4:0f:8f:8f:98:c0:61:
                    5b:fc:40:91:a5:02:53:e4:48:fd:d4:64:53:fe:16:
                    83:e4:9e:1e:0a:d5:08:0a:42:3b:b7:c6:28:6f:0c:
                    05:ed:e8:8c:4b:98:31:1f:b8:f8:39:77:15:ef:30:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:93:78:7D:A6:51:4E:39:0D:05:36:0E:03:DC:66:CE:AF:35:77:C4
            X509v3 Authority Key Identifier:
                keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:1d:df:9b:60:ac:c8:b3:ac:f4:c2:3b:28:02:18:fd:e8:
         ea:71:5f:b9:a8:a8:3e:ed:4e:41:76:1d:62:27:5d:fc:59:7d:
         08:ac:81:e8:b9:11:dc:4c:4e:2a:f8:ef:ad:a3:66:9c:cc:b0:
         d1:fc:b5:a0:ae:1b:8e:1f:27:a5:e4:3d:a6:e7:ec:45:59:25:
         0b:98:3d:c9:95:40:8a:81:be:ec:f8:83:ba:9e:89:20:32:ce:
         73:e9:61:c1:b5:d9:da:d1:d6:d1:c4:e7:06:b2:78:4d:c6:5d:
         51:dd:f4:03:3a:74:d0:df:8c:4a:c4:2f:70:97:62:37:f3:23:
         a7:bc:34:c7:39:e4:80:52:52:8d:d2:48:c7:d4:f6:a8:54:6d:
         8f:0d:bc:23:17:39:d9:a5:d0:3b:66:11:aa:33:e1:bc:eb:27:
         65:f1:5b:b8:7a:ce:56:94:ce:e4:73:16:0c:bb:25:9b:3e:f5:
         e7:28:33:b1:b9:95:22:e3:bf:72:ff:3a:37:06:96:be:04:1e:
         80:6f:90:e7:b2:57:9d:95:5f:19:09:1c:0e:45:8d:bd:24:2f:
         d1:cb:69:14:d1:6b:99:ac:cb:68:ba:3b:b7:55:be:5d:a3:40:
         3f:78:80:b2:53:dd:47:10:ff:7f:98:e2:76:34:69:15:fe:6b:
         43:b4:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:51:36 2025 by rpki-client