Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File:                     F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier:          djaaY93DJYWAAlq9OHx0qa2wKVjMfQdE636WaWKoIgU=
Subject key identifier:   EB:8C:63:97:D3:E6:52:9E:28:70:92:D6:C3:3C:D1:FF:A3:21:AD:85
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       01964FDAE9CE38DE82797EEAD561CF42DF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number:          148C
Signing time:             Sat 19 Apr 2025 21:01:08 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:08 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:08 +0000
Files and hashes:         1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: lOMTdwdAO0Miv4Y/5ss5TwBBLXZvOOLmYGrfB8i5p2U=)
                          2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:e9:ce:38:de:82:79:7e:ea:d5:61:cf:42:df:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: Apr 19 21:01:08 2025 GMT
            Not After : Apr 20 21:01:08 2025 GMT
        Subject: CN=eb8c6397d3e6529e287092d6c33cd1ffa321ad85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:49:62:2f:fe:5a:95:ef:8d:85:cb:29:6b:
                    a4:f1:cc:bd:de:06:74:80:ff:b8:53:23:6b:8d:71:
                    de:54:a9:2a:e1:f9:fe:4b:82:6c:23:56:fe:06:4f:
                    bd:db:5b:1c:89:48:89:0b:57:b6:ca:72:e7:a9:85:
                    88:67:2a:50:24:8c:98:0a:6b:86:d1:5d:50:59:f0:
                    a7:d1:c9:d2:47:08:da:08:65:44:6a:0b:25:c2:58:
                    fc:58:dd:e0:17:81:6d:9f:ae:78:0b:5a:9c:57:d3:
                    63:6b:b2:c1:32:4f:9e:d0:27:75:d1:48:cf:59:60:
                    86:c8:97:f6:85:33:ce:7c:e6:7e:bd:82:f5:ed:bf:
                    7c:24:24:64:30:8a:49:51:e7:c8:93:86:26:3c:28:
                    a7:e7:09:02:d0:94:7a:38:00:d3:ff:84:1b:e3:f8:
                    16:bb:c4:67:05:4c:df:70:b1:b5:f4:c9:b2:70:d0:
                    68:92:6d:79:fb:c6:90:1b:bf:b0:04:37:56:aa:09:
                    cc:b9:0e:6b:d0:07:d5:09:28:9f:2f:81:ab:09:26:
                    5a:8a:0f:7c:fa:97:44:09:e3:da:62:76:1d:0c:b6:
                    d8:11:fe:06:e1:10:0b:ac:ab:02:b3:84:c7:1b:13:
                    62:04:48:5d:e1:87:45:07:87:ef:6a:96:12:d7:5a:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8C:63:97:D3:E6:52:9E:28:70:92:D6:C3:3C:D1:FF:A3:21:AD:85
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:96:c6:81:2d:15:8c:83:1d:30:a3:e1:4d:93:7c:b2:67:e0:
         4d:d2:57:0c:29:ef:06:5a:67:26:da:fd:6d:27:85:2e:db:ec:
         38:84:47:75:b2:2d:f3:31:43:14:18:2b:d3:ff:d5:ff:3b:3f:
         5a:fa:e9:63:ec:d8:7c:c6:90:22:7f:35:39:cf:ce:e7:18:fc:
         e8:0b:05:91:a3:d5:6d:f9:41:9d:78:ed:82:dc:7b:39:82:e3:
         47:e0:08:da:9c:cc:6c:b2:ed:93:01:7b:22:3f:53:8a:9b:28:
         e8:a1:34:4e:24:8b:45:f9:a6:6f:aa:f4:59:e8:fc:0d:c5:16:
         b5:90:b9:58:18:72:f5:89:bd:73:db:c0:65:a4:88:7c:b6:26:
         56:ca:d3:d4:7a:b2:78:85:a1:cc:7c:40:cf:b9:11:7d:d2:4b:
         f4:7d:06:4c:e9:bd:cf:b0:46:6a:63:9b:ae:2c:d1:32:9d:ec:
         ac:46:85:34:bd:04:5c:e2:2f:f9:a6:40:ef:f5:79:48:17:9c:
         1e:e6:53:e4:b3:19:f4:29:34:21:8e:42:d2:51:65:95:cf:d3:
         26:86:6a:a6:c6:7a:c2:70:87:b1:ea:f5:4e:14:04:b5:21:ad:
         59:15:8a:1f:40:59:07:bd:f6:8e:69:85:17:ef:c5:4d:c4:ff:
         ea:71:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:26 2025 by rpki-client