Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File:                     M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier:          USFGuAuQtUVRgUOKcNnIbEkIrwHIxly2sjePALYw4B8=
Subject key identifier:   87:6B:42:11:77:6B:C7:8A:4D:0B:D0:5E:CF:49:63:E8:F5:4D:3C:D1
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer:       /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial:       01964F6D103F37168A86C5C492A9FD15D9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 19:01:09 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:09 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:09 +0000
Files and hashes:         1: 2vNXSPhqGzkcVvfumaqzoQwZMt0.roa (hash: eL4GW0LkIf6gTx0hvW09DQfbQa9hDU0uyvNBC0IgCZw=)
                          2: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: HHjinQRYFgRxP34Vj8Kt3HfPPjUlsl3IjR0OYOJ4bUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:10:3f:37:16:8a:86:c5:c4:92:a9:fd:15:d9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
        Validity
            Not Before: Apr 19 19:01:09 2025 GMT
            Not After : Apr 20 19:01:09 2025 GMT
        Subject: CN=876b4211776bc78a4d0bd05ecf4963e8f54d3cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:d1:d7:9d:aa:35:85:02:2f:79:b6:cf:3b:
                    9d:c5:05:ee:62:5b:04:38:17:68:81:8e:78:25:9e:
                    c7:f2:df:1a:23:99:4d:da:5a:7b:15:b3:83:66:6d:
                    31:13:e8:be:2e:e4:0b:02:a1:04:f4:03:18:2e:37:
                    f2:85:cd:dc:07:6b:4a:d3:10:35:64:53:88:52:6a:
                    3d:58:dd:29:86:f9:6b:0f:c3:d2:ce:e4:77:09:e6:
                    d1:94:d8:20:2a:47:8c:8a:8c:c3:07:83:8b:7d:81:
                    b0:87:2f:b4:8b:6b:53:df:e2:e9:b8:16:1c:50:26:
                    90:ff:41:9f:8d:a6:40:9e:67:7d:90:74:0a:db:0e:
                    ae:55:44:ab:c6:e2:b9:e3:f0:97:90:28:82:0a:49:
                    ef:1d:a3:fe:33:c8:0a:80:92:60:77:d0:d6:9b:ea:
                    4e:c7:3e:3a:cb:b6:50:7b:c7:fb:ad:01:9e:37:5d:
                    0f:da:5d:aa:b8:7f:ab:0b:6d:dc:72:c4:9f:a8:eb:
                    a2:56:8b:0a:1c:97:85:bc:b7:71:5e:75:e1:e5:b7:
                    29:a8:81:49:a1:b1:fc:b4:6d:dc:a9:86:78:e8:b6:
                    e4:b2:28:df:bc:fd:b4:69:bf:7a:fc:08:f1:96:30:
                    11:9b:65:f4:82:61:90:e5:8f:bd:f8:18:55:c2:db:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:42:11:77:6B:C7:8A:4D:0B:D0:5E:CF:49:63:E8:F5:4D:3C:D1
            X509v3 Authority Key Identifier:
                keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2d:49:c7:33:ce:ed:a0:c0:8f:34:ea:98:aa:b3:0b:c4:73:
         ae:c1:95:9f:bc:79:29:49:e0:63:23:b8:b5:bf:b7:44:16:08:
         8b:36:90:13:14:38:a6:a0:a7:de:77:a8:cb:89:b8:f8:68:01:
         cf:a6:07:dd:a8:24:39:2d:1a:96:98:9b:c4:1a:78:ab:48:f5:
         37:91:a5:b1:4c:c1:11:a5:a6:4f:bc:28:ff:cd:7a:cf:23:6d:
         37:21:99:95:61:f4:16:8a:e1:a5:e7:a8:21:e0:9a:e5:dc:b5:
         af:cc:88:da:3a:39:e6:71:0f:ac:68:04:f4:8d:7d:ea:a9:6c:
         24:29:46:4f:9e:56:fe:61:7c:c6:7d:63:3c:68:34:97:37:49:
         ee:05:f4:9f:ae:4b:fd:a9:9d:fe:13:62:9c:9b:4d:ec:7a:73:
         ed:58:3e:f1:46:75:65:0c:66:1f:9a:99:90:b0:e7:86:c2:4b:
         19:e7:ee:9b:a3:aa:eb:ba:d3:47:8d:45:91:06:5f:86:bd:bc:
         3e:fc:f3:72:14:29:21:d0:2b:7b:30:1e:7a:33:22:75:98:b6:
         df:70:d8:f8:50:5c:a8:47:75:da:15:ad:72:46:0f:88:7b:ef:
         f9:d7:fb:3f:3a:18:4f:88:e9:7f:3a:0d:1f:1e:44:c7:92:ec:
         e6:43:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:38 2025 by rpki-client