Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          2rMMjucc9uLsWKcBP04snY4b1wgKl808Py1qPejDqSk=
Subject key identifier:   62:C4:67:FD:7D:EA:7F:4E:D0:82:FF:CB:00:4B:B6:93:A5:5F:5F:36
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       01975A24A47267C076E8DE0A098AE6BC2DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          044E
Signing time:             Tue 10 Jun 2025 14:00:40 +0000
Manifest this update:     Tue 10 Jun 2025 14:00:40 +0000
Manifest next update:     Wed 11 Jun 2025 14:00:40 +0000
Files and hashes:         1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=)
                          2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: F/Y85bgGln27z4lHvanLDatvLQaWfaXF/RWCJpE9734=)
                          4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=)
                          5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=)
                          6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=)
                          7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:24:a4:72:67:c0:76:e8:de:0a:09:8a:e6:bc:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Jun 10 14:00:40 2025 GMT
            Not After : Jun 11 14:00:40 2025 GMT
        Subject: CN=62c467fd7dea7f4ed082ffcb004bb693a55f5f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:b6:28:a7:4b:70:d0:f5:b8:92:99:96:e5:
                    68:4f:d7:5b:a6:07:07:d4:95:22:8e:6f:93:75:6b:
                    7e:5b:92:4e:42:44:a9:22:ab:15:c4:87:60:05:85:
                    bb:77:8f:37:a6:8f:8f:b0:83:c4:ab:da:b3:83:cb:
                    93:cf:63:f5:82:50:18:d7:86:b4:4d:a7:82:f9:9d:
                    b1:d0:f9:97:85:57:84:1f:33:d4:99:67:5c:bc:89:
                    a2:53:b3:c7:b2:4b:71:e7:8e:69:09:31:0f:4c:fd:
                    d1:43:ba:16:8d:cb:74:1b:69:12:96:09:2d:22:ae:
                    ab:2f:51:ab:52:a9:f2:ab:5a:f0:6c:61:e0:20:fa:
                    94:0a:79:22:9a:b4:d3:a4:3f:4d:38:96:89:f9:17:
                    53:4c:11:09:a9:a0:9b:db:f4:ba:34:f3:70:ab:95:
                    22:c6:93:1f:7f:4f:a2:89:03:54:24:9e:2f:35:a2:
                    01:c2:e7:17:8f:25:16:d6:e4:f2:f8:79:7f:10:12:
                    4b:2d:9f:a5:d5:ac:2e:2d:d0:11:ad:47:a1:00:60:
                    74:39:3c:c6:bb:2a:2e:ca:6d:25:48:3a:e3:11:52:
                    91:27:8e:78:55:32:ee:c2:80:f6:3d:ca:16:63:54:
                    18:30:df:f0:f9:41:0c:9f:b9:a2:66:20:b4:0b:a2:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:67:FD:7D:EA:7F:4E:D0:82:FF:CB:00:4B:B6:93:A5:5F:5F:36
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:95:3d:b2:8b:9e:17:be:d7:a7:4a:c1:26:62:6f:36:b3:d6:
         8b:90:79:05:a4:5f:1a:a3:a5:40:8a:98:2d:99:9f:e2:73:20:
         fb:63:4d:3f:ed:02:06:b5:5c:8d:09:6d:3c:c2:9b:f4:28:f4:
         ca:10:e7:e0:66:1a:eb:3e:5f:4b:2a:61:96:ef:6e:b3:19:2f:
         b1:77:38:fc:07:d7:55:87:5a:71:a7:52:cf:8d:be:ee:73:53:
         38:37:86:23:40:04:41:af:d4:cb:22:59:40:41:cc:c1:4f:04:
         da:e9:69:a4:c2:68:10:4c:dd:e7:ae:b8:3f:5c:9b:e2:b1:4b:
         5b:1c:ed:51:f5:62:89:ed:52:8c:66:2a:0a:ae:eb:6e:5f:3b:
         55:42:d5:1c:be:df:1b:88:7a:62:f2:28:42:d4:fe:9e:f4:e6:
         6b:2d:6f:43:5f:07:86:31:0b:df:8d:91:91:db:73:57:8f:34:
         70:cf:39:c0:62:42:32:af:cc:26:69:87:26:d5:a2:3f:bd:c0:
         28:68:0a:0f:3f:8e:88:fb:4b:c8:aa:c9:87:32:c7:da:08:e3:
         27:b8:af:0f:16:f2:53:7d:75:71:f4:df:21:c1:d8:d8:87:ef:
         27:e2:bd:cb:7b:18:a4:1f:6a:83:70:a3:dc:2e:6e:8c:22:6a:
         90:95:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:14:55 2025 by rpki-client