Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          rbH4bB86M/mYyor2gTaB9on1mtZnpLPnpctaFfOElgw=
Subject key identifier:   DA:4C:FB:49:35:32:CF:A5:31:BF:88:8B:FF:D7:8E:A6:77:B4:59:C4
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       01964067207F2ABAF2107D82DFD836BE695A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          10B2
Signing time:             Wed 16 Apr 2025 21:00:22 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:22 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:22 +0000
Files and hashes:         1: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (hash: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=)
                          2: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: t6jc5bs2SNQ1JhmxfsHdOoINu7wzsTVOFC6PNhtVpOc=)
                          3: Ww3QFrBBPhpwAl7mRt-Itp0xrdE.roa (hash: sog2kRkfH6oiAs3g2Z8X0J+7kikKM+3VZnFZGtK1Mj0=)
                          4: ZrwqrohL9iM53Sm0L32LtVEZ960.roa (hash: 7oEynZg573qxaJLTtHy8ld55GTPVxhY3d4qewpnFsjs=)
                          5: _b0z6FtQr_-kzugLqg8I9Bk1i60.roa (hash: wcGQMCEvkyuwbezuT9c/jFgmFbPZsuwa534V81cijII=)
                          6: s6hj31TUX8s-wcJUAy7yqXkixiY.roa (hash: Mp4dNxXIlsBREcr9I+ebDJif7lStdzMecgBPONGzVs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:20:7f:2a:ba:f2:10:7d:82:df:d8:36:be:69:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Apr 16 21:00:22 2025 GMT
            Not After : Apr 17 21:00:22 2025 GMT
        Subject: CN=da4cfb493532cfa531bf888bffd78ea677b459c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:7c:80:b2:2f:95:5c:14:8f:20:37:e8:36:
                    02:a1:0e:ef:f2:88:7b:ed:58:78:2b:a9:c0:39:32:
                    27:bf:c6:ce:81:08:41:1f:17:41:2e:b4:9a:25:03:
                    1e:9e:44:b3:f0:d7:7c:27:c9:5b:2c:70:10:8d:29:
                    0a:63:31:56:a2:10:70:92:75:d9:fb:b2:b3:0c:2e:
                    43:ec:7b:de:45:9d:59:42:00:d4:52:38:c5:de:e2:
                    41:02:72:42:c4:cb:dd:04:8a:f5:d3:71:a8:b3:5c:
                    32:48:0f:4f:e8:5e:66:21:f6:45:33:da:ed:cc:43:
                    a8:58:cf:0f:77:9e:34:78:f4:25:bb:4f:21:22:c3:
                    99:71:88:fc:dd:de:ef:84:02:d3:5e:19:40:67:d3:
                    50:08:22:92:17:b1:d4:80:7a:9c:f4:6f:9c:ca:a0:
                    0a:bd:96:58:3b:d3:4f:34:43:c3:1c:89:b5:a5:38:
                    31:74:be:9a:d0:de:46:df:1c:ec:c3:35:c7:f9:83:
                    39:7e:00:b6:46:64:3d:ca:41:0a:ec:ee:ce:ba:31:
                    1c:80:57:32:86:d4:a2:33:82:28:8a:58:5e:ed:6a:
                    e3:0b:9f:9e:46:e9:9a:fa:e6:07:92:d0:62:b0:b7:
                    3e:f1:1b:63:91:99:77:08:6e:af:af:d5:db:b0:fe:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:FB:49:35:32:CF:A5:31:BF:88:8B:FF:D7:8E:A6:77:B4:59:C4
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a5:d5:5d:8b:aa:fe:2d:df:83:b3:06:2c:78:b3:9f:e6:02:
         6a:3c:59:88:01:2f:17:ca:fe:a4:a8:ac:91:76:c1:f2:37:2b:
         94:16:f3:1b:b0:cf:bd:83:4d:93:6a:42:4b:ed:d7:d3:fc:4c:
         41:66:be:6f:aa:8c:e4:6b:e7:7f:11:12:83:24:88:07:e6:0a:
         e6:b3:bf:4c:07:2c:89:fb:d4:72:ed:47:e5:2a:cd:85:e1:28:
         29:8d:53:89:3f:d9:8e:45:6d:cf:a0:5c:e2:19:d7:a5:50:3c:
         49:4b:48:c5:9d:a9:a3:5b:0a:ed:f9:ea:e3:d2:aa:9e:6b:9f:
         c5:5f:ac:c1:b4:1b:81:63:92:a1:e9:bc:dd:b4:ce:c1:80:3a:
         a3:dd:14:1a:45:cf:6e:5e:2c:ad:da:f3:db:dd:f2:71:aa:53:
         c9:97:6d:d4:83:7f:a0:83:1a:42:4a:1a:7c:16:1b:84:a1:d4:
         ff:4a:05:59:6b:70:0c:76:81:67:f9:2c:d9:17:68:bc:d5:90:
         ea:86:78:5c:8b:90:68:82:22:74:ca:fb:94:19:44:02:67:da:
         c6:32:91:00:1f:7e:0a:41:7a:ee:64:af:1d:fa:ff:f2:b1:e1:
         b5:3e:39:91:5c:6f:f7:d0:45:f2:93:5f:b1:4d:f1:c9:fb:8b:
         bc:2a:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:23:44 2025 by rpki-client