Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          thpYQfulVK+ijfpT0XMfuDx+UXwZbew+6sE5QCGxXiw=
Subject key identifier:   2C:78:B7:86:0B:96:FE:92:08:AD:74:35:56:3C:CF:84:6B:32:99:6B
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       019601F70AEDA58B3BD6BEAAE54B3CAE0189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          03EB
Signing time:             Fri 04 Apr 2025 18:01:29 +0000
Manifest this update:     Fri 04 Apr 2025 18:01:29 +0000
Manifest next update:     Sat 05 Apr 2025 18:01:29 +0000
Files and hashes:         1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=)
                          2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=)
                          3: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=)
                          4: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: QLVqjo8dzCZHj+j1IIusNeIozmgGxagjHwKJQPbIuTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:01:f7:0a:ed:a5:8b:3b:d6:be:aa:e5:4b:3c:ae:01:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: Apr  4 18:01:29 2025 GMT
            Not After : Apr  5 18:01:29 2025 GMT
        Subject: CN=2c78b7860b96fe9208ad7435563ccf846b32996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:ec:03:53:63:c1:12:38:f9:bb:db:b1:ff:
                    9f:61:d2:d3:3b:fb:ac:a1:16:2d:6f:fc:dd:a6:39:
                    6d:86:03:1b:ac:c6:7f:0d:dd:ac:fa:f9:33:b1:7e:
                    3b:ef:a1:62:59:77:13:2c:4e:0f:ec:0f:d0:91:f8:
                    36:90:81:e2:51:8e:3f:eb:17:1c:9d:0f:3e:d3:7b:
                    4f:90:95:24:68:8e:16:9e:7b:67:2d:d6:7a:c7:6e:
                    c9:01:07:48:3d:ce:61:8c:13:54:36:30:08:5a:76:
                    74:4a:96:dd:2a:fd:9b:cd:db:12:80:f4:0d:02:f8:
                    96:cf:86:0f:ad:04:7f:72:f8:b9:2b:cc:cf:b1:e7:
                    85:73:74:2b:45:ea:cd:96:ee:7b:ce:2c:87:ee:70:
                    0c:a6:40:92:ac:41:2f:44:f6:1f:53:e9:9d:8c:d5:
                    64:69:4b:b8:dd:56:d1:0c:f3:e2:54:4a:64:a3:e8:
                    22:c5:c0:2d:6c:3a:61:13:14:3f:16:35:c8:d4:6b:
                    82:bf:13:68:0b:9f:3a:89:1b:d3:e0:c4:b3:a5:58:
                    61:c4:40:85:8c:0e:33:72:1a:bc:71:56:94:a3:ed:
                    a7:9b:0f:07:d3:8a:5e:e6:04:da:7a:89:4f:66:7e:
                    99:4a:4d:bd:0e:a3:8d:05:4c:1e:85:48:eb:0b:33:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:B7:86:0B:96:FE:92:08:AD:74:35:56:3C:CF:84:6B:32:99:6B
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:eb:da:81:6f:bd:0a:93:c6:1a:cb:17:b4:19:64:2d:9e:
         37:30:5e:df:4b:3a:36:0f:f4:d1:bd:c3:72:a3:34:e9:5f:90:
         a6:5d:1a:f2:f1:c8:ef:1f:f1:6b:4b:79:b1:e4:fd:62:87:4c:
         08:e0:fc:74:11:06:21:85:9c:4e:ee:7c:76:71:f8:2b:b1:10:
         f5:e2:db:f1:3d:55:b9:5a:fd:db:32:b5:71:20:a8:ef:5c:b7:
         5f:37:96:37:78:a1:5d:0f:da:a6:58:70:3c:f7:d4:8d:35:bb:
         c6:15:f9:37:a4:69:f9:52:9a:e2:dd:41:c4:db:9d:bc:d9:29:
         56:1f:ef:d3:df:7b:f9:cc:fb:6c:4b:2f:66:b7:57:a2:ab:b0:
         9a:74:a2:4b:a5:fa:85:0b:2f:56:10:f1:ac:b3:b0:2f:48:d3:
         76:e8:a7:c2:a7:e1:6e:ee:a6:25:8e:32:c4:66:df:f7:97:ea:
         10:c1:8e:da:f6:a2:29:0c:f0:6e:c6:71:69:e2:1f:c9:36:63:
         a0:fc:8d:fa:84:ac:fa:b2:01:61:60:81:9b:77:c3:3c:5f:05:
         4e:d7:97:48:40:e9:0b:d7:fa:01:90:9a:c7:68:f4:82:5d:99:
         dd:db:8e:3a:f0:76:4d:e9:89:96:24:70:b3:e9:47:71:83:dc:
         bf:c1:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:22:40 2025 by rpki-client