Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          0oiaqBPT4OY4oYJz8buvL81xFwVXCoQ+YQKl8Hnp6No=
Subject key identifier:   AE:EA:4C:5A:D6:05:EC:84:A3:A7:2F:07:38:AA:3B:9D:B3:67:13:6F
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       01962DBCC255C5AE31282103F21F43E10B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 06:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 06:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 06:01:07 +0000
Files and hashes:         1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
                          2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
                          3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: L9JXhs6HvoensPhJ/SlU1kTD/w4qO92zLVWdKG247wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:bc:c2:55:c5:ae:31:28:21:03:f2:1f:43:e1:0b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Apr 13 06:01:07 2025 GMT
            Not After : Apr 14 06:01:07 2025 GMT
        Subject: CN=aeea4c5ad605ec84a3a72f0738aa3b9db367136f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:5c:e9:11:3f:28:f6:4e:e9:01:ba:42:01:
                    5f:bb:32:b4:04:d5:26:8d:6d:48:df:db:77:51:f3:
                    4c:e5:6d:74:07:6c:5a:cd:c6:77:8c:6f:e1:74:d1:
                    32:6d:58:6a:88:b1:57:9a:4a:01:15:18:8d:03:52:
                    60:6f:48:48:8c:3e:32:56:1a:85:0a:c9:37:2c:54:
                    be:51:48:6b:57:0a:af:64:52:fa:d6:f7:db:8b:b5:
                    ba:a4:90:1b:cd:9f:80:85:66:0b:5d:e4:d7:4d:29:
                    9b:7d:a6:75:d6:b4:09:7a:ee:88:06:bb:53:59:28:
                    e1:76:b6:5c:79:9f:0d:69:5f:e3:60:d9:c8:6d:8d:
                    f9:00:df:ab:89:91:1b:fe:c2:05:d5:f7:10:b6:82:
                    d6:26:8c:5b:0c:9d:f4:6b:f9:9f:94:51:9e:4a:01:
                    62:6f:65:a6:f7:54:fe:65:ac:55:de:02:80:b6:ad:
                    fd:bc:c3:0f:3e:ff:2a:66:d6:b3:86:2d:43:d0:90:
                    92:c0:dc:9f:f4:c1:9c:e6:c9:0e:18:e3:8a:d0:53:
                    63:3a:c5:c8:89:d9:9e:07:ce:c4:f6:23:49:7a:45:
                    5d:37:fe:40:bd:63:83:58:14:10:45:34:f2:87:f1:
                    cd:22:98:e2:ce:9c:31:18:7e:77:9a:6c:18:1a:fa:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EA:4C:5A:D6:05:EC:84:A3:A7:2F:07:38:AA:3B:9D:B3:67:13:6F
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:7e:b0:98:1a:80:f2:35:d4:3a:cc:7c:e2:7d:8c:fd:e2:
         2d:65:7a:0e:23:7e:2c:b5:f8:56:88:f2:c5:9d:cd:fc:7c:f3:
         9c:91:29:85:e2:64:28:77:36:ea:ec:b6:05:da:af:22:e3:16:
         ae:77:08:12:e3:17:b0:9d:1a:80:62:18:16:fe:d1:7a:d9:78:
         15:49:93:34:11:b4:86:23:fc:88:41:a1:e9:c8:d9:53:b5:69:
         98:ec:4f:31:99:b1:ed:89:64:1a:ea:8f:46:ae:eb:08:23:6e:
         d3:2f:ad:2d:88:8f:ad:92:71:30:ee:37:88:67:56:c2:98:4b:
         e6:59:f7:b8:8e:c6:69:1b:fc:7d:ec:af:cc:fd:d1:3c:10:cd:
         4e:a5:8f:be:5d:2a:63:e8:a5:a0:27:07:2c:00:b5:34:1b:47:
         2f:db:4a:a1:87:9e:37:56:88:f7:20:4d:83:61:6b:40:fe:42:
         92:63:f4:ea:85:c7:95:34:fc:90:27:e0:e0:86:9b:8d:f8:3f:
         ca:67:26:0e:95:ee:97:49:ab:66:7c:ab:2a:f1:0b:c6:aa:71:
         ce:3a:b1:a2:24:a6:29:17:cc:75:03:87:f2:26:12:90:85:5d:
         b6:45:47:9d:9f:20:f7:b1:9f:9c:04:12:42:d5:ff:cb:2b:1a:
         5a:b1:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:01:00 2025 by rpki-client