Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          7/5WN4Ta/xxsugb3AqXoQhUalaquUSBGp2/MCWB5kRg=
Subject key identifier:   CA:79:F4:DA:D5:AF:42:8D:37:93:C7:22:65:32:FA:88:0F:8D:32:F3
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       01962A1709510F415C14FCDB18A79717EE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          17DF
Signing time:             Sat 12 Apr 2025 13:01:14 +0000
Manifest this update:     Sat 12 Apr 2025 13:01:14 +0000
Manifest next update:     Sun 13 Apr 2025 13:01:14 +0000
Files and hashes:         1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
                          2: Sh0_buHkWXJwnQ-XEy5OOz_SGY0.roa (hash: K8R9P9+JyXSxzWg59QqqJldbaJpbMvlOvc7l32oVzqA=)
                          3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: +nSceiL31itGAi5fXz2BPU9/a0PmkqqQQzfCK2XHMto=)
                          4: g-gDnGYDElbKgzwYSDP2gPdUjgU.roa (hash: MWhLlIp3CcNIM+/42QFT1hg73NCRkvj/qnVhMmAdqeY=)
                          5: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
                          6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:17:09:51:0f:41:5c:14:fc:db:18:a7:97:17:ee:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Apr 12 13:01:14 2025 GMT
            Not After : Apr 13 13:01:14 2025 GMT
        Subject: CN=ca79f4dad5af428d3793c7226532fa880f8d32f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:d5:6f:33:f4:d0:90:ce:26:a3:37:76:a1:
                    60:76:7d:f1:39:83:36:33:0a:b2:26:96:92:ae:66:
                    e2:76:49:c5:ca:37:a6:7e:06:3b:48:c4:2e:b3:d3:
                    48:f4:a2:6e:46:18:11:3e:93:39:87:23:31:77:d1:
                    e9:bb:99:41:5b:53:3d:ea:f0:fd:7f:58:49:7e:84:
                    e1:68:dc:28:fd:a0:0f:68:45:84:63:c0:b7:74:74:
                    b9:79:f5:2b:a0:e8:11:7b:90:81:8a:09:2e:8c:10:
                    2f:94:9f:de:44:cf:b5:ff:71:2f:44:93:9f:07:ca:
                    13:c4:ae:f7:18:0b:ea:1c:37:da:fe:b5:62:9f:1c:
                    82:3f:0b:5d:a7:5e:13:50:37:44:13:6d:a7:46:26:
                    30:b5:c9:ce:b9:af:c2:02:64:83:70:14:ab:43:79:
                    a3:78:67:6f:3f:a1:fc:2e:ab:89:87:a7:26:67:1c:
                    5e:2f:02:cc:09:69:b6:73:69:db:b1:95:8c:1b:2a:
                    2b:cb:42:03:12:76:9a:10:b8:2a:ba:3b:76:a3:06:
                    94:5c:55:2e:aa:c8:68:57:80:be:96:6d:20:d3:b1:
                    04:07:17:19:d3:8e:60:cb:67:6b:3c:3c:ee:87:51:
                    b9:e9:e7:90:f6:f4:0a:e7:8a:42:7b:7c:a4:fa:31:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:F4:DA:D5:AF:42:8D:37:93:C7:22:65:32:FA:88:0F:8D:32:F3
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:25:53:90:f5:94:ff:42:6b:33:ef:c1:3b:62:96:29:35:24:
         e2:28:b5:1c:8b:b4:ca:78:7b:28:44:8a:f8:31:93:5c:93:17:
         70:a5:cf:88:25:a6:bb:a9:1d:1d:56:e9:2b:4e:80:ea:7f:8d:
         61:5e:ef:6c:53:62:2c:27:42:39:a8:5d:89:81:ef:52:ec:56:
         3d:34:11:8b:2a:fe:5b:59:41:94:ad:1a:e7:72:58:10:15:57:
         52:0e:68:d6:54:04:7f:88:52:d2:20:6a:12:06:08:55:26:11:
         14:ba:b2:58:a4:fe:1e:68:3e:d4:d9:70:4b:e5:b3:5e:da:4d:
         9d:55:dc:8a:8a:15:48:bd:4a:6e:09:6f:36:24:83:5a:51:c1:
         0e:db:78:2b:9f:69:47:6c:d6:6d:4a:03:81:58:7b:c4:70:a3:
         84:ad:2a:84:e4:1c:81:7c:04:57:02:d4:3d:9c:2f:12:90:cc:
         62:ff:45:5d:24:77:d5:68:9d:47:eb:6a:f7:f8:ac:d7:bc:33:
         c0:a8:3a:8a:36:76:ec:50:a4:f3:67:a5:82:80:43:e7:f7:f5:
         d9:32:de:a4:a5:e5:c1:8d:15:7f:0f:7e:c8:05:46:c8:27:31:
         f3:f8:c8:91:ce:42:1b:83:a9:34:3a:42:77:4f:bd:dd:fa:5f:
         24:58:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:43:08 2025 by rpki-client