Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File:                     GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier:          xaiQd94fM493np6FYCWA6jf1aG1zEBL0QG9nNqfluPY=
Subject key identifier:   75:0D:D1:CC:63:83:89:5B:E5:C5:44:A1:72:99:21:53:7D:ED:79:4F
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer:       /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial:       019645FB67431FD41F9121085E54036B7F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number:          14F7
Signing time:             Thu 17 Apr 2025 23:00:25 +0000
Manifest this update:     Thu 17 Apr 2025 23:00:25 +0000
Manifest next update:     Fri 18 Apr 2025 23:00:25 +0000
Files and hashes:         1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=)
                          2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: yhWxs20mJlF1i8upPHAUPNVsuYnr3zMpOXk1J/ty2hY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:fb:67:43:1f:d4:1f:91:21:08:5e:54:03:6b:7f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
        Validity
            Not Before: Apr 17 23:00:25 2025 GMT
            Not After : Apr 18 23:00:25 2025 GMT
        Subject: CN=750dd1cc6383895be5c544a1729921537ded794f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:d5:08:3b:de:df:95:9a:24:93:ad:c7:79:
                    fe:be:1d:d3:a0:4e:23:43:d9:e6:5f:ad:30:fc:b0:
                    ff:80:1a:7c:5c:f0:20:7f:ec:4a:98:a2:32:2d:6a:
                    48:ff:cc:3e:90:2b:82:25:3d:6e:5b:b8:56:06:f9:
                    e7:0c:27:a2:34:25:7b:c1:0f:e5:2d:e5:26:d1:fc:
                    5d:5a:b6:57:b8:2a:08:c6:5d:3f:ac:00:0f:cf:72:
                    5d:95:65:3d:a6:bd:bc:a8:f6:7c:81:64:78:0d:77:
                    7c:1f:fc:dc:19:29:41:ca:c5:70:be:1d:72:9c:1f:
                    3c:46:c4:79:58:d3:3b:93:da:0f:9d:c1:81:89:cb:
                    9b:de:55:fc:7b:db:49:68:32:0b:f8:0f:46:5d:58:
                    c3:78:16:9f:d4:e3:e4:3b:c1:f7:2a:b5:4c:35:0b:
                    ca:66:0b:2a:fa:59:8f:c3:cd:7d:11:b0:12:be:ee:
                    17:64:26:10:9e:27:9d:fb:3d:87:b2:3d:7b:5a:f8:
                    f0:e5:4b:45:a8:7c:80:f5:69:ab:f0:bb:e0:db:6b:
                    55:b4:26:e6:2e:6b:2c:18:40:10:92:a9:de:94:27:
                    19:e5:30:33:df:74:95:6f:68:9b:fb:82:50:f9:0a:
                    f5:72:c2:0d:a6:9c:e5:35:7b:c3:cf:f9:b7:92:d1:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0D:D1:CC:63:83:89:5B:E5:C5:44:A1:72:99:21:53:7D:ED:79:4F
            X509v3 Authority Key Identifier:
                keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:63:42:ec:10:3f:36:6e:2e:67:6d:1f:dd:bc:f5:4d:83:03:
         e4:40:ea:48:93:64:0b:d0:37:29:6b:8b:86:ec:c4:07:1a:9a:
         aa:d6:87:4c:0b:3c:ac:9d:a4:6f:e3:c1:2c:77:20:c2:95:87:
         d9:a1:05:00:4a:76:a3:ca:6a:65:47:2b:13:39:e9:48:86:7a:
         92:b5:0c:13:b2:43:64:62:10:c6:5f:2d:4b:a5:d3:20:cf:82:
         6d:d0:55:fb:f3:68:42:19:35:a1:26:2e:c9:5d:81:7e:c0:15:
         6c:a8:cb:a5:2d:5f:b5:61:4d:9f:41:b9:37:73:c6:fa:7f:b6:
         f0:a0:76:42:de:a2:dd:2c:9b:2c:c6:a4:3f:a4:14:8c:b0:82:
         d4:49:21:b1:d8:ba:23:4c:bc:ab:58:3f:b6:fc:de:ef:42:32:
         4c:eb:2b:ac:0c:fd:81:ac:12:63:3f:73:1b:b7:c0:b1:bf:dd:
         98:93:15:d0:81:93:e0:16:cc:b0:7a:d7:c0:b5:d2:87:1f:e1:
         fa:5f:82:ad:6c:e0:f6:80:d9:4f:ea:b3:52:74:6b:f9:b1:dd:
         f3:db:89:09:3f:2f:04:3a:da:3e:e3:2c:1c:d0:aa:da:4f:d9:
         b3:fe:06:1f:2c:cb:05:f4:e2:ec:e3:63:bb:c6:5f:a4:6c:cf:
         d7:00:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:18:53 2025 by rpki-client