Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File:                     fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier:          /qZtylvds+k+0STnnGFo68Fr2iXbdV+3D4PFDPLmpJw=
Subject key identifier:   1F:8F:B9:51:94:FA:95:61:21:3D:6B:E0:C5:8E:C9:A2:1A:C3:6F:9E
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer:       /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial:       01960309648C9324B173443E867F99B15DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number:          151F
Signing time:             Fri 04 Apr 2025 23:01:09 +0000
Manifest this update:     Fri 04 Apr 2025 23:01:09 +0000
Manifest next update:     Sat 05 Apr 2025 23:01:09 +0000
Files and hashes:         1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
                          2: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
                          3: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
                          4: coSfj5qq-bBDwssiTq9Hp5POjLs.roa (hash: FcB7Nsu3ToXk2Y/7UNKEjLuSRWbjTeUicSQiuAqHIoM=)
                          5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: iRpWCjUn85bYqWLilmIYlbKMCtPhrz/wgrnqXU0G1Fs=)
                          6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
                          7: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
                          8: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:03:09:64:8c:93:24:b1:73:44:3e:86:7f:99:b1:5d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
        Validity
            Not Before: Apr  4 23:01:09 2025 GMT
            Not After : Apr  5 23:01:09 2025 GMT
        Subject: CN=1f8fb95194fa9561213d6be0c58ec9a21ac36f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:34:ba:1b:be:30:32:ac:21:b2:5e:fc:69:
                    4d:04:f0:a8:ea:5e:86:72:09:cd:6d:32:f3:d9:36:
                    8b:e1:af:92:04:14:c0:85:09:64:b4:3c:0d:87:ce:
                    e8:26:4d:31:80:eb:f4:7e:69:14:be:9b:c5:04:6f:
                    4f:cc:4f:dc:6b:dd:a5:6f:3a:39:ee:0b:27:34:42:
                    4b:e4:2b:59:b9:8b:52:91:3e:3e:f0:34:42:18:7a:
                    24:95:41:5f:e0:2f:8c:79:37:1c:24:78:74:e9:2f:
                    98:46:29:08:6c:e9:76:a2:61:57:dd:0e:fe:7d:3d:
                    db:84:76:c1:95:ca:9f:2c:e2:77:19:68:7c:06:42:
                    e5:22:2c:d8:5c:57:48:03:05:ee:f5:ff:28:4f:e0:
                    0a:1a:27:f6:57:46:fb:52:e1:f9:5f:31:d8:ce:26:
                    30:50:d9:81:d3:ca:27:ce:8b:e3:67:c1:c5:33:ad:
                    6f:16:12:7d:e0:88:05:7d:80:7c:0e:05:21:0c:f5:
                    43:b1:67:0d:3a:5f:1e:9c:62:4f:9c:df:0e:7d:05:
                    a3:66:ea:04:dd:b4:02:23:c7:96:b1:f7:30:bd:1f:
                    ff:be:86:48:46:25:ad:c2:df:49:c9:f0:ae:ab:47:
                    45:da:f4:b2:30:3b:90:bb:f8:fb:13:6a:9e:3c:10:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:B9:51:94:FA:95:61:21:3D:6B:E0:C5:8E:C9:A2:1A:C3:6F:9E
            X509v3 Authority Key Identifier:
                keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:d8:09:5f:1b:d9:83:a1:d6:07:f7:b6:6e:9f:26:10:bb:
         bb:1f:1b:16:13:43:2c:98:58:0f:ae:6b:e9:32:14:8e:f6:06:
         7c:5c:0d:d8:b3:a4:e1:57:89:a2:94:f5:7a:f8:65:03:31:b8:
         cb:4d:7d:ab:cf:fe:99:6b:ed:57:8e:e0:e8:3f:c7:1c:66:45:
         65:0d:8c:44:31:e0:b1:d2:0d:36:29:53:28:05:29:c4:75:e4:
         05:e5:05:d5:c8:03:cd:61:85:a1:c5:49:b9:39:eb:e4:99:9e:
         bf:b5:66:08:84:62:c5:f7:c5:ea:d3:4e:8f:02:0d:3e:b1:3c:
         ae:f2:bc:1c:61:14:9d:ef:02:dd:60:e4:10:52:e9:91:d4:bd:
         0e:4a:e5:3b:3b:03:25:11:ce:1c:8c:2b:2f:8e:de:2e:fd:db:
         92:d1:94:1e:cf:32:f4:63:09:0f:8d:14:5a:a8:b0:d2:24:4e:
         00:c2:69:1c:8c:58:23:37:36:aa:7e:0b:52:91:4d:fc:0c:6c:
         c1:c9:3d:b6:73:a0:f8:be:30:11:a0:be:78:b6:e4:23:2a:0b:
         e1:94:b1:8f:32:31:cf:1c:8a:42:37:08:13:7c:d2:17:cd:5b:
         74:ad:77:f7:13:27:c8:9c:a1:ae:65:35:ea:d8:cb:76:3c:3c:
         a3:23:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:46 2025 by rpki-client