Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
File:                     pLZmyw5UlhFut65nFNkFUwm6aaw.mft (raw, json)
Hash identifier:          7BN9eUDJd7ILG/6MRzNfNbqA7CyJPRd+DDt9cjvG+V4=
Subject key identifier:   E2:A1:B0:10:27:35:15:CC:5E:EA:2A:11:91:D3:7B:58:EE:A3:DD:34
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       01964C346A7DDB9B11582D0DD21FE68B876C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
Manifest number:          1452
Signing time:             Sat 19 Apr 2025 04:00:25 +0000
Manifest this update:     Sat 19 Apr 2025 04:00:25 +0000
Manifest next update:     Sun 20 Apr 2025 04:00:25 +0000
Files and hashes:         1: 1O6glI2J2K4CEfuTTXBO1vPcs9w.roa (hash: lezbWuEr+xxfjQ7K9R9BpiVCkdmnmto7Hh0jNYxUOOU=)
                          2: BZYwSHkSU1KLWpbHc8NjRQbLSb8.roa (hash: dhnOSGwwFwvObL8RZcLi9yQu3vNONDGpXOnywWVyiUg=)
                          3: LAaUd0NVNQpIHaZR5SUI6LgA7Gg.roa (hash: 5+5FAzOXQkcdtdzGOCWdlxMwXUctAKUK6y8PfDSvH9Q=)
                          4: pLZmyw5UlhFut65nFNkFUwm6aaw.crl (hash: kMCQ8gYHuS7r3uD8WDiyLDyF0QNX5IyukFg//CJP3J0=)
                          5: pwv5QI-H4M6f8xqRbONZQS_upNs.roa (hash: MTYzagqMIxomjqD/t1bUXqZqEQSCcmHou8AqaJZXYe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:34:6a:7d:db:9b:11:58:2d:0d:d2:1f:e6:8b:87:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Apr 19 04:00:25 2025 GMT
            Not After : Apr 20 04:00:25 2025 GMT
        Subject: CN=e2a1b010273515cc5eea2a1191d37b58eea3dd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:d8:18:fc:b4:71:3d:d7:c8:f5:dc:d5:38:
                    e1:37:1c:bd:51:f4:0e:a8:24:cd:bd:db:17:b7:46:
                    15:59:c3:c0:ef:4b:8a:bd:39:9e:0c:34:fa:2a:9e:
                    ec:88:b9:36:5f:5e:e5:0c:00:15:7c:99:06:93:79:
                    a1:68:9a:89:55:95:9b:ff:3a:d0:39:db:9b:a8:a5:
                    e1:49:98:10:a1:5e:02:7c:51:a2:04:ca:38:cc:4a:
                    bf:06:dd:2a:63:30:d9:b9:02:e7:22:c6:cb:ae:d0:
                    a3:d8:0e:7e:90:10:99:73:1d:a6:46:42:a2:ae:e4:
                    47:9f:d3:d4:3f:86:cc:6e:b4:6c:89:d0:a2:7e:5f:
                    25:7d:3d:de:88:2d:94:e8:8b:dc:e3:b2:41:e4:13:
                    a1:4e:cb:01:43:38:94:88:dc:a8:1c:51:ab:49:48:
                    85:e5:4d:89:fd:b7:96:ef:aa:ce:d2:65:ce:b0:a1:
                    fe:41:64:fa:77:dd:f4:16:4e:34:0e:4e:4f:e0:5d:
                    99:dc:ec:22:94:3e:11:b6:d3:22:3c:4d:92:05:c8:
                    52:fa:bb:4d:bb:51:07:bb:0b:f5:ef:25:b3:3d:3f:
                    ca:a1:8e:58:b2:44:3d:52:7b:81:03:ce:b3:b9:f4:
                    4a:e6:81:ae:13:47:24:ce:ce:7a:4e:2e:8d:ad:86:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A1:B0:10:27:35:15:CC:5E:EA:2A:11:91:D3:7B:58:EE:A3:DD:34
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:99:af:5e:9c:71:0d:58:83:b9:f5:fe:a9:6d:6e:a7:20:
         bb:b2:be:67:f6:19:43:d7:7c:d5:4f:45:2c:12:ad:94:aa:37:
         f0:14:e8:95:ba:42:87:44:b8:a4:03:5d:53:38:5e:61:2d:5a:
         c4:57:fa:8d:d9:7d:8f:48:c8:a6:e2:aa:c9:22:fa:e0:98:b3:
         a2:21:7a:e5:7e:fc:3d:82:4c:2e:1e:d2:cb:40:38:39:04:c8:
         ec:e2:0b:41:1e:3b:14:1e:8c:90:09:ba:69:1d:72:a7:2b:1b:
         2d:eb:09:54:ca:02:c8:b4:fb:0d:02:46:9f:d9:35:53:cf:b4:
         eb:8f:da:7b:ca:b7:09:bd:a8:0e:08:c9:81:58:18:02:02:2e:
         cc:17:79:6c:b1:79:7f:72:1e:5b:1e:c7:3f:3f:83:94:fe:9d:
         01:79:eb:7a:0c:10:82:a5:3a:e5:a2:0b:2c:ed:38:2a:7e:7b:
         14:88:63:53:7f:08:06:10:f4:6f:ac:06:0c:a8:26:ce:c2:f3:
         71:43:8d:c7:6d:c9:2e:b6:c2:52:27:7b:d3:61:8b:f5:28:ac:
         0f:99:68:e8:c0:f1:5d:9a:18:a8:bc:25:77:46:3f:36:f7:6d:
         51:d1:b6:42:29:81:02:15:66:f7:e7:5d:c3:d9:ce:11:3f:14:
         3a:d1:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:43 2025 by rpki-client