Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File:                     Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier:          2TaxoMk9w+ETIOX2lPcnjfevpZvZwQEmDgK3h6fYncI=
Subject key identifier:   7C:FD:BB:04:91:C4:46:8B:BB:DC:3A:FB:B7:29:E0:0B:59:BA:A5:DE
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer:       /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial:       019646D76ABFE3E181A34A066866A0677DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number:          0EF2
Signing time:             Fri 18 Apr 2025 03:00:44 +0000
Manifest this update:     Fri 18 Apr 2025 03:00:44 +0000
Manifest next update:     Sat 19 Apr 2025 03:00:44 +0000
Files and hashes:         1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
                          2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: HHOQZmtjGkrERedPMzXxPPY+T8N7B1vE8WzrvBaBFQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:d7:6a:bf:e3:e1:81:a3:4a:06:68:66:a0:67:7d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
        Validity
            Not Before: Apr 18 03:00:44 2025 GMT
            Not After : Apr 19 03:00:44 2025 GMT
        Subject: CN=7cfdbb0491c4468bbbdc3afbb729e00b59baa5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:31:ce:e9:4b:61:76:3b:d0:65:77:37:40:
                    3f:78:b3:7b:fe:ae:6f:db:db:b4:8f:dc:c9:59:9c:
                    b6:b0:08:0b:49:29:7c:db:63:e1:85:10:c0:93:bf:
                    ef:82:9a:32:81:c1:63:66:4a:fd:a9:cc:98:00:62:
                    81:a9:ad:48:a8:f7:d1:b3:8f:bb:2a:f9:22:e7:00:
                    4d:b5:84:2b:e4:9f:17:b4:bd:67:69:da:45:4a:e1:
                    23:4d:2f:07:c6:f3:5c:b0:f9:58:be:10:54:78:e8:
                    1e:2c:51:41:36:16:67:48:66:e7:47:80:db:17:e1:
                    76:f6:ef:7e:9c:aa:3c:45:ca:66:2b:93:7a:cc:d9:
                    a9:45:7a:0b:2e:c7:60:ec:04:e0:e2:fc:d6:7f:16:
                    80:11:59:3d:ef:e4:8e:4b:c9:49:69:8b:70:d5:16:
                    80:10:27:f4:59:c2:75:3f:59:f0:5d:15:c9:3d:eb:
                    bf:db:6d:82:f0:7f:fa:d8:d0:53:11:46:1e:aa:d6:
                    b6:a9:8f:a9:7a:ba:5a:62:44:8a:14:6b:c6:90:04:
                    d1:59:59:40:96:14:4a:47:fd:10:48:1e:c5:de:85:
                    15:fb:4c:e1:d6:3f:4c:dc:f1:84:1a:ae:c3:22:8a:
                    84:4a:d3:0e:a8:51:92:5b:c6:8f:ca:5d:62:83:21:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FD:BB:04:91:C4:46:8B:BB:DC:3A:FB:B7:29:E0:0B:59:BA:A5:DE
            X509v3 Authority Key Identifier:
                keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:5c:b5:04:62:d1:90:83:d9:e9:d6:f5:80:22:14:c8:ad:
         e4:72:d1:55:3c:87:47:9c:7b:77:d1:09:42:72:53:16:80:ac:
         32:fc:a9:ca:06:ea:4d:13:6d:6e:b6:71:33:12:ac:01:9a:d6:
         c9:5b:e2:4f:7a:80:3f:41:aa:b2:f3:e2:c6:18:7a:a8:dd:ce:
         39:c4:e0:e5:62:a6:d6:7e:39:9b:eb:2f:6d:bc:d2:bb:4f:0d:
         9b:86:97:13:25:33:3d:f3:99:81:85:66:ee:73:9f:cb:c9:76:
         e8:8f:9f:7b:33:71:4b:13:98:0e:ec:ee:1a:bb:0d:a0:31:d1:
         d6:58:af:34:d9:e7:a2:28:bd:2d:2b:09:8d:a5:1e:6e:2a:bc:
         46:8b:ac:cb:11:65:db:cb:74:7c:ab:de:a2:22:fc:5a:43:f4:
         2e:43:bb:6d:80:9e:5a:8d:09:15:4b:58:0b:e1:71:c3:50:6a:
         5b:73:e2:f6:99:d0:a9:b9:14:fa:60:ca:dd:31:db:2f:3b:1a:
         2f:e7:c9:c5:0c:42:b8:e7:2b:b6:9e:86:8d:f5:f1:2c:99:5e:
         9a:ab:b3:b0:48:d6:d6:54:54:1f:da:ab:4d:c9:20:29:be:89:
         de:ed:26:b1:14:2a:a0:26:a9:ee:57:59:30:0b:8f:8a:bd:13:
         3d:85:65:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:47:26 2025 by rpki-client