Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File:                     r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier:          LyydsP9xw8P7PkR32T8n6zfi5uaNo99niGi4NPrUYTg=
Subject key identifier:   36:5E:1E:8E:FE:68:95:20:7F:C5:E6:19:1D:6B:AE:CB:B9:3B:28:10
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer:       /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial:       01962C736FBBB6DE858D82F92ACA77A21231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number:          090D
Signing time:             Sun 13 Apr 2025 00:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 00:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 00:01:24 +0000
Files and hashes:         1: 1-QcSYLdpveuStLYqlBunMp4JJ5g.roa (hash: NQizYlwEjERl0X/bxZE2nkkRnRTSix4QkB1fVvIKAMg=)
                          2: N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa (hash: kLrijD9G/R0cMvtLz3nwtkgshfFFxhgBoeVfEmhz0ZI=)
                          3: ayI-UL4oibibFX4cW3YWUk6xSTs.roa (hash: N1Uh/40VgHWlkmnSe6ILZ6Uts2Fhgd/GOVLIcEzqLXQ=)
                          4: gnkHs-huFz_Mv1gh2f--oMoTlbI.roa (hash: cAkEhiie/5ypOg0o3pr7TFLqNT0IK1/cxJALcW2pMbg=)
                          5: njDEZbySu24l3-7pqiEP7cKTkYk.roa (hash: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=)
                          6: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: dFepz7puX1p8+IhTZOAWBIEFkt1UDEtWKtlG1J4BaGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:73:6f:bb:b6:de:85:8d:82:f9:2a:ca:77:a2:12:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
        Validity
            Not Before: Apr 13 00:01:24 2025 GMT
            Not After : Apr 14 00:01:24 2025 GMT
        Subject: CN=365e1e8efe6895207fc5e6191d6baecbb93b2810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:c1:32:6c:fc:14:c8:ad:87:dc:c4:1d:87:
                    a8:de:ea:57:72:27:bc:c2:f7:23:37:26:99:f8:f0:
                    41:8a:d5:19:e7:33:04:5c:67:d1:c2:ff:1c:b9:62:
                    7a:3e:52:9f:68:55:5a:e7:96:12:36:36:1e:48:f4:
                    f1:2a:75:8e:cf:66:12:f7:9b:26:bf:2a:f4:ac:01:
                    0c:5b:3e:bb:c8:e5:e6:f6:90:1c:90:1d:33:e7:42:
                    c9:98:65:97:ea:8e:9d:0c:29:bb:96:9e:c0:b3:d4:
                    ab:26:eb:5c:1c:16:b5:e2:06:bf:4f:c5:fd:66:05:
                    f4:91:b1:b4:92:c1:ce:7c:8f:9c:31:bd:89:4d:33:
                    bc:9f:c3:e7:dd:b8:14:03:8f:b5:1a:67:5f:32:c0:
                    31:8f:4a:0b:7c:c3:d3:06:c3:4f:8e:06:17:c2:70:
                    b5:d6:c0:88:7b:15:1b:a7:f9:41:02:6c:29:3d:f3:
                    96:ed:e2:fc:60:7b:df:18:7d:94:c8:e8:db:fb:f9:
                    fd:47:80:ce:ad:27:bf:ae:c5:b7:de:12:49:d8:4e:
                    4f:05:28:55:cb:5e:77:f9:07:a0:69:8f:d5:bb:50:
                    3b:43:b2:83:09:0b:ac:e3:27:5b:63:0a:21:84:02:
                    6a:e9:ff:81:ee:28:4b:3d:67:7e:2e:b5:70:0d:4b:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5E:1E:8E:FE:68:95:20:7F:C5:E6:19:1D:6B:AE:CB:B9:3B:28:10
            X509v3 Authority Key Identifier:
                keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:16:a6:cb:06:94:1f:b5:a8:db:ab:d8:ac:e3:63:79:71:
         71:ce:ad:81:8e:a5:02:8e:5b:34:09:22:eb:49:a9:a4:9e:e2:
         b4:44:63:e0:eb:4b:d1:45:84:eb:fc:69:bb:33:31:9b:91:82:
         45:9f:fc:8a:f5:23:29:f4:d9:c6:f1:05:67:03:74:e8:91:82:
         af:de:59:06:27:0e:a0:98:d8:12:fd:12:be:ff:fb:36:77:b6:
         54:6e:1e:53:0c:ea:8f:e7:aa:33:a3:15:32:d2:41:59:73:a8:
         ce:39:97:5c:ee:62:dc:b5:d4:62:57:c5:61:f6:d3:96:d8:76:
         19:55:67:bb:5c:21:e2:c5:54:f2:2b:d5:c1:18:d5:be:67:f7:
         91:5b:6c:a3:dd:a9:24:6d:ef:19:24:7a:08:c4:ed:b2:9e:0e:
         2b:46:18:7d:3e:4c:28:d1:57:1f:c6:be:04:b3:5e:51:31:95:
         de:72:58:2f:ef:e7:2c:9b:9b:9c:00:2a:a4:6e:55:75:5a:19:
         5e:e0:ad:f5:15:07:96:28:88:b5:10:d3:32:fe:6b:c4:d4:1e:
         1e:3c:07:55:53:2f:c3:6f:13:a7:22:82:7a:cf:40:a2:99:4c:
         af:67:46:96:55:16:44:ce:c4:50:b2:0b:40:37:42:d6:6f:f5:
         b1:c1:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:18:34 2025 by rpki-client