Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File:                     guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier:          BIjB27B3Lq2PY6yPzGWS1XIPkSxp/r6cHi5PIwFtthc=
Subject key identifier:   78:14:5F:58:6A:81:41:AB:1E:50:B8:C0:9F:00:C3:80:66:D6:D6:34
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer:       /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial:       0196B10E71DE5865A13DE41D7B3F7D437C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number:          0C15
Signing time:             Thu 08 May 2025 18:00:35 +0000
Manifest this update:     Thu 08 May 2025 18:00:35 +0000
Manifest next update:     Fri 09 May 2025 18:00:35 +0000
Files and hashes:         1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
                          2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: eJEd2X+ivWUIPJ0fCYgSrYpNJdDhdCYHk2GmsUdRM08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:0e:71:de:58:65:a1:3d:e4:1d:7b:3f:7d:43:7c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
        Validity
            Not Before: May  8 18:00:35 2025 GMT
            Not After : May  9 18:00:35 2025 GMT
        Subject: CN=78145f586a8141ab1e50b8c09f00c38066d6d634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:8f:3f:55:af:69:c0:fa:e9:7f:8d:5f:46:
                    28:f0:fa:2f:f8:2a:12:86:c2:ae:42:14:9c:09:60:
                    72:25:ee:f6:bf:75:fd:5d:58:37:c3:31:37:78:f2:
                    8c:76:7d:95:4f:a9:bb:39:4a:55:66:4e:2f:45:1e:
                    b1:2d:9a:35:75:1c:63:29:83:56:29:cf:1e:96:62:
                    04:e6:2f:4e:e5:93:8d:38:12:0b:aa:6c:f9:48:5d:
                    92:ed:1b:89:16:b8:99:c8:94:87:7b:e9:94:23:ff:
                    e4:d0:89:5c:65:f0:30:43:07:7b:ec:15:f5:fc:5a:
                    77:da:46:0e:fb:b1:bf:a4:06:32:86:7f:fa:7e:08:
                    5a:5b:52:d0:26:e1:f4:e4:c6:0c:e2:fb:31:d4:7c:
                    84:10:b7:12:48:15:77:7a:c4:12:cc:05:a5:80:bf:
                    77:c9:54:94:2e:d1:97:a0:15:26:85:26:68:35:c1:
                    c6:13:0e:20:58:dc:87:13:22:77:69:bd:bb:0b:1a:
                    98:6d:59:16:88:b4:08:b7:b4:40:4c:3d:62:bd:34:
                    fe:64:19:9c:5e:e4:42:0a:b9:63:1c:52:bf:01:37:
                    5b:ef:cc:27:a7:06:5f:9c:ff:b6:52:6b:9a:07:2a:
                    1c:cb:2c:09:a0:02:37:c9:a5:b4:50:a7:66:2c:6b:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:5F:58:6A:81:41:AB:1E:50:B8:C0:9F:00:C3:80:66:D6:D6:34
            X509v3 Authority Key Identifier:
                keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c4:56:6a:88:d4:ab:d8:f4:6e:90:36:96:e3:37:db:6b:2e:
         00:07:0b:99:91:e6:4b:80:9b:c2:1b:07:bc:44:3f:7f:a2:05:
         ca:32:fc:71:c1:6d:15:a3:f1:53:15:c5:b2:13:83:27:6b:5b:
         4f:09:11:57:f1:cc:6d:e7:c5:d9:12:18:81:77:8f:3a:4f:90:
         bf:3b:fa:fb:93:32:9a:d6:9d:30:c2:1a:23:f3:c4:87:ee:3a:
         9f:70:ce:ce:fa:c2:30:dc:4a:47:8f:61:cf:a8:1a:6d:a6:93:
         89:39:c8:e1:45:81:b9:7a:38:a4:39:80:31:d0:d1:94:33:68:
         6d:69:7e:74:d1:32:25:a8:66:8b:0b:e7:50:1c:51:a1:50:77:
         88:5e:6d:47:12:35:a5:11:e9:c0:08:45:b9:af:aa:c5:b0:0e:
         99:42:e9:c2:65:4d:37:98:f0:ed:8f:17:17:fd:b1:34:e9:44:
         18:35:02:22:d4:55:04:43:ef:8e:10:34:a0:ed:84:f7:11:cb:
         b7:f7:c0:e6:f5:11:1c:ce:6f:aa:ae:61:09:a6:b6:f5:48:b0:
         06:f5:ac:3e:ea:bc:e8:3e:77:92:4d:e8:65:3d:1b:f1:4f:89:
         17:3c:1c:ac:92:42:66:68:6f:31:23:12:9f:ca:de:95:d8:d4:
         c9:91:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:56:51 2025 by rpki-client