Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          mnfljIrxGobw1jlgTfMN+tXqShV8zLPu1sfVhdVC6iw=
Subject key identifier:   5C:1F:09:D5:63:6A:67:11:A0:00:11:29:6C:F4:BE:EF:4D:D1:76:81
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       01969E2C40BF26A13D8EB588FDBD5DBF739D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          10EA
Signing time:             Mon 05 May 2025 02:00:22 +0000
Manifest this update:     Mon 05 May 2025 02:00:22 +0000
Manifest next update:     Tue 06 May 2025 02:00:22 +0000
Files and hashes:         1: 0NC1N_A-fQvGxJ0y6M2HnKF7jRA.roa (hash: ui4M3nog1Gu32ZWTG5lmnhIcOo/8j6eCO17Kb4EZuZM=)
                          2: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: U/qUw0cRtPaRhtrM8xLYWuqGEntY5SVNhZrsVw7ZTAQ=)
                          3: GWXGLTy5YBqJuahnknw3pp_7_88.roa (hash: F9P5UhhuBJy3Os/bi3ejcVABdoW7VW6K8c4LIwZlIMw=)
                          4: Iiq1HkVTZWG93GXR5SmJNt8J3X0.roa (hash: ACz9bOMro7XmfGTKe0GkQ+qfpA1L29Dv5xB1Qya9/EA=)
                          5: thinNa1P3ZJUaDEVnZ8FbvGDQfM.roa (hash: CYpLWQQg8JodrUK5Tb2ZnyWzes+vvTno27KxaS3uako=)
                          6: vk-2RYHviyXKCP3eAAsgKKSkBv4.roa (hash: AV445OcWK5tkwYC3s0HKBp//h5gf47ykPfmI2RcuEUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:40:bf:26:a1:3d:8e:b5:88:fd:bd:5d:bf:73:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: May  5 02:00:22 2025 GMT
            Not After : May  6 02:00:22 2025 GMT
        Subject: CN=5c1f09d5636a6711a00011296cf4beef4dd17681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:28:0d:c1:48:83:8f:0c:c0:1a:aa:85:5c:
                    22:cd:d7:64:c7:84:29:e6:e0:be:be:33:fc:c8:cb:
                    5f:f0:18:68:2a:9a:a0:cc:94:a2:08:49:67:ec:6c:
                    4c:5a:ab:5d:6f:4f:62:66:b6:e6:75:e2:f1:4d:8d:
                    67:95:65:1f:d1:ae:21:2b:dd:b1:d4:7e:2d:d3:0a:
                    df:20:26:b8:e9:18:c6:32:d5:bd:38:ab:4f:53:7d:
                    7f:f6:14:69:fb:51:45:3c:a2:be:88:90:a3:73:8b:
                    01:43:06:60:bc:77:96:77:8d:f5:93:41:09:a6:29:
                    2a:fe:21:6f:65:71:46:ab:e9:63:c1:26:34:56:ee:
                    b1:83:a3:f1:03:0b:0c:8f:0d:fb:49:ad:9c:87:11:
                    9b:03:56:c1:39:91:2b:70:b1:54:5a:31:39:63:c5:
                    41:59:17:cb:60:b0:cd:ff:ea:d1:2d:ca:db:b6:2d:
                    98:72:6a:a9:3b:bb:ef:3b:01:08:75:9a:2e:a1:65:
                    86:47:48:f0:52:a2:92:f6:93:ba:2d:51:1b:32:e7:
                    3d:97:02:cc:11:ec:31:87:58:83:5b:86:00:91:2b:
                    84:d0:2b:63:7d:aa:60:d4:51:a9:9b:1a:1b:db:04:
                    3f:e3:a2:18:22:35:99:cd:ad:e9:5d:de:c7:9b:0c:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1F:09:D5:63:6A:67:11:A0:00:11:29:6C:F4:BE:EF:4D:D1:76:81
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:aa:fb:d3:65:bb:c9:81:85:31:9c:9b:df:d3:9f:e9:34:
         8a:9b:6a:62:e0:4c:bc:d8:2f:39:54:51:f3:41:96:75:4b:ba:
         f7:9e:00:38:ec:1b:8a:b4:0e:58:dd:d3:b2:db:1f:83:4f:1c:
         e1:17:91:bb:d8:22:a4:57:fc:1c:c6:1c:a8:27:30:77:60:7a:
         cf:18:26:94:0d:1a:8c:da:53:dc:63:74:18:22:40:04:f2:56:
         e8:d1:4d:18:c7:54:5f:93:74:d2:42:9d:70:0d:da:bb:8f:60:
         fb:0f:4e:62:76:6e:20:ae:4e:d0:6c:fa:81:85:12:0b:a5:60:
         70:1e:83:14:fe:e8:db:49:49:e9:30:b7:78:6e:6b:0d:d1:45:
         c7:59:59:8a:18:53:ab:1a:19:f9:1f:98:3d:8a:f9:91:b1:96:
         e5:a4:45:1e:6c:31:a1:cc:ca:96:6c:03:6c:13:33:77:3d:55:
         55:8c:0a:4c:a0:8a:b0:8d:e8:f7:25:d1:f9:8a:fc:22:6e:10:
         f8:cb:f5:e7:a1:e2:2d:66:66:4a:d3:6f:4d:de:62:34:a0:7d:
         7c:fa:30:54:81:75:cc:57:03:b8:ca:a6:b0:4b:66:ca:9e:93:
         28:6a:94:bd:54:20:11:74:f8:63:b8:1f:c1:d3:84:e7:b3:00:
         0e:55:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:58:12 2025 by rpki-client