Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          thnMUoljr62AcR6tF+wL991M7Y0KSZIUhxAvr/cnvz8=
Subject key identifier:   8C:9B:09:83:63:3F:6E:1A:75:E2:FC:D0:23:85:F9:47:0B:A4:B8:94
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       0196A389F1576009D2CB691BAA37560FC807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 03:00:48 +0000
Manifest this update:     Tue 06 May 2025 03:00:48 +0000
Manifest next update:     Wed 07 May 2025 03:00:48 +0000
Files and hashes:         1: AUcUK79-20dcWVzVbs60qA_79k0.roa (hash: FTerUGKVvthiTr4P9HvWIOzRwtpT4BbcBUUyIajjaKI=)
                          2: NLujiyLDNINg7_ALKuGpNWHf90o.roa (hash: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=)
                          3: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: dqrp5XHgDZHXPss2lmD+xvR3LrV5Kw6Z3vjbgqlJvPQ=)
                          4: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (hash: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=)
                          5: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (hash: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:89:f1:57:60:09:d2:cb:69:1b:aa:37:56:0f:c8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: May  6 03:00:48 2025 GMT
            Not After : May  7 03:00:48 2025 GMT
        Subject: CN=8c9b0983633f6e1a75e2fcd02385f9470ba4b894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:f1:1e:a7:ae:f0:c0:54:58:89:dc:b1:a6:
                    35:32:a9:3c:69:74:d4:8d:18:39:4c:d8:3f:77:de:
                    f0:06:85:58:0b:6a:7d:9f:6a:4e:19:9e:5f:9f:6a:
                    8d:38:71:6c:b3:d8:0c:4f:5e:e9:9d:f0:67:12:f9:
                    5e:68:ba:e6:c1:eb:ed:db:54:5e:6f:61:93:00:1d:
                    15:4a:cd:c3:2d:72:a3:42:d0:bd:51:57:59:9d:e4:
                    9f:44:77:bc:21:34:90:68:de:6b:08:fc:6b:14:5e:
                    ae:69:0b:d6:49:21:61:32:86:f1:62:c3:b7:11:89:
                    b0:7c:5b:a5:8e:6d:50:bc:f3:7e:7c:93:33:65:70:
                    a1:04:33:fd:e4:75:8c:08:d1:d5:53:34:19:1b:f0:
                    33:97:1c:bc:82:fc:cf:2c:d6:1f:96:fa:78:4b:a6:
                    d4:08:f0:d2:fa:24:c8:11:a2:26:21:45:05:3e:61:
                    39:bf:c7:cd:02:4a:8e:49:85:ab:9a:ad:8a:25:e0:
                    2d:f4:21:0f:31:d5:2b:19:2a:45:3f:2f:63:80:b2:
                    20:b9:60:75:20:a2:15:0c:39:24:20:50:cf:2c:d9:
                    c2:d2:72:4b:a4:a1:9b:e2:c0:af:17:95:0f:3d:fd:
                    c2:51:09:9b:de:31:54:a7:e4:47:10:d0:25:89:0e:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:09:83:63:3F:6E:1A:75:E2:FC:D0:23:85:F9:47:0B:A4:B8:94
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:44:27:f9:09:de:34:5d:f9:55:b9:9d:e4:f5:45:f1:0b:60:
         2e:01:be:6f:40:a8:30:17:72:45:31:e2:0e:f3:11:f2:85:cf:
         e3:f8:e4:d6:05:31:a1:03:d8:93:08:bc:0a:4f:35:4e:2f:82:
         74:87:0f:50:35:bd:35:41:53:04:36:51:4f:e8:c1:27:91:eb:
         49:09:73:cc:b5:dd:ee:26:9c:51:17:18:82:56:9b:c5:7b:4f:
         bc:f0:3c:f3:5f:41:23:a9:0c:b3:e0:c8:df:ce:e8:7f:ad:85:
         bd:60:09:4f:6a:a0:b0:d3:7b:e2:20:68:be:79:35:db:f5:d2:
         6d:85:c0:c3:c9:56:c0:4c:b6:63:73:74:68:7c:bb:64:ed:4a:
         73:6e:7e:3f:a6:1b:92:a2:a9:20:8f:59:64:bf:8b:de:8a:52:
         21:c9:2c:b4:5c:40:ef:2f:d4:8c:e6:31:bc:06:4f:ca:f1:c2:
         a4:04:6d:09:02:56:51:ee:12:4d:28:42:7d:6a:0b:0f:7b:89:
         bd:fb:36:99:ee:5c:e5:73:cc:00:39:f3:df:13:9a:8a:68:8f:
         3a:0c:69:f3:7c:f1:a7:96:ab:1f:c4:f9:34:38:aa:91:97:cc:
         3b:c2:90:14:da:5f:68:e5:35:bb:ca:a2:a9:ff:89:dd:05:21:
         23:86:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:43:35 2025 by rpki-client