Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          aBkhi7XTV3M977r6WcagZA9dOr8p+u9XSc4n/1npXNQ=
Subject key identifier:   A5:83:38:43:EF:1C:14:D8:22:06:2F:E8:AF:17:37:42:E5:DE:2D:CE
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       0196AAD55FC9532882827232CA16DEF0B4D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          0CE6
Signing time:             Wed 07 May 2025 13:00:32 +0000
Manifest this update:     Wed 07 May 2025 13:00:32 +0000
Manifest next update:     Thu 08 May 2025 13:00:32 +0000
Files and hashes:         1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
                          2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
                          3: O_iSn-Hf6-lnBBBbeU5NCT30t74.roa (hash: fcavUHH7An7gJsOUK6AQo06SMjoUinMgDZMiN3IKqHA=)
                          4: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: TxPtuxbdH5ceIloWSN6bshbX+DQtSibG/X18fH0saI4=)
                          5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:d5:5f:c9:53:28:82:82:72:32:ca:16:de:f0:b4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: May  7 13:00:32 2025 GMT
            Not After : May  8 13:00:32 2025 GMT
        Subject: CN=a5833843ef1c14d822062fe8af173742e5de2dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:af:cd:7e:45:d5:69:0b:1d:45:21:98:66:
                    22:45:7c:0c:f5:e9:b3:00:24:02:05:bd:2e:ec:8d:
                    56:69:a9:b5:d3:aa:d6:14:f0:09:3a:cc:fa:f5:41:
                    5c:42:cd:fa:72:d8:a6:7a:b9:ff:e2:ba:5a:d3:9f:
                    a4:a8:ab:a8:9f:ae:47:d8:b8:38:a4:74:4c:09:57:
                    74:9b:6c:bb:5e:a1:2f:db:00:b4:4c:19:43:b4:db:
                    50:ac:6c:4e:0b:c7:59:2b:e4:07:c8:8b:3c:00:64:
                    bd:73:1c:65:f2:2c:47:77:3d:b0:fd:ea:fb:bf:07:
                    37:0b:11:0a:45:b4:8a:cc:8a:5f:3c:bd:33:e8:d4:
                    9a:64:3a:90:ea:e8:ec:01:f7:c2:6f:99:8f:ea:15:
                    23:76:7b:03:f6:af:c9:b6:24:b1:fb:83:6b:09:5b:
                    8d:df:f4:40:0b:b4:1c:02:4d:52:7d:28:c4:25:6c:
                    4b:7c:22:14:c0:b8:d9:0f:9e:53:85:a9:ca:70:77:
                    17:95:5e:9c:4d:30:1e:ac:0c:42:72:f5:36:29:f5:
                    b9:c8:e4:f3:06:ef:4e:58:54:ee:6c:8e:81:62:15:
                    3a:59:7d:e6:cf:b2:f8:27:82:68:ef:e5:a6:04:a0:
                    e2:20:9d:5c:9f:31:11:ec:99:3c:22:1f:3f:a3:41:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:83:38:43:EF:1C:14:D8:22:06:2F:E8:AF:17:37:42:E5:DE:2D:CE
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:7f:d4:d9:ee:65:fc:72:a7:ae:36:b6:ba:77:4a:9d:97:
         4c:78:27:08:5a:76:5c:c3:34:ef:01:16:56:32:a6:d6:68:e3:
         15:d3:6e:a9:8d:02:31:0d:d4:aa:43:45:ba:cd:f3:21:b2:0b:
         f7:8d:6e:21:cd:2c:f4:fb:b0:be:dd:98:6b:d0:58:48:48:a3:
         cd:b3:2a:b4:4b:bd:b3:03:f1:db:0e:db:da:8f:ca:04:d2:85:
         07:a2:c8:d8:f8:60:1e:49:e4:a3:06:21:07:19:1a:cc:e1:93:
         e4:80:e3:ce:3e:0b:14:05:99:ca:88:a9:9b:77:56:b8:69:bd:
         28:e5:4f:a5:95:11:f5:b6:ca:ad:5b:d2:e6:5f:ff:ac:43:d9:
         b9:2e:33:34:b5:9e:71:07:fc:a1:ee:1f:12:c1:9c:55:dd:53:
         11:59:79:4a:f5:ec:72:fa:12:5c:c4:83:65:15:5d:d2:4b:4f:
         80:db:36:19:f2:a8:d7:7f:d7:4c:a0:52:92:7a:2a:90:78:f4:
         99:5a:53:d3:44:07:7a:97:0e:04:7a:37:e0:6f:b4:5a:82:30:
         ec:67:a6:e8:bf:55:d7:aa:02:7a:15:52:f7:cd:09:1c:38:ae:
         8a:ff:1d:fc:33:7e:b3:8f:ac:bd:87:c1:51:ee:f1:88:f0:a9:
         86:c7:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:29:31 2025 by rpki-client