Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File:                     GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier:          eP1S9CEAk2ty7uRXQAJZnkTzdzUUAyNRxG0XHaiINw8=
Subject key identifier:   A3:05:D9:40:E8:8C:FA:C4:27:BB:FA:5E:28:DB:7B:A3:0F:36:29:D3
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       0196A19B38E963E436F0ADDE34BC8B5D8F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number:          153F
Signing time:             Mon 05 May 2025 18:00:26 +0000
Manifest this update:     Mon 05 May 2025 18:00:26 +0000
Manifest next update:     Tue 06 May 2025 18:00:26 +0000
Files and hashes:         1: 1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa (hash: 0Pd6o8RRKlvvsS/YlVCGhUpZijHcF0bp4ry/V9YxdXE=)
                          2: 8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa (hash: PFZiPiXQsPniAQ08Y5K+gzotL1tE/fkVxovwe7IBhnM=)
                          3: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: allTPE2cXMZTriqkzGj3I6iZx3OfktVzFNXVVtbTVBU=)
                          4: Jfkb9wIjflJ9g_nlBWaCF6laiWU.roa (hash: /ljWZ+p/6L9vGqqgT4FUCtEB1Y8qOikrC1+ICoRutK4=)
                          5: eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa (hash: AL9fqh7ceKqnHM3PxeRD473MOSaIbFz8D+64dfZV0bI=)
                          6: shcI5ksCijvvRLID7bxpTU4Ek38.roa (hash: 5j6UIvbPGZk819fhFv2lIK9RILlN83FerZg8FUEwxJA=)
                          7: ujnhV8Opl7rPc_VLJe9oWdnsfZo.roa (hash: nAwtKj7g3ynj1in/AG8n1Nua6ASmEjUSoAVAQeOJNow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:9b:38:e9:63:e4:36:f0:ad:de:34:bc:8b:5d:8f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: May  5 18:00:26 2025 GMT
            Not After : May  6 18:00:26 2025 GMT
        Subject: CN=a305d940e88cfac427bbfa5e28db7ba30f3629d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:6f:87:8c:81:74:3f:77:46:fc:d0:f7:e9:
                    b6:db:de:6e:61:f9:69:de:ff:e1:87:6d:be:99:1b:
                    f2:05:a8:0f:74:16:79:84:2a:c8:e9:55:c7:03:8c:
                    f6:ba:a4:ea:74:77:12:38:60:c6:7d:33:82:0a:98:
                    f2:a0:17:13:db:6f:a1:cf:89:14:9c:48:7b:51:8d:
                    52:5a:34:11:2a:5f:c5:70:4e:7c:ec:21:48:4a:30:
                    d1:48:73:59:6d:5e:d5:fc:8b:b9:47:81:0b:6d:c2:
                    e3:53:85:39:e8:30:28:79:04:db:ec:57:ab:f7:94:
                    13:68:e7:72:92:13:1f:fa:7c:97:a2:f7:11:f5:29:
                    73:35:ae:11:73:a6:00:48:ef:89:36:4f:86:4d:0a:
                    d3:29:70:87:31:8e:a6:e6:33:55:9b:c3:92:88:31:
                    59:b9:ee:77:3e:6d:5f:2c:c2:89:68:39:f4:8a:d4:
                    26:84:6b:b0:d3:31:a0:8e:07:56:bf:2f:37:95:92:
                    4f:0d:a5:01:83:3f:c2:f0:95:56:50:d4:0b:5f:b3:
                    c9:5f:41:d9:cc:b7:b0:4a:59:35:1b:90:fc:03:bd:
                    c3:4c:91:ca:05:96:fb:cb:75:4b:05:a9:75:8c:6c:
                    c4:d2:91:4b:c1:19:a5:b5:af:24:cd:f2:d6:81:cf:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:05:D9:40:E8:8C:FA:C4:27:BB:FA:5E:28:DB:7B:A3:0F:36:29:D3
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:57:b6:47:a2:65:88:0b:27:d7:e4:02:aa:e8:28:cb:d4:
         1b:ad:d2:df:cb:a7:00:20:9c:75:c8:cc:ad:06:1d:00:24:47:
         cc:d7:fd:2a:80:2f:6e:89:a5:4a:3e:62:18:f2:f8:9d:ff:62:
         e6:99:69:62:14:3a:7d:52:ed:30:86:cb:e3:3f:6c:51:c2:c8:
         8c:52:c6:9b:57:21:53:bd:b5:0c:33:1b:5b:9f:37:11:a1:f3:
         b8:74:60:6c:3c:bf:68:8e:b7:dc:69:d6:a3:51:29:73:70:6d:
         df:e6:c8:34:fc:41:dc:40:5e:c7:1b:43:e0:f0:31:47:5a:8c:
         0e:8c:40:74:dd:a6:93:94:fb:d9:4c:d1:29:88:57:33:b4:cd:
         32:7c:13:c6:69:9d:8d:ed:d0:8f:28:4e:88:e7:68:1a:ad:29:
         12:9c:7b:2e:4c:b3:d3:ea:76:ed:b7:5b:27:4b:26:4d:70:be:
         85:26:d9:6e:f5:5b:c9:40:69:10:33:75:69:88:b2:c0:ff:13:
         1c:c8:36:29:ce:79:c5:72:d3:1f:0c:a8:d6:86:ef:3f:5d:3b:
         ca:c5:8d:b0:35:17:2e:99:32:cc:58:6b:2b:63:dc:9b:ba:1b:
         dc:23:70:4d:61:c2:9c:be:70:80:01:03:96:cd:c6:33:6b:1e:
         a2:19:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:05:49 2025 by rpki-client