Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          D/W4R6VLDLkmjT3Jo51LqrdQqdTPDUU3V1cuHKZTWE0=
Subject key identifier:   F3:A7:C4:72:3C:35:C1:FB:F4:FA:FA:DF:4F:EC:0E:F4:23:F3:34:0B
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       0196BE5C6C8860E40E8C987D9E3A80C5151F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          154C
Signing time:             Sun 11 May 2025 08:00:50 +0000
Manifest this update:     Sun 11 May 2025 08:00:50 +0000
Manifest next update:     Mon 12 May 2025 08:00:50 +0000
Files and hashes:         1: 64p5o-0qnUcfwWS02nv_DkPvL3I.roa (hash: niXYitJiZ8IxUWpDspPEEvq6acqCjMtSycTMiACHf58=)
                          2: IX3hpyLIN4WhHMana79sWPUI4X0.roa (hash: rCe6IZNZSjHSC1lZ+kxokCfhrF01W07U8ihTWZLrEJU=)
                          3: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
                          4: JtK5RD-DTIOQNW_JXWGlPrgL9tE.roa (hash: /+XnmRP4/kZj+79ZCDvZV6TsrFKYsjV9u/awORCe7Sg=)
                          5: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: egJBBK4eOeiUV8I/ImlRY8DeA1cD5BS+n9LnZ/UXirE=)
                          6: nBPAeD-HkUuE_ZRaR-1XRv4f_rk.roa (hash: WOmEN3c5juTBj6y1v+aIT3UT7fjHi7/bTZXku3aNpFw=)
                          7: wN38KIesuTmj0VhTYnf66R7aRGs.roa (hash: BHWGJU1hslSu+73+D1D8OPXTiUn1TCww0Wy3SxJIu2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:6c:88:60:e4:0e:8c:98:7d:9e:3a:80:c5:15:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: May 11 08:00:50 2025 GMT
            Not After : May 12 08:00:50 2025 GMT
        Subject: CN=f3a7c4723c35c1fbf4fafadf4fec0ef423f3340b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:a4:42:a6:42:29:f5:db:bf:15:a9:cd:99:
                    fb:aa:5f:3f:ee:27:a3:cb:bb:96:7a:15:e7:8f:bd:
                    1b:2a:f0:2d:2b:f2:ac:be:e4:92:37:c5:38:72:41:
                    0c:27:b0:35:16:86:7e:67:00:5e:0a:95:5c:79:5c:
                    02:02:89:d4:45:2c:16:35:99:99:27:da:96:20:c1:
                    dc:05:cb:e1:d4:2d:e4:97:16:45:31:4e:14:c6:89:
                    4d:92:58:ba:f5:34:e8:2c:66:3c:95:ac:b6:1f:40:
                    b0:46:e3:6f:28:f1:5b:e5:14:d1:69:37:cf:9c:ba:
                    f0:13:c4:42:08:f4:36:8f:60:9f:11:59:df:46:c5:
                    ef:5f:ca:cc:b4:72:51:cc:95:ed:f4:db:ca:e3:6c:
                    ea:31:ae:3c:34:25:71:7d:86:69:c3:98:37:00:d4:
                    46:ac:99:07:bf:1a:11:c0:52:81:cf:32:c4:ed:c9:
                    92:30:23:94:2e:5b:db:a1:27:29:72:e5:aa:94:2f:
                    8a:97:f0:af:46:b8:00:ea:e9:3b:a0:6d:6b:70:63:
                    98:fe:b7:5c:40:59:bf:66:46:05:90:37:dd:35:f2:
                    b8:b8:65:85:9d:f7:4f:62:0e:e7:3e:93:17:32:4a:
                    2f:7e:82:5d:c7:76:f0:7d:97:01:31:ed:8e:7a:4f:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A7:C4:72:3C:35:C1:FB:F4:FA:FA:DF:4F:EC:0E:F4:23:F3:34:0B
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:9c:ac:27:97:f0:bb:33:cd:6e:5a:17:31:24:b5:da:01:
         e6:9d:15:66:61:23:a1:f2:6e:9c:dd:b5:6b:fc:57:39:09:aa:
         1e:71:28:8a:41:6f:1b:17:44:21:17:84:d5:dd:8a:35:8f:fc:
         fc:09:9e:6c:55:9c:be:f8:d0:9c:39:a6:0e:74:24:b5:fa:1d:
         5c:87:88:de:c4:c8:bb:5e:c5:36:ee:88:38:26:e0:80:0b:1a:
         52:5d:68:4b:a3:d7:26:ac:d0:6a:f6:56:fc:d5:ef:c7:10:58:
         39:ad:4c:da:dc:7c:b1:04:c0:90:ff:15:52:3e:ca:a5:c3:9d:
         0a:ad:4c:46:98:c7:19:a6:6d:01:9f:ea:b5:5b:b7:b7:2a:f7:
         27:f8:0b:b1:40:52:5c:05:de:b7:57:30:f7:83:6c:1a:55:72:
         7a:4b:35:13:60:26:2c:33:32:1d:f6:4e:d6:ac:2d:d7:3b:ed:
         3c:58:c6:62:bd:7a:58:bc:98:c3:a4:9c:1b:ef:2e:0d:fc:e7:
         bd:89:90:6c:95:72:13:1a:d9:5b:e4:f8:8f:05:20:2a:f8:92:
         b7:ab:92:6c:91:2c:71:dc:fc:a5:09:e8:18:a0:03:32:14:86:
         16:88:ca:c4:cf:11:36:88:47:f2:77:a4:ac:06:a0:77:d0:e3:
         5d:cf:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:27:50 2025 by rpki-client