Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File:                     tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier:          Bf79mM3OMXwoMa/h7+92g+d+0iSRX7dtqAzfBZRrL+4=
Subject key identifier:   77:19:CA:EE:DE:61:98:77:05:B3:0C:C8:00:F4:4A:86:27:3B:04:8F
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer:       /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial:       0196D4ADDF121A53B2A8C87E96099F7B6BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number:          1540
Signing time:             Thu 15 May 2025 16:01:26 +0000
Manifest this update:     Thu 15 May 2025 16:01:26 +0000
Manifest next update:     Fri 16 May 2025 16:01:26 +0000
Files and hashes:         1: 3-CNHKGdJXMpTXntAh-s3qj--cM.roa (hash: 2BpPHYt1k/l10pBcIexz0ktK+xFvs5F87gVofFcEgls=)
                          2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: p5u4L0Lth1qJq1BVllwiDLP0Ivk0DwjJo3CQHRo//3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:ad:df:12:1a:53:b2:a8:c8:7e:96:09:9f:7b:6b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
        Validity
            Not Before: May 15 16:01:26 2025 GMT
            Not After : May 16 16:01:26 2025 GMT
        Subject: CN=7719caeede61987705b30cc800f44a86273b048f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:7c:45:76:f6:a8:7c:81:5f:19:7d:1e:56:
                    a1:42:e8:83:b3:93:8d:35:9e:2c:35:78:9d:d6:f5:
                    0c:27:a6:4f:28:a4:2a:57:6d:44:3e:28:19:1b:75:
                    b7:00:a7:19:d8:1a:fd:86:15:b9:57:56:db:d6:f3:
                    93:3e:20:02:7a:2c:a7:73:03:e6:46:44:01:c6:1b:
                    50:74:9c:c2:44:8e:e8:28:84:78:28:98:89:5c:e2:
                    62:34:4f:50:04:fc:a1:1c:9f:ff:78:8e:cc:70:b1:
                    61:74:e5:57:60:0a:d0:05:2a:36:b0:96:0a:93:fd:
                    40:6f:3c:d8:8a:55:e6:bf:69:27:46:71:d0:bc:5d:
                    18:ce:95:83:4b:16:4c:11:f2:f9:db:e7:a2:11:61:
                    36:ca:8f:8f:47:51:12:49:9e:7d:68:8b:e7:f3:66:
                    b3:4c:f1:26:0d:be:f9:94:c4:9c:98:92:47:e4:2b:
                    28:39:12:9c:41:cc:d9:a6:be:21:8b:76:6f:0f:63:
                    9a:ce:92:30:14:50:cf:ba:95:11:6c:ac:f7:32:b1:
                    c3:0b:97:ad:df:26:29:eb:25:fd:e6:0d:63:1b:75:
                    ea:4c:fa:8a:ca:06:46:46:2d:2b:ca:8e:c1:f1:a2:
                    f4:e1:38:0c:7b:76:d8:3b:6e:ef:ce:d1:5f:e6:6a:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:19:CA:EE:DE:61:98:77:05:B3:0C:C8:00:F4:4A:86:27:3B:04:8F
            X509v3 Authority Key Identifier:
                keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:7a:23:2c:a7:aa:3e:71:02:b8:c7:9b:5c:7e:45:99:a6:
         8a:56:7c:f3:85:8b:ea:16:64:d8:67:7f:7f:ce:70:b6:07:95:
         f2:e4:7b:f6:6e:26:6b:ae:c6:f8:a4:70:46:6f:33:28:5e:33:
         ad:87:ef:b1:c0:6c:af:e4:28:02:6f:71:5f:68:bd:a3:1c:69:
         26:4e:49:d9:ad:51:7d:32:54:1b:3f:87:d3:2f:6a:68:f2:04:
         7a:07:a7:72:33:76:9a:91:48:1e:c2:27:04:ec:70:eb:40:aa:
         c0:35:fc:26:48:e2:3a:3e:67:11:56:39:98:4c:ce:58:26:4e:
         00:29:07:ff:ae:27:b1:d7:ef:04:bb:f6:54:f7:7c:17:38:51:
         dc:05:13:2d:26:24:e9:d5:f2:c9:bc:7d:aa:9b:bb:fd:c1:d8:
         ce:60:1f:de:9f:af:74:5a:f5:86:4b:bb:fa:52:88:c2:29:3e:
         88:03:dd:38:2f:65:b0:48:76:ea:1a:5a:2e:49:1d:2c:d0:98:
         b2:3b:39:36:b0:a1:73:21:c6:d7:65:55:6e:b4:78:98:c0:4b:
         a3:1c:1a:32:6a:c7:ce:88:e1:ab:cd:42:2b:c4:4f:f9:b3:84:
         48:42:cc:5b:89:6f:8a:2b:be:c3:aa:9d:83:cd:e5:3f:83:b0:
         27:1d:6b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:26:35 2025 by rpki-client