Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File:                     hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier:          xQT+k5gFfwSPwZ0ItzU2ksDbopruuGrJvQ/fdbcDMGI=
Subject key identifier:   02:0B:77:A8:22:3D:E4:74:F2:26:3B:15:93:F2:46:4A:EB:B8:84:10
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       0196A3F79D78455ACB1A3B73FF90CA44F277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number:          1565
Signing time:             Tue 06 May 2025 05:00:35 +0000
Manifest this update:     Tue 06 May 2025 05:00:35 +0000
Manifest next update:     Wed 07 May 2025 05:00:35 +0000
Files and hashes:         1: 1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa (hash: AFl9DeBDP0dSG/OK6zMhaGWYU/Hi58NsW+5Sbk8Zc2c=)
                          2: 6N4n07cpVsvDfcO3eEPVPOVbfQg.roa (hash: nhZwGT39i2nPsTiPGKrLhdrJBmLcv3M5z0QYlPKdUVs=)
                          3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: rey4zW/UATKD/fTs8Pua8+IjwL7E27kcV1X/iFh0AAc=)
                          4: jZDFfglCAVXqMiHQiNaCS_ykt5c.roa (hash: Z9pj0iwTHPQ+PmAz+kp9u4GZKNWWC8RI/dko3M2WedQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:f7:9d:78:45:5a:cb:1a:3b:73:ff:90:ca:44:f2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: May  6 05:00:35 2025 GMT
            Not After : May  7 05:00:35 2025 GMT
        Subject: CN=020b77a8223de474f2263b1593f2464aebb88410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:57:3d:cd:dc:60:91:c2:b5:d3:58:2d:d6:
                    4f:98:0b:4b:50:c3:02:32:b3:25:62:b0:6e:be:a1:
                    51:6e:aa:09:4c:d9:8b:17:f5:27:73:97:5d:fb:84:
                    52:19:3b:42:0d:46:31:ac:a1:01:90:56:33:fc:a2:
                    f9:1c:c1:97:e5:78:90:73:0e:48:18:75:48:39:80:
                    4d:67:6d:97:4f:a9:48:04:72:20:9e:88:16:ce:0e:
                    df:f6:c5:27:81:fa:2d:bf:3a:de:e1:8c:97:e5:b0:
                    5f:11:ff:e0:09:7d:18:f6:1d:05:1d:90:f2:95:d6:
                    57:cd:14:9b:17:25:00:f1:ae:61:98:66:fa:0d:33:
                    a2:31:3e:38:ce:4d:2a:d0:ce:fa:fd:b8:77:0c:56:
                    6c:bc:a3:d9:a5:23:a7:ef:aa:34:7d:0f:e2:4e:89:
                    a4:1c:67:1e:68:3b:60:24:c9:ca:4d:df:50:7a:66:
                    4b:ef:ec:8f:60:87:93:0e:2e:e3:9e:d4:e8:0f:85:
                    80:aa:5d:16:bb:d9:5b:1f:08:3e:97:05:6b:e4:a9:
                    3c:bd:9a:50:d5:a3:f9:a7:84:97:ba:ef:de:9d:b3:
                    08:aa:82:86:30:06:db:73:a8:1b:85:f1:f7:ca:e9:
                    da:5c:bb:0a:ac:71:30:76:bd:74:d7:5e:b0:12:45:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0B:77:A8:22:3D:E4:74:F2:26:3B:15:93:F2:46:4A:EB:B8:84:10
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:32:b6:2c:84:d1:1b:8a:02:27:b6:98:e9:fa:81:75:10:
         b7:8e:27:20:ce:06:6c:92:1c:f3:85:8c:53:0c:c1:ba:da:c8:
         e7:16:63:b3:cd:52:06:6d:ed:7b:45:94:46:c5:2e:16:cc:5d:
         2b:70:77:85:02:ba:25:e0:42:07:21:17:0c:95:ca:49:40:40:
         2f:91:ea:3b:16:80:57:3e:26:72:bc:86:ad:b8:7b:f0:e1:fd:
         bd:5b:d6:49:6c:bf:4d:dd:a6:59:c0:5c:8d:0e:61:34:b3:f9:
         39:22:fe:5f:ac:19:fd:fb:44:24:82:76:50:03:d3:0e:8f:70:
         07:29:88:68:90:12:41:c1:72:58:35:81:ba:bb:f7:23:4b:66:
         ee:78:27:9c:e0:a5:51:b0:ca:89:9d:8a:b4:a4:7d:ca:4d:9f:
         47:7b:66:c6:b8:16:f8:45:db:18:2f:46:a0:72:54:cf:b3:39:
         81:94:a8:74:0a:7c:e1:71:56:b3:5f:39:db:c1:99:9e:8f:f8:
         47:2e:08:0d:02:e3:b4:b6:f1:aa:ba:c9:f7:e3:fa:dd:2f:d0:
         33:b2:01:89:eb:72:52:28:f3:d1:4b:3e:86:6d:cb:ff:65:20:
         51:51:0f:6a:bc:a8:14:b8:07:54:87:5f:c6:63:aa:78:cf:f8:
         a8:7b:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:36:39 2025 by rpki-client