Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          /Kd4KXUD9mKe0RWzbe3CyQBXHXxgd6PO2xkmdk6oL+E=
Subject key identifier:   13:B1:7D:A3:B4:50:24:F5:F4:68:EF:19:0A:59:62:21:3A:AE:7C:AF
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       0196BC37435A1A5B2B4D92D8FC6829D891F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0482
Signing time:             Sat 10 May 2025 22:01:00 +0000
Manifest this update:     Sat 10 May 2025 22:01:00 +0000
Manifest next update:     Sun 11 May 2025 22:01:00 +0000
Files and hashes:         1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=)
                          2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: G8O5GdyprOY5QAwMS9NRXO7ehDy+I8/2P/lOpE3/53w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:43:5a:1a:5b:2b:4d:92:d8:fc:68:29:d8:91:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: May 10 22:01:00 2025 GMT
            Not After : May 11 22:01:00 2025 GMT
        Subject: CN=13b17da3b45024f5f468ef190a5962213aae7caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:c5:7c:83:30:97:8c:42:53:c1:67:27:cd:
                    da:2a:00:7a:8c:ce:e5:74:54:78:8a:50:06:bf:3d:
                    db:92:9c:fa:e0:3f:b6:d1:57:1a:4c:ad:58:6a:51:
                    4a:6d:1c:cb:08:8f:24:b4:08:3a:bc:79:bb:c4:79:
                    58:98:8a:92:7c:3f:90:08:e8:4d:84:5b:1f:0e:b1:
                    6c:bb:2e:1c:a4:2c:82:e4:cf:c8:30:57:38:24:3a:
                    9c:39:69:5e:8b:ff:54:7e:fc:a4:da:b1:b9:42:2f:
                    69:53:bf:c6:33:ee:89:1d:5d:89:10:b0:35:d2:d6:
                    31:13:11:2b:48:62:15:09:4f:c9:7a:77:13:9f:26:
                    aa:2a:b4:2d:f0:b9:4b:93:7d:5c:cc:bb:4a:f5:4e:
                    38:d8:89:80:36:fb:ce:4e:c0:28:98:5e:98:ea:57:
                    3c:be:c9:cc:e5:8e:e9:4b:65:70:92:0b:1b:de:09:
                    ad:8f:42:61:48:02:14:18:53:c3:14:07:5c:a3:99:
                    2a:e6:8c:cb:18:6c:ab:65:a2:9b:5f:2b:e6:0b:7a:
                    4e:95:a1:c1:c7:e0:ea:0b:57:41:e0:87:98:a2:a9:
                    66:81:da:f0:42:85:20:a8:8b:44:8d:9e:91:33:16:
                    34:76:51:b6:f5:48:9b:e8:24:82:40:d3:cb:e7:e1:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B1:7D:A3:B4:50:24:F5:F4:68:EF:19:0A:59:62:21:3A:AE:7C:AF
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:af:b3:99:bb:b9:ee:44:d9:ca:6a:e4:a4:3a:c6:97:11:22:
         e2:0c:1f:b9:73:21:d1:2e:ae:21:c9:0d:9d:fb:c1:0d:17:3d:
         db:8d:1d:49:47:db:52:6c:aa:78:64:2e:09:2b:a0:bd:b0:b0:
         ca:79:68:7d:f5:64:b2:9d:35:f7:12:fa:d2:7e:bf:f1:bf:34:
         2e:5c:3c:be:11:ba:a8:49:8f:9b:9d:0b:2b:bf:f3:b0:72:94:
         f6:42:f1:f8:63:a5:ec:76:78:37:1d:ce:84:b1:09:d6:a1:0b:
         c5:28:97:f4:72:0b:2e:64:a6:42:21:97:97:ff:8b:5d:12:ad:
         60:08:8e:ff:e9:09:63:da:52:2f:9f:bd:31:2e:a2:97:a8:69:
         b0:27:a4:cb:6d:46:34:a7:39:8e:66:e9:ac:da:7f:96:3e:2a:
         38:ab:2b:e8:d5:61:f9:ef:1d:fa:b5:b0:5b:44:e2:eb:fe:27:
         f0:e0:fa:9f:e2:d2:eb:dd:41:33:91:30:01:eb:da:c4:1e:c0:
         6d:1d:3a:8c:8c:f0:f6:b9:0c:15:e4:10:36:2b:bd:1d:c6:7a:
         79:2c:96:1a:49:ae:bf:48:d1:89:27:06:53:fd:de:d5:0b:65:
         b8:11:db:70:99:19:4c:b4:80:32:ae:94:e0:49:d8:2c:d5:0c:
         9e:2f:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:11:48 2025 by rpki-client