Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          FdYamv/J89uyk0mJIiLWqIXecGe/53nDnu6FSuJrvug=
Subject key identifier:   12:5A:C1:52:45:ED:62:E1:FD:9B:B3:FA:F4:85:D0:63:FF:7B:55:CB
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       0196A16487E7E4510295B1BB0E4445B52920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          0EE3
Signing time:             Mon 05 May 2025 17:00:42 +0000
Manifest this update:     Mon 05 May 2025 17:00:42 +0000
Manifest next update:     Tue 06 May 2025 17:00:42 +0000
Files and hashes:         1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=)
                          2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: 9i1cuUQWgiXrFeR+WZxE+TDzppPqUD2pVAMTQMzKp8o=)
                          3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=)
                          4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:87:e7:e4:51:02:95:b1:bb:0e:44:45:b5:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: May  5 17:00:42 2025 GMT
            Not After : May  6 17:00:42 2025 GMT
        Subject: CN=125ac15245ed62e1fd9bb3faf485d063ff7b55cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7b:85:ab:e7:af:28:51:f8:0a:43:a9:f9:55:
                    88:6a:6f:af:16:6e:b7:4c:1a:53:10:f2:2f:6d:ba:
                    2a:fc:7c:0d:07:7a:1b:a4:96:9e:a6:81:fd:44:af:
                    b7:7d:36:18:c1:20:ef:87:e7:77:71:36:69:ae:b1:
                    4a:2e:84:a7:eb:00:c1:50:66:19:cf:19:78:19:90:
                    1f:90:7e:fc:5f:0e:cb:5c:19:48:dd:16:a9:6e:87:
                    27:f9:52:f4:90:13:e1:11:43:aa:42:11:65:51:88:
                    41:7b:e3:04:8c:0f:23:00:90:73:e9:e6:69:2e:5c:
                    0f:f2:87:42:8e:5f:74:e7:29:36:b7:ed:21:07:0b:
                    98:55:b7:79:c9:f0:5c:49:de:60:15:f5:80:f6:96:
                    11:76:15:f9:14:7a:9f:62:0a:52:09:10:70:83:5d:
                    59:23:09:bb:8f:dd:c0:f8:82:8b:36:77:e4:67:75:
                    6a:71:ee:d2:c6:e7:cb:72:97:cc:92:c4:1f:fe:f8:
                    dc:ff:d5:7f:1e:cd:c1:c5:7a:25:e6:b0:21:6e:45:
                    3c:5c:e1:7b:d8:f6:62:29:2b:0f:43:9c:62:c7:41:
                    bd:63:00:c4:16:43:61:f9:de:27:54:a9:81:cf:29:
                    c1:91:35:6c:f8:f5:20:aa:4c:b2:75:7c:43:08:fc:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5A:C1:52:45:ED:62:E1:FD:9B:B3:FA:F4:85:D0:63:FF:7B:55:CB
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:53:8f:23:3f:f7:9a:8d:a1:be:36:d3:2a:1b:86:01:d1:e0:
         62:25:0e:5e:fb:30:43:cd:42:27:0c:d3:ae:6d:9c:1b:83:7b:
         c4:6f:0d:d6:32:85:4e:9f:12:a7:86:42:aa:7f:a2:6e:76:d9:
         78:d2:9d:8a:c1:e4:ef:dd:70:13:fb:59:b8:a1:f7:5f:02:13:
         06:6c:2f:ed:9b:ba:8c:30:df:a9:ce:62:61:ea:a1:69:61:3d:
         0f:92:24:b3:ff:9b:78:d6:60:7a:66:b6:f6:62:ca:5f:ea:97:
         f7:10:95:57:ce:50:58:27:e0:f1:f5:5e:dc:4a:89:c8:58:42:
         21:18:01:3a:fb:df:15:95:d3:da:63:93:da:14:8b:03:5c:c7:
         0c:68:cb:28:b3:ba:2c:87:54:7a:63:87:30:99:a4:ca:a2:33:
         fb:69:f6:3e:d1:ae:cb:fb:c9:0e:a2:ee:e8:17:7a:d1:b7:7f:
         d1:6e:c6:40:e9:22:da:73:40:cb:88:3f:b3:51:2f:ac:4a:f6:
         cc:99:95:cc:b3:a3:5d:d2:d1:42:5c:71:e8:71:32:fd:76:56:
         78:1d:b1:af:65:ba:c1:72:0f:fc:34:10:ca:5b:5d:b0:9e:5c:
         a2:5d:8f:d2:74:d6:ea:db:ab:c9:86:db:b4:e6:f9:dc:74:c2:
         c6:71:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:50:41 2025 by rpki-client