Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          FF/9TTLLZXE5b3yXgS61C4HaZdS9a8m4JgqHL5YXmkU=
Subject key identifier:   35:28:38:40:8A:45:BE:D5:CF:59:09:83:12:C6:A2:C4:BD:BA:03:F1
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       0197CEA924CE4D4B4F750677BF13C89515AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          0F58
Signing time:             Thu 03 Jul 2025 05:01:20 +0000
Manifest this update:     Thu 03 Jul 2025 05:01:20 +0000
Manifest next update:     Fri 04 Jul 2025 05:01:20 +0000
Files and hashes:         1: 8FzhGMtZv2x-9zLN2UYHeQV341o.roa (hash: qGnveFjiOnO4NOM7gilbdoFw5wFNnGKNy0BPR46F8X8=)
                          2: A454pJNoUsORGbO3OAfK7YV_Whc.roa (hash: ktLhYNOBSpXYd1+zR/ovh2Wfy7oD07XxrxHk2YHvGTs=)
                          3: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: pDqM0fpKtakoBpe7hO4wA1kwIidwom2r/1YodjPTSH8=)
                          4: VKJdOQxl7p8p7x4aN4Wby4zX0pY.roa (hash: yezqvXwILM44YJ3tHBGsCwM+mCK4UNXyobV3FDKf4iQ=)
                          5: eDgDXUFrSK7xUZkPtBuSB2bzf-g.roa (hash: EmMIdVFxxDw1T5QOtxoH7PieLIsGiM73XYNo7gIlAMg=)
                          6: egnrXyyNbGvpg6aIGoEfRznijCU.roa (hash: 4f5nrivsxBbMxXIQjQ1VQo/t3u3N6GzzpzWYXL7wFf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:a9:24:ce:4d:4b:4f:75:06:77:bf:13:c8:95:15:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Jul  3 05:01:20 2025 GMT
            Not After : Jul  4 05:01:20 2025 GMT
        Subject: CN=352838408a45bed5cf59098312c6a2c4bdba03f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:df:af:47:a2:fe:53:dd:1d:f5:14:b6:39:
                    17:06:f8:26:9e:66:fe:08:5c:83:00:32:31:76:80:
                    c1:33:62:50:c6:26:ac:e8:16:4d:5d:12:cf:13:0b:
                    42:8b:6c:4d:b4:93:3f:9d:ba:db:59:24:a3:c2:80:
                    f8:63:33:59:3d:36:b6:8a:f2:5e:53:c6:e3:d8:a6:
                    69:8b:02:5f:b5:ad:cc:9e:93:d5:c7:64:9e:32:e6:
                    7d:8c:72:01:4e:9b:57:a6:a6:43:50:80:84:81:01:
                    8d:7b:6c:85:15:86:6f:33:93:db:55:fe:86:c2:e0:
                    fd:99:4c:0c:4f:90:72:81:7a:f9:75:77:22:58:f4:
                    e1:55:e6:20:39:8e:d2:de:13:a6:36:74:b9:d2:6f:
                    21:b7:4e:b6:09:a6:86:15:33:2e:69:32:ff:15:47:
                    00:34:bd:79:90:83:99:2c:4f:65:28:6b:da:34:68:
                    f1:82:f7:31:20:49:97:a0:3f:5e:9f:6e:d6:7d:d4:
                    01:4e:44:39:19:a9:0f:39:26:38:64:66:0f:82:ac:
                    fe:a1:00:34:6b:20:33:8b:da:9b:e8:b2:94:27:6d:
                    bb:ce:07:21:aa:9f:f0:44:ec:33:3c:f4:ab:e3:63:
                    94:75:7d:d3:9d:23:b6:af:c8:7c:43:70:c0:87:99:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:28:38:40:8A:45:BE:D5:CF:59:09:83:12:C6:A2:C4:BD:BA:03:F1
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e9:4b:03:57:b8:e0:0c:ce:48:4a:b4:a4:10:f8:b2:a7:03:
         44:1a:31:9b:8d:47:a9:77:c5:b9:03:2b:91:20:c0:e7:70:6d:
         07:5b:d7:0d:9f:2f:fa:7d:88:88:d3:54:3c:83:66:53:89:5f:
         5e:31:75:e9:4f:50:bc:a9:70:d4:40:c1:71:e5:21:19:33:10:
         63:a0:c8:db:9e:5b:82:44:59:b9:87:1d:ac:0d:7d:e2:e0:c7:
         df:a9:ca:86:18:9f:a8:a0:f0:fa:ba:1f:44:a1:b5:fe:9d:ba:
         29:e5:92:d7:f0:95:c8:e0:83:02:7b:49:bd:47:41:fd:ea:2d:
         22:cf:c2:1b:ff:3f:dc:91:86:bb:f4:a7:23:32:a7:ae:26:ed:
         fd:2b:5b:bd:87:b2:f4:d4:b4:53:6f:71:49:04:6b:42:65:5a:
         91:bf:93:57:1e:74:67:f5:88:09:53:66:79:a6:86:fc:55:c8:
         2a:25:81:ed:50:9c:7e:1d:7a:f2:b8:16:49:63:c1:fd:a5:b5:
         fd:ca:cc:51:db:b6:f5:ed:22:8e:e1:72:6f:f6:71:a9:2c:79:
         f9:94:a6:75:00:95:b4:da:d3:b7:17:2d:76:a8:3e:fe:cd:4f:
         a2:d0:50:58:93:fc:c7:b6:75:d9:5f:07:d9:30:14:e2:f1:d0:
         f5:4a:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:52:21 2025 by rpki-client