Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          aqXdni8EX2MqKNl560MOj3NpfFcwG7CtF3MNJFFSEDs=
Subject key identifier:   88:FB:E4:95:BB:54:B5:09:B0:B6:E8:2A:DB:BD:D1:B8:EA:55:0B:D2
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       0196A2E4CDC96D8BC430A7A9EF7F4980AF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          1268
Signing time:             Tue 06 May 2025 00:00:25 +0000
Manifest this update:     Tue 06 May 2025 00:00:25 +0000
Manifest next update:     Wed 07 May 2025 00:00:25 +0000
Files and hashes:         1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=)
                          2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=)
                          3: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: wC9OOm/X4eEylLa94qLmcpp0H8obTWbJVQL3LVqTGoo=)
                          4: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 00:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e4:cd:c9:6d:8b:c4:30:a7:a9:ef:7f:49:80:af:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: May  6 00:00:25 2025 GMT
            Not After : May  7 00:00:25 2025 GMT
        Subject: CN=88fbe495bb54b509b0b6e82adbbdd1b8ea550bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:c3:c2:c3:62:ed:73:77:cc:60:27:59:d3:
                    16:cc:21:48:c6:25:50:6a:2c:1f:f3:74:e7:ef:90:
                    48:54:37:56:5e:83:f3:f9:18:b8:35:ec:f4:90:b4:
                    ad:28:cb:52:4a:be:22:8a:ce:d6:5d:5e:39:b4:01:
                    46:1f:f6:9a:e0:33:9f:37:ea:bc:fb:b5:85:6b:d2:
                    f7:a9:20:ec:90:f2:9c:cb:a0:46:52:fe:fc:a8:1c:
                    d0:0a:37:ac:1e:33:b5:96:04:76:81:6a:96:c5:9b:
                    93:db:88:3d:76:46:91:3a:3a:18:49:e0:53:5b:81:
                    1f:8a:e6:6e:6d:40:94:c6:d4:0d:80:f8:4d:76:3d:
                    38:ad:09:1c:a3:8c:c8:dc:c4:44:cb:e8:31:51:69:
                    87:43:d0:94:d4:43:98:14:31:59:08:08:9e:52:94:
                    b7:16:fc:5c:34:d3:a8:ff:83:2f:12:2d:69:f0:8f:
                    04:1a:37:1b:c7:e9:26:c7:75:cc:ea:a3:2b:c2:38:
                    7c:66:df:2e:4c:12:c0:c5:e9:98:a3:a7:db:3c:57:
                    ce:a1:7a:4d:a5:1d:44:d2:9d:62:d4:78:b3:8c:d9:
                    72:70:99:bd:6b:85:6a:cc:ee:57:80:79:e0:81:f0:
                    e2:11:55:a8:7c:31:45:89:42:4c:29:ab:55:09:cd:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:E4:95:BB:54:B5:09:B0:B6:E8:2A:DB:BD:D1:B8:EA:55:0B:D2
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:71:ad:aa:29:a5:a3:d2:cd:a8:de:a5:f4:06:8f:80:b5:
         1b:8b:a2:78:71:e2:07:88:92:91:25:b6:00:c4:ed:3e:cb:89:
         28:e9:bc:10:0d:5e:dd:fd:ed:4d:eb:97:32:24:91:9c:5f:98:
         e3:d3:ea:5e:1e:c0:73:28:a7:1e:5c:6a:bb:18:77:11:d7:b5:
         31:ab:aa:bc:43:d0:05:1d:1b:c0:90:0e:3d:6c:08:05:b2:d8:
         fa:e2:8b:4e:fb:2b:9a:af:48:cc:9a:15:75:02:73:8c:40:ca:
         94:36:78:a6:4f:f9:8d:d9:2f:18:4a:83:8d:3d:96:c3:fe:e0:
         b5:43:cf:b6:e3:2e:bb:41:fe:b1:0e:37:04:8e:09:ca:99:99:
         cb:34:d5:0b:87:53:7d:ab:56:41:a5:99:b1:c4:bb:29:b7:97:
         29:89:7b:d6:5a:49:08:6d:58:a8:4a:ab:33:74:41:63:79:5a:
         a3:f8:77:5b:11:26:d6:27:05:50:d6:bd:4f:1d:4a:e4:ab:6e:
         78:28:d8:43:b5:9b:f4:fa:d0:45:74:a2:c2:b9:dd:b9:c1:6a:
         76:33:2c:eb:18:de:72:d5:60:ea:82:da:db:02:18:63:84:cc:
         f6:e7:53:05:48:aa:06:db:40:e4:0a:4f:48:c6:83:be:a3:f9:
         7b:f7:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:17:25 2025 by rpki-client