Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File:                     ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier:          irFPBQl5yl+eqQYODVcxx8lGYNdHEDqVaWQtZTAjUGw=
Subject key identifier:   04:59:39:CD:E6:43:77:12:5D:E4:B5:3D:2C:8C:E5:48:DF:AA:11:B2
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       0196B9A42D824E0450930D97431EC2CD1E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number:          1532
Signing time:             Sat 10 May 2025 10:01:06 +0000
Manifest this update:     Sat 10 May 2025 10:01:06 +0000
Manifest next update:     Sun 11 May 2025 10:01:06 +0000
Files and hashes:         1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
                          2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
                          3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
                          4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: iVf2WcvusEbvQnyBF7r7Hm2fv8+w9Stsuq8qPiwdhPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a4:2d:82:4e:04:50:93:0d:97:43:1e:c2:cd:1e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: May 10 10:01:06 2025 GMT
            Not After : May 11 10:01:06 2025 GMT
        Subject: CN=045939cde64377125de4b53d2c8ce548dfaa11b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:6b:37:98:28:df:56:c9:6d:c8:97:76:ae:
                    3d:0e:17:0e:b2:8b:88:92:a8:26:ec:c0:9d:2d:60:
                    59:b2:b3:1f:ee:16:d5:38:85:ee:97:6d:2c:83:16:
                    34:f4:62:06:25:93:26:02:db:de:11:0c:d7:1c:34:
                    91:5c:b7:eb:ab:d5:2d:39:4b:ff:28:5a:6e:ac:fc:
                    61:52:a3:c4:bb:1c:a4:60:64:26:27:5d:fd:ab:f2:
                    69:5e:1e:52:d1:a3:f6:4c:4d:98:26:eb:65:cf:4e:
                    ca:f0:a0:34:96:4f:0c:87:18:6b:54:d2:1e:9f:7d:
                    10:27:eb:fd:a3:93:7b:73:f7:48:44:f9:74:ac:3c:
                    57:b3:68:c4:8f:c3:0b:35:5d:bf:7e:dd:68:ad:6b:
                    bc:de:cd:f2:7c:85:0c:32:eb:bf:51:39:5c:35:4f:
                    fd:ae:00:e0:98:a2:8d:15:78:ac:fb:03:59:e8:4f:
                    85:f5:e8:30:2f:88:fb:45:0f:fc:25:62:b0:8e:bc:
                    88:68:05:ed:6d:9d:03:32:5a:21:0a:61:d4:d8:34:
                    58:44:f0:08:23:15:55:0d:76:31:cc:47:b8:77:79:
                    a2:0f:67:f7:69:dc:70:db:56:35:bd:57:fb:33:17:
                    95:17:74:1f:ab:9a:5d:cf:7f:bb:61:f8:ef:c1:f9:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:59:39:CD:E6:43:77:12:5D:E4:B5:3D:2C:8C:E5:48:DF:AA:11:B2
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:dc:40:e1:b8:31:1a:c8:c6:ff:da:11:72:ce:2f:00:37:
         48:18:98:77:41:19:eb:7a:6e:4c:8d:33:7d:fb:a2:f8:5c:bd:
         6c:68:2e:77:9b:04:15:c1:19:1e:a7:45:56:eb:96:01:a8:5b:
         a9:b1:48:1d:1b:73:54:fd:80:57:65:72:ee:1c:3f:28:c1:57:
         7b:5b:60:a9:e0:ec:f3:b4:a1:8c:7b:a5:48:bd:03:e9:2a:76:
         ee:75:fe:60:ff:fc:f9:02:5d:90:90:7a:4d:9e:90:4e:97:46:
         5f:0c:97:fc:2d:ec:a7:75:14:11:49:bc:ff:55:57:29:64:b3:
         bf:98:64:3d:b3:88:06:f9:fe:28:0d:e9:79:ec:f7:48:eb:ff:
         92:f8:b5:a3:25:1d:47:9d:06:14:21:76:aa:43:57:f5:34:90:
         92:a5:05:c5:b0:40:6a:ee:e8:62:53:82:18:62:b8:3b:ef:ce:
         8d:82:04:8f:ad:c5:b2:51:1a:a3:68:f4:46:b4:18:75:f0:88:
         43:58:f6:b0:18:db:8c:9a:92:c6:a6:f5:7b:92:73:21:36:bf:
         a0:d1:5a:96:5e:95:56:6d:00:ca:67:35:80:d7:40:47:58:0d:
         46:62:b7:cd:2a:cd:0e:d3:9a:e7:23:da:e8:9f:47:0f:61:46:
         b9:93:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:06:27 2025 by rpki-client