Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File:                     L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier:          Zg1jYNIE3X44oSiIHqSJ9fcwEXJ1GtJzADpakGrk330=
Subject key identifier:   22:76:08:D2:FE:24:7B:C8:82:0A:CF:6D:2B:BE:78:26:8C:07:15:91
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer:       /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial:       0196C04B1F04FF4C9C884B0076D0D606484D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number:          12F7
Signing time:             Sun 11 May 2025 17:01:10 +0000
Manifest this update:     Sun 11 May 2025 17:01:10 +0000
Manifest next update:     Mon 12 May 2025 17:01:10 +0000
Files and hashes:         1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=)
                          2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=)
                          3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=)
                          4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: 3o327Rx6rnMQJQlmWxJXGIAZim7gacn2EMsFjYamwoQ=)
                          5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=)
                          6: auh8PiwrTf2v6lpf50WPxKXXVeY.roa (hash: mQnueIBK5DtLGO9VF25YUU0TKwd0Wbv6zpM4STDhWvE=)
                          7: eeJQTXzJRG74gLZzvmSazKWdeSk.roa (hash: apRxPLkLu+OXbwhl6Vtb7LX5Cws2a7TltcG+TguzTP8=)
                          8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=)
                          9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=)
                          10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4b:1f:04:ff:4c:9c:88:4b:00:76:d0:d6:06:48:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
        Validity
            Not Before: May 11 17:01:10 2025 GMT
            Not After : May 12 17:01:10 2025 GMT
        Subject: CN=227608d2fe247bc8820acf6d2bbe78268c071591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:89:19:46:e4:d5:f5:51:1f:ab:e3:d1:29:
                    d5:a8:e5:cf:d2:fc:b9:ea:d8:6a:75:55:5d:de:18:
                    54:30:01:37:61:d2:b0:f6:5d:c0:57:82:8b:e0:ce:
                    07:f3:ca:37:92:0f:98:84:bb:32:6c:17:2f:a9:ed:
                    da:de:85:dd:45:33:4a:60:ba:7d:55:26:be:b0:5f:
                    09:22:fd:10:2f:b5:88:8a:97:b9:7f:3e:c1:9a:23:
                    53:e4:3d:12:b6:ef:ed:5e:29:71:cd:53:32:8f:1e:
                    cc:93:86:2b:69:48:fd:b5:ee:7b:4a:0c:7b:4f:31:
                    12:69:01:53:6e:23:1c:3f:dc:7a:3a:82:73:47:85:
                    16:cc:a2:02:b0:0e:d7:b6:5d:92:01:f4:f7:54:8a:
                    af:74:b2:22:72:39:5f:2d:fd:7d:a6:bc:4c:6d:8d:
                    84:15:cf:9b:72:42:30:34:3d:56:fd:df:17:4b:fd:
                    c3:71:05:f2:2a:21:52:5c:d0:9f:61:97:ac:41:3a:
                    40:21:47:97:b4:fd:f8:e9:2b:23:f1:52:7e:ab:1a:
                    3c:50:4e:ee:81:b4:a9:1a:51:8b:95:02:db:78:f5:
                    64:6c:16:2d:58:97:de:1a:5d:1c:73:2e:37:f7:eb:
                    02:7b:e6:8b:ac:eb:f2:77:49:38:1a:c5:01:01:cb:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:08:D2:FE:24:7B:C8:82:0A:CF:6D:2B:BE:78:26:8C:07:15:91
            X509v3 Authority Key Identifier:
                keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:2c:3b:ee:a7:f1:f9:af:fe:02:0a:c3:c0:ca:6b:0b:92:
         cd:b9:f9:2b:36:e5:ba:bd:05:10:ad:be:30:80:3c:7e:e8:54:
         f0:e0:5e:a6:dc:65:18:97:16:e2:7e:b4:74:17:96:f2:59:34:
         54:3f:7c:f7:36:ad:09:15:eb:67:60:52:25:e8:80:80:6f:22:
         30:36:28:54:16:a8:83:81:12:89:5e:4b:a6:02:5d:cc:d8:33:
         ae:72:20:45:cd:2f:86:df:fc:6c:04:e6:f0:ef:5b:78:44:ce:
         f5:03:e4:32:e0:65:a3:4e:7d:a7:9e:99:9f:12:b4:ee:fd:16:
         84:a3:7a:da:88:e7:30:c4:6f:6f:da:9c:81:ed:7a:a4:98:e0:
         5e:af:e4:31:37:96:68:65:2f:4f:5b:ee:e2:44:ab:d1:83:62:
         d8:60:ff:66:35:98:ed:6c:b5:79:2c:4e:2a:43:86:dd:60:22:
         ac:87:16:8d:48:7c:23:36:6c:35:95:2d:ad:d4:47:8a:e9:31:
         4c:2f:3b:38:fd:4c:4c:f7:9d:f3:28:b1:3c:22:54:24:c6:74:
         e1:d1:1b:f6:4b:b8:51:61:f0:87:38:1d:87:eb:fa:74:bc:b9:
         ae:96:4a:62:67:eb:ba:ea:ac:67:be:b2:1e:69:a6:cf:0b:c1:
         a8:11:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:25:04 2025 by rpki-client