Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          0c8rUco6A+PSR+pyNUy+nFKw9nT19irvzM84AqhmIWk=
Subject key identifier:   51:CF:F0:9D:D4:1E:02:E5:38:51:04:B9:18:8B:61:55:E6:00:E8:C8
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       0196D776E7BC444CD746B3BC842BDD482DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          128C
Signing time:             Fri 16 May 2025 05:00:16 +0000
Manifest this update:     Fri 16 May 2025 05:00:16 +0000
Manifest next update:     Sat 17 May 2025 05:00:16 +0000
Files and hashes:         1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=)
                          2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=)
                          3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=)
                          4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=)
                          5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=)
                          6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=)
                          7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: lAdXNw8a2Sdn9L2k8R9ZJe2IKi2lZNVzuhwYrYSkkE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:76:e7:bc:44:4c:d7:46:b3:bc:84:2b:dd:48:2d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: May 16 05:00:16 2025 GMT
            Not After : May 17 05:00:16 2025 GMT
        Subject: CN=51cff09dd41e02e5385104b9188b6155e600e8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:b2:f1:c0:11:2a:11:27:d3:7f:de:c1:a9:
                    d4:01:31:4e:6a:8f:69:bf:c0:2b:8b:00:2a:e6:c6:
                    1a:bf:f1:54:db:e0:97:a9:0b:24:37:e0:4f:50:55:
                    0b:13:9a:ab:8f:bc:25:2b:48:af:61:ac:cf:7f:a8:
                    d4:1a:5c:c4:86:5a:a2:4c:fd:da:e2:af:a3:35:08:
                    8d:fc:21:0b:0e:47:4e:50:06:53:62:a0:b9:bf:69:
                    27:36:60:9a:fc:c2:26:cd:c3:38:ed:e3:58:33:b8:
                    8e:1c:f3:43:9f:b3:7c:37:e2:2b:0c:56:11:93:e9:
                    81:24:b6:7e:c1:dd:3a:09:6d:64:83:91:1a:f3:51:
                    b7:dc:0d:5b:3b:5c:f8:6f:7b:ca:33:88:10:5a:a9:
                    c4:63:1d:a0:5e:f0:56:e9:85:f4:f6:2e:aa:42:73:
                    3c:1e:51:fe:d0:fa:11:3c:fe:7b:24:75:21:f0:23:
                    1c:5c:63:65:f0:44:11:49:c6:27:e4:5b:22:b0:88:
                    06:55:fb:b1:30:d2:d8:07:42:85:5f:af:29:e9:ef:
                    38:42:1a:31:0a:eb:83:94:80:c6:da:81:e3:12:9a:
                    f7:21:c3:7a:ba:77:e9:4a:e3:3b:e0:67:4a:9d:46:
                    19:74:17:7e:7d:44:70:27:98:a6:6a:91:7a:42:40:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CF:F0:9D:D4:1E:02:E5:38:51:04:B9:18:8B:61:55:E6:00:E8:C8
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:56:94:40:a1:63:76:aa:d5:42:da:fb:d1:9e:fc:a7:9d:
         d9:60:20:b0:b4:27:32:33:ed:e3:47:5e:d6:a8:d6:aa:d0:97:
         98:61:c3:c9:5e:07:06:a2:21:2a:61:d8:86:7c:21:6b:df:d2:
         21:4d:59:cf:6e:6b:21:d0:a3:0d:c0:12:c5:2b:09:57:d1:8c:
         e7:e8:97:ed:71:0e:7a:51:37:d8:43:59:91:39:d8:04:e4:7b:
         ad:60:04:98:c0:ae:9b:1c:bc:35:7a:44:e9:13:96:8f:e4:b8:
         2c:0c:31:a7:fa:15:4c:6f:e7:fe:e7:ca:b7:ef:b3:db:44:ec:
         bb:80:77:67:ba:c6:59:0b:88:7b:04:18:dd:7d:29:23:f0:42:
         1e:54:90:31:2c:98:37:42:9b:c8:3f:77:05:1a:81:62:d3:05:
         2b:d7:52:5f:32:34:b3:e5:00:a0:63:16:f5:eb:f5:47:87:09:
         9c:b5:37:20:72:4f:08:54:95:4f:74:05:13:c5:1f:95:7e:a6:
         79:65:f4:b7:ad:8f:26:db:d2:3e:28:bd:27:f3:6b:07:a3:5a:
         f7:77:82:f6:f1:db:ca:f8:e0:47:52:c3:fd:a0:d8:d0:ad:06:
         1d:69:26:d0:1e:d9:8a:92:57:bf:62:70:ac:e9:a8:9b:eb:a6:
         32:48:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:04:33 2025 by rpki-client