Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
File:                     miZlfmslRJQlt0hkXnQgx2rCs6Q.mft (raw, json)
Hash identifier:          tkg1BiewQodCwGh+6cI1IqPIOzA1gQA5S/feQdHGGyA=
Subject key identifier:   A9:CA:CC:9C:E2:19:CB:96:6D:89:3B:F3:38:DB:F6:55:65:CC:EC:44
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Certificate issuer:       /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial:       0196BDEE2B5FA3545FDA5402602C8FC7686A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
Manifest number:          0D2B
Signing time:             Sun 11 May 2025 06:00:24 +0000
Manifest this update:     Sun 11 May 2025 06:00:24 +0000
Manifest next update:     Mon 12 May 2025 06:00:24 +0000
Files and hashes:         1: 2V_JK6rjk2y5OzV-jGzfsnfR4RM.roa (hash: 01s7oF2QbdI5IMZDB8rKIwaE1speupoZ2KjAlI2OqvU=)
                          2: ZoKIl9YZFuoqn-M6l74COof5MHQ.roa (hash: PDlBi/GUPca2M+ClQHY6i6FrWZfP2ejkU5uyGLD6hR0=)
                          3: cbtDU2QhUAaEdfn79ud9d1retQE.roa (hash: zIapCEP1U16iRYVZKfI5rkQeutzKrMtnN/VL2r5jtgA=)
                          4: miZlfmslRJQlt0hkXnQgx2rCs6Q.crl (hash: U0gWKXn2e88o8kE3N7b6DH/ZaMswemQSNIdHZBh9Yow=)
                          5: tcw5kSwgCsyK7wU_KlBpjuCfh_w.roa (hash: IkNsXEM5r0B1nHPPxQlYpu689+V6gLtheirq0sa61gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:ee:2b:5f:a3:54:5f:da:54:02:60:2c:8f:c7:68:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
        Validity
            Not Before: May 11 06:00:24 2025 GMT
            Not After : May 12 06:00:24 2025 GMT
        Subject: CN=a9cacc9ce219cb966d893bf338dbf65565ccec44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:d8:0d:0e:03:9a:48:44:83:c3:dc:5c:7d:
                    e2:f7:fb:5d:14:e7:91:3a:52:ed:4a:a4:b1:77:45:
                    d7:95:73:03:1e:a2:ab:dd:93:76:3e:5d:c8:cd:58:
                    7a:a5:18:b5:3b:00:0b:60:b4:e9:45:29:f1:79:42:
                    17:f8:f6:66:d2:44:33:18:d7:26:69:13:d5:72:5d:
                    a7:f4:e1:bd:25:ab:de:5a:28:be:89:f2:61:f2:7b:
                    b9:02:fa:0d:43:c1:79:56:de:63:97:1f:ad:95:a1:
                    3d:2b:5f:80:9f:a2:c2:3a:6e:1d:b5:10:86:5d:82:
                    83:5b:31:a5:47:2c:25:6f:93:73:bf:2b:65:f3:67:
                    d6:4c:82:c9:65:2f:de:bf:a2:fe:a4:c6:05:42:6d:
                    01:73:f9:48:82:51:1d:89:eb:78:3d:b5:2a:c6:cd:
                    cc:cf:da:13:6b:05:18:7b:4d:0d:3a:7c:b5:06:3e:
                    45:ce:dd:68:af:5b:df:0b:6b:d9:cc:42:24:bf:9a:
                    e3:42:94:1d:0c:d5:80:f3:82:25:dc:ac:b2:be:da:
                    5a:ae:9d:d4:de:47:89:02:93:cd:ad:7b:ce:49:5f:
                    d4:ba:06:71:8f:af:b4:85:dd:5a:5a:10:c6:7f:91:
                    08:94:d2:71:cf:60:fe:f1:10:a4:b4:c9:fa:64:5b:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:CC:9C:E2:19:CB:96:6D:89:3B:F3:38:DB:F6:55:65:CC:EC:44
            X509v3 Authority Key Identifier:
                keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:99:0a:97:1b:c9:61:81:65:0d:46:9e:c8:21:92:7c:d1:5d:
         5e:2a:a5:9e:21:0c:70:d1:13:87:f5:36:e2:2c:91:6e:42:b5:
         3f:ae:bf:dc:53:74:98:8f:78:1e:66:6f:5d:27:25:b9:76:da:
         c7:5f:b5:2c:70:13:7e:c2:3c:e3:40:c6:61:dd:1f:1b:52:54:
         0a:73:50:69:a0:b2:ec:58:15:b6:60:d4:8d:28:d7:86:0f:ef:
         99:63:e8:ce:2e:46:15:08:02:2c:d0:5c:ea:9d:06:51:c8:94:
         19:23:09:85:68:26:ee:5c:55:fc:34:a0:81:ed:56:b0:10:a3:
         e7:b3:3a:0b:c7:bf:f2:e7:c0:38:c9:dc:81:d0:ad:91:90:77:
         a6:38:e6:c3:1d:e3:cd:3d:9b:2a:3a:84:e9:5a:5e:99:ca:6d:
         4b:20:ec:bf:f8:79:50:05:87:58:22:ff:8b:09:e6:96:60:62:
         3e:4b:47:5f:ac:e2:1a:95:48:54:2b:3f:c9:75:57:c6:2b:8b:
         9e:26:a9:4b:9d:69:41:cb:fb:64:03:88:32:ac:a5:9f:f7:b3:
         03:e5:e0:7d:ba:b6:d1:56:e2:e9:18:e1:11:73:a3:af:37:2e:
         22:dd:81:7d:76:73:3e:73:83:a8:49:0e:5d:bf:7a:78:cd:da:
         6e:18:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:35:03 2025 by rpki-client