Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
File:                     qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json)
Hash identifier:          N469OAyN66YnKDmO21musq/K1WRgdA1daBmyG1qd1AA=
Subject key identifier:   F9:5D:24:EB:08:B7:B8:A2:72:DB:CD:A0:D6:BB:C5:65:41:4A:11:68
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Certificate issuer:       /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial:       0196AE4490B57F5DD84537A4D8F971C84BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
Manifest number:          0C4F
Signing time:             Thu 08 May 2025 05:00:51 +0000
Manifest this update:     Thu 08 May 2025 05:00:51 +0000
Manifest next update:     Fri 09 May 2025 05:00:51 +0000
Files and hashes:         1: DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa (hash: Xe6PXCoxFN3TxuAuxssMLTkZiOn7w8CCGbAYJjxvzp8=)
                          2: ICTqfYBG-REglE6QLqLm2DMr9nE.roa (hash: tDqSslkp4cv0xRmwxWP8ihUEHojImR31lIwN5aeFXMA=)
                          3: UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa (hash: WlUQqIFYI5VcIHzcu2H+hLq92ENL7s5Vno3Whj19yac=)
                          4: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: TnwZoJH9dxgGZ0Bl+MyYZsuop89BFhzvvrPZRCyYBFA=)
                          5: z4IiemcHS1pMiHT-EsPFFeOITkw.roa (hash: 0Cm5tDp/8EqZeA3+YLY/lnsQEFVnqQEXb0poa3VHvws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:44:90:b5:7f:5d:d8:45:37:a4:d8:f9:71:c8:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
        Validity
            Not Before: May  8 05:00:51 2025 GMT
            Not After : May  9 05:00:51 2025 GMT
        Subject: CN=f95d24eb08b7b8a272dbcda0d6bbc565414a1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:48:08:09:8c:b2:3a:18:a0:94:0b:99:6b:
                    14:35:fb:6a:27:07:22:2a:41:d7:e3:42:1c:e0:03:
                    f2:6a:94:ad:66:0d:2d:f3:bc:78:6b:2b:44:cf:36:
                    62:ea:c6:ab:cf:54:3b:00:90:1f:b3:8e:7b:42:96:
                    05:de:fb:82:45:07:06:7d:01:66:48:a0:62:9b:10:
                    e8:cc:19:9c:aa:2e:36:ee:72:96:3a:cf:c8:7f:aa:
                    2b:a8:20:25:b1:f4:67:1d:bb:ac:54:2a:5b:07:ca:
                    5a:6d:5d:58:1d:16:d2:9a:41:50:14:2d:c7:cb:85:
                    b1:92:48:b0:0a:1c:b4:25:35:aa:6b:72:25:15:e2:
                    11:69:8d:a5:98:82:49:54:e9:da:b0:45:32:8b:fe:
                    93:52:be:30:fe:0d:f9:71:e6:f6:6a:19:90:d5:00:
                    27:67:91:57:a0:8b:d2:a5:35:dc:b2:18:96:78:29:
                    e3:21:b8:c9:a9:1c:ce:c8:8b:dc:cb:d6:00:bd:46:
                    c5:1d:ea:8c:98:c9:1d:b6:64:fd:de:91:5b:5d:04:
                    df:ac:b1:ea:7b:d6:b7:80:75:3a:58:5f:9e:17:3e:
                    9e:e3:f0:96:b1:46:ec:d9:a2:17:a0:e6:d4:90:9e:
                    8d:2c:4d:13:7f:92:7a:a5:e3:22:3b:99:41:5e:f8:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:24:EB:08:B7:B8:A2:72:DB:CD:A0:D6:BB:C5:65:41:4A:11:68
            X509v3 Authority Key Identifier:
                keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:ea:ab:0f:a3:88:73:73:34:85:de:cc:d6:b8:37:de:bf:
         0f:88:56:10:b3:21:3a:c2:66:ec:52:13:e1:1d:fe:95:25:d0:
         3b:1e:26:a2:66:dd:ba:ea:db:7d:87:93:d8:46:b4:f9:75:c0:
         de:9f:48:37:50:f2:03:a9:59:71:ef:41:f8:9f:18:6c:c9:01:
         af:45:10:a9:76:aa:0a:15:72:9b:b9:d5:aa:76:1f:28:56:fc:
         b9:0a:a6:27:e5:a6:cb:65:fb:3c:54:d4:e5:3a:86:88:a9:51:
         9e:8e:09:ad:38:90:40:99:ce:9e:cd:8e:d1:7a:39:53:46:1b:
         45:f6:4a:bc:f8:9a:69:9e:98:dc:59:8e:48:5d:f2:a7:44:74:
         76:64:96:a3:d9:0c:73:ea:50:d3:fb:cc:af:ff:e1:39:e5:b9:
         06:05:86:9d:a5:4d:4b:fc:bb:5f:ac:45:22:1c:b4:4f:dc:ca:
         b8:d7:75:1e:17:20:73:8e:8a:c2:0d:b0:f4:71:db:50:7c:42:
         64:04:ba:dc:59:de:0f:eb:8d:c5:fa:4d:63:ea:68:52:26:8d:
         4b:df:f7:87:d8:c9:44:14:63:b2:61:42:08:0a:cb:7b:c3:e6:
         15:d5:1e:d6:9d:d7:8a:49:94:45:5a:f8:7c:f4:68:71:e5:26:
         4c:3d:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:18:11 2025 by rpki-client