Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File:                     pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier:          rw0ALsB7NKo+M2l7mq9qQsXf+jZgIi84pBjxeCU3nqc=
Subject key identifier:   9E:D6:5C:59:A2:7D:8D:B2:88:41:F5:15:1C:3D:E8:60:30:D5:1F:FA
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer:       /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial:       0196B77E943B1A5EF676D0850F3D6A833C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 00:00:48 +0000
Manifest this update:     Sat 10 May 2025 00:00:48 +0000
Manifest next update:     Sun 11 May 2025 00:00:48 +0000
Files and hashes:         1: 1-vk3La2yyZFnILeGGhJFe58kLvs.roa (hash: RGkYbhYFu12+UlOAOHZuU+R1lpv4+udmzfRD0bN3gMw=)
                          2: DDotDGxvVqfHzQUKIdqNZjL6I0Q.roa (hash: sMg43UN/gdg+NoR/7BTQI+4KqXRII5o94BppxKuF23U=)
                          3: SlaU9HSyWOLbPlhtr9erox7ST1o.roa (hash: iCddRZIQh0GzddiojJsCNP64OOzV5SHbTR0s3vNWL+A=)
                          4: Vs8JrhOp8doi0Pejo3pFyxkxSF8.roa (hash: v1TXYBsbMNvSJhKVhhxeD9z0NXgTARHKv2tqAe3hsUE=)
                          5: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: 5JWoYlBCCZPRGyDh+k/h9l9bRiA8Ag2qexeWwpN+YAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:7e:94:3b:1a:5e:f6:76:d0:85:0f:3d:6a:83:3c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
        Validity
            Not Before: May 10 00:00:48 2025 GMT
            Not After : May 11 00:00:48 2025 GMT
        Subject: CN=9ed65c59a27d8db28841f5151c3de86030d51ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:5f:20:77:3c:c2:20:10:20:42:5b:57:06:
                    43:31:30:c7:0d:68:e8:b2:e4:f6:47:2a:04:97:ae:
                    7a:ea:d1:ce:05:3a:c5:8a:da:8e:ff:6c:1c:c3:87:
                    42:f6:a3:be:39:e6:72:d3:0f:52:cb:ab:c6:63:a3:
                    2b:00:01:98:2c:5f:a5:22:a0:fa:09:38:9c:2f:89:
                    c5:de:75:a7:ce:dc:13:c2:0f:65:db:50:98:21:3f:
                    a4:f4:00:c8:fd:f1:d5:ec:6f:4f:ab:ad:df:dc:82:
                    04:c7:0e:7a:22:2b:74:87:54:20:fe:a1:ef:49:28:
                    a9:4b:a8:c7:e6:3e:04:19:d6:f1:46:ef:e9:1c:b0:
                    d0:3d:4a:62:e5:d9:af:51:20:13:4c:3d:5d:43:39:
                    da:02:a5:ef:52:05:1f:25:df:fd:e9:f1:d0:aa:8d:
                    e8:3d:54:4a:e3:69:58:f8:ad:1f:d2:e5:27:c6:42:
                    8a:eb:75:07:62:d2:5d:af:8c:76:96:12:59:01:87:
                    e8:53:03:ab:cf:32:1d:8b:90:a6:89:92:8a:48:dc:
                    5e:89:93:22:4d:e6:a5:6f:d9:76:5c:f8:14:ed:3d:
                    88:0d:86:84:f5:98:5d:5b:07:1c:e7:34:17:50:fa:
                    f2:e9:68:83:e9:6e:74:f4:33:4e:03:38:63:b1:6d:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:5C:59:A2:7D:8D:B2:88:41:F5:15:1C:3D:E8:60:30:D5:1F:FA
            X509v3 Authority Key Identifier:
                keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:84:89:b1:fb:01:c7:4a:f7:77:06:3a:d3:72:9b:54:e8:9a:
         c1:29:a0:e9:fe:05:83:d0:a4:fc:61:98:09:89:75:c9:cb:8b:
         fe:1f:db:c1:ee:32:2c:eb:10:0a:b4:6f:60:8f:81:d8:b9:ee:
         9c:5d:7d:b1:d5:5f:11:52:37:2f:94:fc:8b:35:de:69:e6:24:
         2d:b7:69:23:d8:82:ec:09:26:5b:ee:01:47:32:76:72:6a:9b:
         aa:64:a1:fc:18:e4:5d:ff:9d:6d:49:55:0c:5c:4c:2f:0b:a2:
         a7:12:00:55:18:6e:5b:e4:29:45:c0:f3:45:29:bd:dc:1c:49:
         b8:d4:b8:19:30:b7:c1:fd:4e:59:25:45:4d:2f:91:25:0c:69:
         94:4b:93:c8:7e:0a:6c:2d:3b:e9:63:a5:fc:7e:d8:60:e7:43:
         bd:c1:69:c2:12:ff:ee:21:f4:72:5d:e8:81:db:25:36:7e:a3:
         6f:85:47:24:bc:95:e8:7b:9e:8d:ce:79:74:1b:9e:b3:ef:b2:
         52:e0:27:05:20:6f:da:a5:48:3b:72:f6:a4:cf:6f:c0:24:24:
         91:b8:29:79:b4:a7:19:0d:0f:e1:86:fa:74:8a:67:58:9f:43:
         5e:0b:ce:05:dc:f7:ba:b8:20:66:37:d3:b8:75:47:ef:50:fc:
         6c:7a:b3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:54:49 2025 by rpki-client