Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File:                     7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier:          a+rkws3SHa1NI/djgKbrCYc0tqylyQuLObslLVjcdbc=
Subject key identifier:   4D:A3:E9:21:B7:34:92:5F:DA:AC:CD:D5:E6:85:E1:EE:AA:34:29:52
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer:       /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial:       0196CD984E8ABFE94BDE58D5649A09D632CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number:          154A
Signing time:             Wed 14 May 2025 07:00:32 +0000
Manifest this update:     Wed 14 May 2025 07:00:32 +0000
Manifest next update:     Thu 15 May 2025 07:00:32 +0000
Files and hashes:         1: 0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa (hash: iLVj7sxryrS44+Um3qKoIRww0o5d/litSLFCSSNu8gk=)
                          2: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: xGkwpy/VYb0AJcXrE4kqA49n3RVu5HVdRxObE+9E4fQ=)
                          3: BUhsNJUBNyb2HSIUiIeGUaXbRSs.roa (hash: WZxDNbWAEQbOChQ4uBirZFUp84bvXSVkcscB3oLo9vU=)
                          4: g0sPCB79WMlgxKBl78JsjxBs-fY.roa (hash: X+EXtP8p8Q91QAPiVwkYVGvv2ZKJC7/ZwL2Di69yJ1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:98:4e:8a:bf:e9:4b:de:58:d5:64:9a:09:d6:32:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
        Validity
            Not Before: May 14 07:00:32 2025 GMT
            Not After : May 15 07:00:32 2025 GMT
        Subject: CN=4da3e921b734925fdaaccdd5e685e1eeaa342952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:ad:1a:8b:d8:83:6a:9e:5a:7f:98:3c:80:
                    ec:4e:37:22:e6:ff:23:df:9d:fd:ee:d2:63:c0:d1:
                    b1:76:b9:d3:2c:2d:7b:fa:d1:0e:19:ae:9c:1d:93:
                    29:c3:35:2e:56:6b:9b:fe:b1:b6:e7:3d:cb:ab:2e:
                    d4:71:dc:8b:f1:0e:d5:e4:81:97:a5:e6:67:e8:2c:
                    f9:81:f3:bd:e2:c9:56:25:57:02:0a:eb:79:97:7f:
                    02:54:a1:7d:c4:f3:cd:67:cf:14:46:46:d7:41:6e:
                    fa:0e:d6:f6:bc:ca:c3:b3:57:23:99:d3:b1:dd:c6:
                    7f:dc:83:04:c7:5e:44:dc:05:e7:09:a5:69:3e:9c:
                    55:d5:c3:74:de:6b:58:24:84:cb:4d:ae:5c:bd:57:
                    b8:05:bc:8b:da:86:e6:79:4d:d4:56:e4:b9:fa:c9:
                    d1:47:48:98:e5:c4:3b:9b:11:5e:48:4d:5d:1e:8a:
                    36:c2:b7:ef:f9:6f:47:ef:6e:4e:0f:8c:b0:ec:98:
                    d4:ff:b4:f0:51:82:2b:f4:a4:bf:22:02:f2:76:9a:
                    08:a5:3d:22:b5:92:3a:3c:89:5c:72:5c:9f:5c:fd:
                    66:99:9b:72:c8:a6:da:9f:c8:44:f0:21:b0:26:5e:
                    d9:b9:07:ed:1e:82:99:a8:31:1e:8b:b3:5b:9e:c7:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A3:E9:21:B7:34:92:5F:DA:AC:CD:D5:E6:85:E1:EE:AA:34:29:52
            X509v3 Authority Key Identifier:
                keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:ab:f9:45:8b:0d:44:73:f5:03:ec:2e:ec:dc:9e:4b:79:
         70:8b:fd:21:c5:58:4c:6f:66:8b:6d:bf:f5:4d:6a:7e:44:dc:
         10:b6:97:b6:7e:7e:e7:54:1f:25:b4:e7:85:49:3d:0c:56:34:
         2b:67:95:f9:58:ed:2a:e3:5a:00:eb:12:b2:e7:e4:eb:76:a2:
         d2:61:c5:c2:e1:96:f9:3d:5f:6d:b6:ce:30:c0:d4:28:9d:a3:
         2e:c5:84:a2:ec:a6:d1:07:38:8c:b0:0f:17:62:30:3b:23:0c:
         70:a7:16:ef:30:ac:4e:21:8a:34:a7:92:76:38:0e:9b:32:73:
         78:a0:ee:c1:e8:55:a6:28:ca:a8:d6:eb:e4:23:cf:c4:fe:6e:
         00:d4:02:12:07:b5:a6:1f:b7:2e:31:f7:ed:ae:77:b9:ac:41:
         df:49:f2:b6:3c:f1:21:c1:05:4e:dd:5a:b3:a4:fd:de:cb:51:
         e8:6f:c1:e6:83:57:3f:3c:b9:2c:aa:3b:e0:0f:9e:b2:13:ba:
         42:64:1f:f0:d6:12:ff:0f:24:8f:ae:ee:1f:b0:48:fd:ba:61:
         53:e3:a2:fe:b3:7f:0d:28:6c:63:ee:26:40:f2:7f:dc:9b:c0:
         3d:01:21:0b:d7:b0:41:3c:b9:d1:b6:07:8f:63:14:00:6a:b7:
         36:94:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:01:00 2025 by rpki-client