Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File:                     X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier:          a0EQC/5evvNV+IatipXGS73YHR4FIuOdNb0wB0RpFTk=
Subject key identifier:   38:30:2A:9B:9B:20:D1:67:CB:64:65:84:BC:31:63:BE:3E:C6:47:F6
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       0196B77E6EA9C6004A54C3CD39F973D83CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number:          0A26
Signing time:             Sat 10 May 2025 00:00:38 +0000
Manifest this update:     Sat 10 May 2025 00:00:38 +0000
Manifest next update:     Sun 11 May 2025 00:00:38 +0000
Files and hashes:         1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
                          2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: uHsiklRLmbVdsduvzH/ZdPGD7yPXowLM5pz1F49GY7Y=)
                          3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
                          4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:7e:6e:a9:c6:00:4a:54:c3:cd:39:f9:73:d8:3c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: May 10 00:00:38 2025 GMT
            Not After : May 11 00:00:38 2025 GMT
        Subject: CN=38302a9b9b20d167cb646584bc3163be3ec647f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:59:6f:68:5c:12:b3:21:3b:1d:dd:e1:2e:
                    99:c8:ac:2b:57:a8:2b:db:ac:a0:35:ad:21:52:fc:
                    fe:03:9e:05:9b:ff:95:22:2e:e5:f7:78:cb:e8:c2:
                    37:f4:1a:38:0c:72:ce:55:0b:c3:c9:27:e6:a8:bd:
                    02:61:ab:71:cc:81:22:e8:d7:b1:23:71:98:01:c0:
                    2e:46:15:11:07:4f:7c:e2:be:56:46:ac:15:5a:50:
                    bb:fd:46:32:4a:ca:1d:06:36:1f:c9:91:33:c7:7a:
                    a7:e3:8b:d8:47:c7:9d:0f:41:e3:7c:c3:51:3c:f0:
                    59:2c:30:dd:e1:3b:21:38:9a:5a:64:eb:eb:15:ff:
                    84:fa:7e:6b:67:90:c3:b8:2f:6d:07:33:ba:2e:fe:
                    f8:fb:dc:16:c3:a6:95:a4:a6:3d:92:ca:eb:26:43:
                    51:33:53:26:76:96:cd:23:bb:93:57:21:4b:c3:f1:
                    61:ff:bf:70:6f:43:ff:87:6b:2c:48:1f:4a:0a:98:
                    81:a1:59:42:f4:2d:5e:3f:d8:21:70:bf:0d:3d:47:
                    03:54:17:dc:94:2e:e1:76:9a:55:25:6d:26:67:1c:
                    39:0c:5d:f1:d3:bf:12:a7:50:01:37:d1:3f:54:ae:
                    3f:16:d6:0a:e1:47:42:70:71:44:18:e0:50:80:15:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:2A:9B:9B:20:D1:67:CB:64:65:84:BC:31:63:BE:3E:C6:47:F6
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:02:b0:e8:97:a8:53:e4:5a:31:84:f9:c1:1c:51:a8:d7:91:
         58:ab:6f:53:09:dd:8b:61:86:f0:7b:91:6d:9a:f6:2f:da:cd:
         31:49:1d:d1:37:50:bb:8c:86:b5:c1:7c:bf:4e:36:49:16:61:
         fc:87:be:32:5a:38:2e:64:e4:7f:3d:64:f4:c0:14:41:f7:21:
         4c:eb:06:01:cf:3a:70:ad:eb:f0:ce:54:31:ce:37:1d:23:52:
         e8:d3:86:ef:84:fb:bc:79:71:b1:22:ce:7f:29:84:98:c3:30:
         ad:b6:65:61:6b:32:b1:0b:34:c9:fd:c2:12:c3:01:c6:c2:f0:
         6b:68:a7:b7:bb:2c:39:f4:eb:96:37:6e:d2:f9:da:ae:be:ec:
         e8:cc:d8:c2:2a:98:ce:f0:ea:e9:ec:7e:91:7e:0d:e9:95:26:
         95:a3:03:f0:91:fe:51:5c:d0:a8:48:07:72:9e:4e:0a:63:f5:
         01:f6:63:61:14:ef:de:e5:dc:65:62:19:63:a0:42:e5:de:58:
         e3:f3:6e:f7:46:13:0b:4c:0d:b8:e5:cc:73:9a:3d:bc:15:8a:
         e1:0e:c0:99:ba:6b:9f:ee:52:eb:15:16:86:5e:64:45:f0:80:
         c5:8d:b0:fa:80:a9:e3:9d:ea:f2:6f:ee:02:12:2a:9f:fa:4d:
         6c:aa:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:23:32 2025 by rpki-client