Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
File:                     i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json)
Hash identifier:          blgyPVQvsPrcsBBftfO4cM0D1cVF0KTyG+5n8nnhPWg=
Subject key identifier:   5C:D1:32:CA:29:82:E1:47:BC:59:FD:2D:A0:94:06:35:4A:0E:66:20
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       01969DBE6CC1A19328D0C07064EF3A711CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
Manifest number:          0B3A
Signing time:             Mon 05 May 2025 00:00:24 +0000
Manifest this update:     Mon 05 May 2025 00:00:24 +0000
Manifest next update:     Tue 06 May 2025 00:00:24 +0000
Files and hashes:         1: 4fxQzx_8ByWwMKk9dyXM0XEaMys.roa (hash: /pQNDc4tCpOKVTxdQ/1sSXEuYSGaPkaAPaOzkIFfq/U=)
                          2: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=)
                          3: fAdRVcLtp1Hdo62qAxJzNRyFLms.roa (hash: /9qm18tTMk3ZVKpb3SBqcWWsV0TFo0WtQqugq7BXDfU=)
                          4: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=)
                          5: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: rdxfTVYf15nSjGeagNG/EobmuYRgTUESzlhRqBNrgtQ=)
                          6: k_0zEMHxmfACdt3JyIQe32n-3UE.roa (hash: 1zpkXrC9Bl+aFyn5Yr4Xer+2HoYHjHajiHX7XweXMcg=)
                          7: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=)
                          8: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=)
                          9: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:6c:c1:a1:93:28:d0:c0:70:64:ef:3a:71:1c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: May  5 00:00:24 2025 GMT
            Not After : May  6 00:00:24 2025 GMT
        Subject: CN=5cd132ca2982e147bc59fd2da09406354a0e6620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:59:3d:33:99:02:bb:32:79:5a:82:14:35:
                    5b:2a:88:29:f0:90:42:f9:79:f9:56:c5:50:88:18:
                    fc:cd:c6:b1:8e:22:e0:fc:73:cd:46:27:2e:ab:4f:
                    3e:49:bb:1a:de:a6:97:3a:de:5f:d5:41:ec:0b:26:
                    0b:40:cc:48:b1:d5:87:a1:e8:70:53:7c:5d:04:24:
                    08:31:db:55:9c:35:a6:cd:a2:ed:53:b5:32:76:fa:
                    7a:bf:53:fa:17:83:5f:d9:d3:c5:e6:f6:b4:50:09:
                    af:6f:c3:73:a5:19:54:36:89:44:61:46:d0:fa:af:
                    0c:ab:e0:73:3b:3f:38:96:3f:14:d4:38:b9:87:db:
                    af:03:06:8a:9b:56:ac:70:34:ac:c3:60:33:63:d6:
                    0b:5c:60:d2:67:7f:2f:5d:00:30:75:93:17:79:27:
                    e9:61:34:d7:4a:35:87:36:d1:44:bb:0b:23:3c:9a:
                    d4:12:e8:cd:63:e0:14:aa:91:a2:eb:1e:96:d4:b5:
                    8e:fd:15:21:a9:c0:6a:79:9a:61:d4:ac:4d:db:73:
                    89:45:7b:db:c4:d7:fa:10:cc:da:4f:cd:6a:18:45:
                    a1:04:e4:c9:b9:88:3d:09:a0:cf:9e:dc:75:50:8e:
                    dd:64:db:24:34:42:9f:d7:fb:ac:40:aa:c3:20:51:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D1:32:CA:29:82:E1:47:BC:59:FD:2D:A0:94:06:35:4A:0E:66:20
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:f2:8d:23:2b:a8:f1:33:c6:88:e0:d1:6e:cb:c7:07:a5:
         5e:25:c5:26:fb:6b:2a:86:71:3f:36:7e:31:6e:44:c2:d1:70:
         1d:23:5a:f9:12:21:3f:33:7e:66:cd:14:52:89:d8:47:32:73:
         6f:f6:5a:ec:83:f4:37:9a:6f:06:f0:cd:bf:4c:d8:f4:ef:c2:
         d5:87:08:f2:34:f6:7c:45:59:73:cf:c1:55:50:f0:82:f6:f2:
         3b:40:4f:f9:55:52:4d:05:ee:0d:11:ff:ae:ce:9f:9d:ff:77:
         4c:aa:6f:28:de:f1:b1:3f:e3:5e:93:e3:a8:aa:b1:0f:ff:1b:
         7c:5a:58:7c:d4:cd:70:00:44:11:ed:7f:1d:d6:5b:00:d7:61:
         70:bd:97:48:f3:09:3f:bb:00:68:07:3c:e9:f4:c2:f3:0c:3d:
         40:bb:fc:5e:45:f7:68:55:69:dd:4e:eb:53:34:ae:43:3a:d5:
         3a:f9:36:4a:67:a5:0e:f0:a6:00:9c:0d:5c:dd:56:b4:87:98:
         72:97:ec:63:56:10:18:8d:1a:8e:aa:66:21:b9:52:9f:06:11:
         74:63:cf:5e:e0:76:4f:7d:cb:3b:36:d4:8a:56:8f:71:a3:fb:
         90:b3:59:4e:0c:f9:26:60:6c:bc:96:d8:fd:f4:3e:ab:a6:99:
         a7:3e:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:34:58 2025 by rpki-client