Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          VhalOGVzTz4LO/oLN7kJQ19NsqbFijIRblfHgOv5g1U=
Subject key identifier:   7C:0D:E0:03:D4:11:73:03:1D:1F:A6:E6:AC:6D:B1:7A:29:58:67:66
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       0196B74737183EE62EFDE3FDF91420AA9D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          1030
Signing time:             Fri 09 May 2025 23:00:19 +0000
Manifest this update:     Fri 09 May 2025 23:00:19 +0000
Manifest next update:     Sat 10 May 2025 23:00:19 +0000
Files and hashes:         1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
                          2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
                          3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
                          4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: v9Gm+mc+YLNQDf6ae3QSE8doFpYHscFUV3oGFTmcjBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:37:18:3e:e6:2e:fd:e3:fd:f9:14:20:aa:9d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: May  9 23:00:19 2025 GMT
            Not After : May 10 23:00:19 2025 GMT
        Subject: CN=7c0de003d41173031d1fa6e6ac6db17a29586766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:44:ea:ce:48:79:48:f7:66:53:7b:71:dd:
                    da:52:12:d5:b1:8f:5c:3b:b8:57:4c:91:12:8e:46:
                    db:62:29:9c:29:49:bb:70:da:d3:a5:d6:60:0d:74:
                    16:7a:2e:3c:cf:c9:87:5f:02:d1:7e:38:12:29:11:
                    6a:a5:e5:34:7e:0c:7a:8d:3b:02:4b:37:e1:99:65:
                    27:d4:2c:b4:f3:c4:d9:81:6b:02:a1:0f:23:d2:22:
                    7c:af:72:8a:4c:44:e4:e7:73:ce:cc:d8:96:03:79:
                    16:93:fb:2b:a0:20:0c:c8:dd:64:22:ab:86:d8:e4:
                    43:ee:c8:b9:9b:fd:78:c8:fa:58:90:70:ae:fc:24:
                    0a:8f:fd:d7:8e:5b:55:f9:39:4b:f8:4e:1a:d6:5b:
                    f9:35:4e:0c:fb:66:0b:1a:f8:f1:d4:8c:ff:73:36:
                    85:fc:4b:53:90:8f:9f:af:09:a3:95:df:40:96:5f:
                    2d:bb:ab:ac:6e:49:35:2c:4b:93:72:5f:78:e8:f6:
                    2a:9d:aa:1b:31:b4:2a:fd:3b:9e:15:d6:f5:a4:2c:
                    90:21:4e:b2:66:76:ee:ee:dc:8b:14:ef:44:f4:90:
                    70:ce:24:5b:b1:93:c2:9b:e2:a2:78:1f:4e:e7:29:
                    c6:29:3c:a8:98:a1:fa:47:59:98:1f:df:ce:a0:20:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:E0:03:D4:11:73:03:1D:1F:A6:E6:AC:6D:B1:7A:29:58:67:66
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:df:09:e7:f2:f8:f9:bc:17:33:c7:21:e7:5e:3e:2c:9e:da:
         48:82:ec:34:af:c9:dc:37:49:40:6e:df:5a:0a:dd:93:cb:3c:
         78:3e:41:f7:1b:ad:ee:72:2c:11:e6:69:77:a2:29:40:2e:63:
         e6:d2:4b:33:00:9e:fc:5e:ad:be:27:74:a9:5f:9e:c0:f1:fa:
         ad:c6:82:4a:47:1b:0f:dc:a5:49:5d:e1:48:80:31:7f:50:84:
         1f:8d:e8:2a:15:4a:43:1f:23:ff:c3:2d:7e:35:02:3c:41:22:
         80:2d:cc:b1:29:10:cc:b8:f0:ec:d3:55:b9:0e:98:da:08:ad:
         b5:86:39:88:b9:0d:e0:01:d0:cf:d2:df:1f:af:e9:85:fb:17:
         92:41:cf:86:f8:51:d1:37:5f:ec:1a:53:35:d2:d4:2f:11:24:
         49:67:53:c6:b5:ae:9e:63:47:42:d6:c2:24:85:14:a6:da:82:
         22:b9:75:3e:22:30:9b:30:f5:46:83:dd:62:64:58:83:ec:78:
         00:29:ea:47:d4:a6:68:a1:f1:06:f9:21:02:2b:1b:43:6e:25:
         6d:15:3d:ad:c3:61:79:db:c5:3e:95:8c:84:4f:ff:61:f7:e7:
         96:3d:e8:7e:2c:f0:97:79:6a:d7:1a:ab:8a:ce:b5:2f:1e:4d:
         65:97:32:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:15:44 2025 by rpki-client