Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File:                     ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier:          8MKZVWFOEmaGytm9geqVTTWzcfAyW8MOlnnSq3Jdcqs=
Subject key identifier:   EF:16:EA:BA:71:63:89:30:72:2F:0C:EC:1F:2E:51:8F:5D:AC:B9:B8
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer:       /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial:       0196B6D986CA1FAA83395A2B4572A23D2F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number:          1532
Signing time:             Fri 09 May 2025 21:00:31 +0000
Manifest this update:     Fri 09 May 2025 21:00:31 +0000
Manifest next update:     Sat 10 May 2025 21:00:31 +0000
Files and hashes:         1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
                          2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
                          3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
                          4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
                          5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: 9NLfgUgZ/BcIqqB4iu4NTuBVKK9kwZUCwKWoA6cCj+c=)
                          6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
                          7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:86:ca:1f:aa:83:39:5a:2b:45:72:a2:3d:2f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
        Validity
            Not Before: May  9 21:00:31 2025 GMT
            Not After : May 10 21:00:31 2025 GMT
        Subject: CN=ef16eaba71638930722f0cec1f2e518f5dacb9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:43:59:06:28:66:8e:7d:2f:ba:21:c9:fb:
                    38:0a:0b:1f:a3:87:63:52:83:2a:79:bd:a6:bc:61:
                    01:c3:0a:ff:78:4b:8d:98:b7:b9:b9:9a:7b:9c:cf:
                    9a:80:57:31:95:ec:8e:5d:b0:a7:c2:2b:d1:3b:69:
                    a2:19:09:d3:3c:aa:fb:18:c5:b4:67:9c:60:cd:7d:
                    47:bc:cb:83:a7:68:7d:e9:6c:bb:a6:8e:ee:e1:7f:
                    55:ab:d5:0e:d1:41:d6:e7:0e:18:6f:d5:e6:0f:42:
                    13:e7:ad:9b:cf:13:00:9d:a0:ee:69:ae:de:70:54:
                    69:dc:17:d8:53:f9:c6:7f:81:f2:2b:e3:04:37:cc:
                    8e:b0:9f:11:83:08:c9:e3:fc:1a:9f:9d:f3:80:a5:
                    63:03:2f:28:f6:50:eb:14:84:40:79:a9:09:ba:86:
                    4d:0b:d7:6f:cf:6c:9f:93:e5:ff:fd:0f:7d:4c:8f:
                    5b:0e:d5:20:6a:f1:12:6d:63:2c:8e:93:f5:0c:17:
                    a6:7e:a3:97:de:fa:55:fa:8f:8f:d0:dc:b8:71:2d:
                    80:af:0b:88:26:09:5d:f4:90:8e:21:88:60:d0:57:
                    3f:92:62:57:00:12:8f:eb:91:0e:82:61:f4:33:b9:
                    9d:6e:26:1b:bf:20:71:1d:7f:4e:fd:1a:a5:aa:33:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:16:EA:BA:71:63:89:30:72:2F:0C:EC:1F:2E:51:8F:5D:AC:B9:B8
            X509v3 Authority Key Identifier:
                keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:52:00:36:d1:01:5f:bd:43:af:7d:45:dd:4b:21:ba:97:43:
         42:1a:56:91:f5:9d:15:3d:36:82:f3:09:50:0c:67:bf:dc:83:
         57:95:78:c0:e6:88:24:27:26:55:01:bd:5c:c5:4b:69:8d:db:
         11:62:fd:a0:36:79:93:e5:f1:94:03:1a:7a:29:86:85:f7:c3:
         54:7a:2f:5c:be:1e:02:7f:27:43:14:00:de:91:a9:32:59:f0:
         2a:a8:09:7d:eb:68:fd:c2:17:16:ca:fd:de:81:0a:0a:03:11:
         e0:16:72:39:3a:19:b7:18:47:f2:d8:b3:3e:63:7d:8f:d7:a4:
         0e:3b:43:ee:cf:72:dd:62:4f:4a:91:00:95:c5:17:e5:ea:ff:
         d7:cd:a5:89:44:b1:56:73:a9:11:cd:3b:61:b3:1c:9b:a8:33:
         c9:72:18:0a:99:e7:b3:95:2c:a8:8a:cd:53:69:cb:05:f7:54:
         b7:74:eb:b3:22:72:4f:a6:97:1f:7a:2e:14:a7:01:63:ae:d6:
         3c:59:f8:ef:63:ab:a6:4f:34:96:2e:de:82:cd:12:87:23:e5:
         ab:c9:bb:eb:42:e2:63:65:2d:bd:5b:41:11:74:df:a3:24:14:
         6b:95:45:28:4d:5f:b4:61:50:2c:33:e2:45:93:00:5d:ee:cd:
         e5:ad:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:28:27 2025 by rpki-client