Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          Ftx9R45Mt+/t442dSx0lq/LSDAj+dZbnh6vggND2MFw=
Subject key identifier:   97:16:7C:D2:9C:8D:9F:04:1B:F1:C6:DC:F4:47:6C:5F:15:F3:53:E7
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       0196CF4FBF913F6AD1A30DEBAE8F60BA1E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          1545
Signing time:             Wed 14 May 2025 15:00:32 +0000
Manifest this update:     Wed 14 May 2025 15:00:32 +0000
Manifest next update:     Thu 15 May 2025 15:00:32 +0000
Files and hashes:         1: QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa (hash: vaJZALNBXUbhDyRfKEtlNDFsggROpnhoQdeymesJ/Rw=)
                          2: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: cG4Kr0lQU0sgWKVpPlDA+c1sRI0cV3MOe7F3ohwrJkk=)
                          3: S6x2GO2EJ9KcCMRTpcGWRPoM8AY.roa (hash: 9sQE61f7Pr/mVJ2y8Avta2FMC1JI4rdqPKWLZVtugf0=)
                          4: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          5: hd67_XZte5UJxG8Z9Bjjhd5C3aY.roa (hash: m5+Tgfa03sp40l5g/5GYZoTIL8T/7QDNBIaZ6t+2ge8=)
                          6: ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa (hash: uwqj4CFvKVNkmhKMglSF22ZAXWwfKXlh6tWeNXdxYbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:4f:bf:91:3f:6a:d1:a3:0d:eb:ae:8f:60:ba:1e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: May 14 15:00:32 2025 GMT
            Not After : May 15 15:00:32 2025 GMT
        Subject: CN=97167cd29c8d9f041bf1c6dcf4476c5f15f353e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:71:e0:eb:0c:a8:01:1b:9e:8e:d6:a0:31:
                    f8:c3:08:cb:65:54:1d:99:15:2f:47:bf:9a:5c:28:
                    72:97:7d:74:d3:50:52:a1:ba:84:57:f6:ea:92:f4:
                    62:26:84:fb:33:b1:b1:27:42:65:af:4f:0e:e0:8d:
                    e4:a3:5c:76:07:e2:5d:e6:2e:00:2f:b7:3e:69:1f:
                    7a:90:5d:ee:84:c5:6e:0b:6e:0a:cf:d1:3e:c0:48:
                    e5:2b:be:5c:f9:4f:bd:28:ba:d2:da:35:d1:83:bb:
                    03:a7:05:3a:4e:df:f0:56:47:26:b0:60:c5:83:44:
                    0c:84:84:c5:32:0f:98:8b:16:4e:68:02:ab:3a:9d:
                    7d:b2:c5:e5:49:68:0d:e6:05:5b:f3:e2:c6:b8:a8:
                    b5:db:71:08:36:fc:11:8c:b2:de:8e:48:98:5a:2c:
                    48:0f:ad:ac:50:71:b2:e5:36:5f:a1:5d:4f:b9:66:
                    e4:51:db:04:50:c5:e1:ae:67:e5:3d:bd:f3:55:e2:
                    4c:33:a1:e3:6e:4b:27:9b:5f:37:5e:4b:89:5e:38:
                    2b:4c:f9:40:3a:ef:4d:45:db:01:4c:f1:c3:14:a1:
                    49:c9:a6:8b:3f:e5:46:73:92:fc:77:38:7d:82:be:
                    b9:3c:00:45:50:61:c1:0b:0a:92:74:d7:9d:3c:10:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:7C:D2:9C:8D:9F:04:1B:F1:C6:DC:F4:47:6C:5F:15:F3:53:E7
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:49:3a:1f:bb:5c:1c:ad:ac:db:53:e2:15:f4:a6:02:2d:
         01:fe:40:e4:ce:29:67:5a:6e:80:19:d8:2b:75:72:9f:0c:48:
         e1:ff:0b:da:50:c6:1d:17:a8:1e:17:c8:3c:c2:9a:43:6d:2b:
         87:26:10:46:45:ba:fd:f3:18:c8:a3:cc:9b:58:91:5d:18:15:
         00:30:56:e3:6c:cd:c1:55:bc:9a:38:04:49:95:42:cf:fd:61:
         f9:07:4b:40:71:21:36:35:f4:80:b8:15:cd:1a:bb:e0:0a:92:
         30:ac:1c:35:20:58:02:85:ee:08:27:ef:b5:12:bf:90:c6:e4:
         02:e0:59:3c:1a:bd:72:5f:e8:07:11:87:52:95:19:41:54:e5:
         f4:8e:ae:2e:62:6c:2b:d3:f8:e7:41:68:01:5c:8c:96:2e:10:
         b6:74:99:76:c6:54:1f:07:6a:00:8f:60:1d:a1:9b:5f:75:8d:
         7f:7e:5c:58:aa:a3:7f:4b:25:7a:c3:30:63:29:ab:34:75:6d:
         1a:bf:ba:cc:bf:1f:e7:e8:9f:6b:02:d9:8e:e9:c3:9f:8a:39:
         c5:8e:40:a7:9e:54:f9:42:69:c7:b2:b5:58:a8:15:e9:fc:b8:
         37:0d:20:cb:d3:8a:12:46:a4:2c:52:fd:a7:8a:b6:b2:b7:fa:
         c9:cc:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:03:12 2025 by rpki-client