Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          VD8OrySV5bRvn3cb1/V2hzfOWC9XAhv6ktVhsluv8gw=
Subject key identifier:   CF:59:F6:79:A9:53:B3:5D:6F:AA:56:FB:20:2B:A9:5A:C8:97:70:0B
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       0196BDB760161BEF636E502E5604C14646FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          1571
Signing time:             Sun 11 May 2025 05:00:33 +0000
Manifest this update:     Sun 11 May 2025 05:00:33 +0000
Manifest next update:     Mon 12 May 2025 05:00:33 +0000
Files and hashes:         1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=)
                          2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=)
                          3: 6cgyQw3c6pwtU4O5qiL8so1iLO0.roa (hash: RrJ/CIW7j+YCVbEs17TVrQYeU0kZt0hrM4cIT1zfgiE=)
                          4: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=)
                          5: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=)
                          6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: qoj6g/nqOnMz0ubI1Nzf2y+/R9sOvh6uXBvPbePjJ3M=)
                          7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=)
                          8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=)
                          9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=)
                          10: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=)
                          11: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=)
                          12: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=)
                          13: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:b7:60:16:1b:ef:63:6e:50:2e:56:04:c1:46:46:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: May 11 05:00:33 2025 GMT
            Not After : May 12 05:00:33 2025 GMT
        Subject: CN=cf59f679a953b35d6faa56fb202ba95ac897700b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:a1:93:43:59:f1:fe:db:5c:50:b8:62:1b:
                    6e:6a:45:40:e6:ff:9a:98:26:8f:52:30:63:6c:c6:
                    58:f0:2d:4c:bb:b2:2f:6f:b4:c8:22:9a:59:4d:d9:
                    a0:1a:0b:ca:ee:37:30:65:f5:8a:99:d4:84:e5:3e:
                    aa:d8:1f:88:93:03:70:80:a9:60:11:31:f5:c2:69:
                    de:bf:0f:42:4b:3e:df:6f:78:69:b9:e1:60:0f:3e:
                    b8:94:27:55:dd:9e:bc:66:7f:ab:de:e4:3b:94:74:
                    71:25:a4:7c:41:dd:5c:2c:8e:20:5b:0e:3b:8d:91:
                    fa:46:c7:82:a0:46:47:33:07:2f:38:29:be:98:fa:
                    05:6a:3f:03:20:4b:98:2a:20:34:04:b3:0c:2d:ff:
                    77:88:2b:61:24:af:82:76:dc:b2:14:ea:eb:a3:3a:
                    83:88:41:3a:09:c2:35:76:70:f3:49:45:7d:ad:f6:
                    93:e3:73:04:7f:0e:28:8e:13:64:00:d0:ae:bc:82:
                    3d:d7:5f:51:75:e1:bb:f6:29:f5:df:9d:5f:b3:e3:
                    36:be:49:11:58:36:2f:ca:a7:85:e0:d1:9e:e9:a2:
                    90:a3:04:e6:9d:dd:57:a2:66:88:60:27:c1:7c:99:
                    5e:1e:a3:a6:ea:29:b8:31:64:78:aa:fe:19:d2:97:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:59:F6:79:A9:53:B3:5D:6F:AA:56:FB:20:2B:A9:5A:C8:97:70:0B
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:42:29:49:27:10:fe:43:d7:56:83:eb:3d:1d:17:6a:53:36:
         d9:4c:3b:30:b7:67:4f:c8:c6:6a:a8:32:60:5f:e2:bb:8b:0a:
         dd:59:5b:7d:45:39:91:6c:be:2f:3f:d9:a9:ac:20:5b:b2:08:
         be:13:9e:74:68:58:d3:1f:32:4e:52:3b:92:03:44:4c:ae:e8:
         2e:4e:23:19:4e:e6:0c:19:04:30:03:18:42:38:d3:b2:9f:8f:
         d5:65:cc:89:89:d2:aa:54:05:8e:03:d9:11:37:aa:ad:94:be:
         75:a7:b2:f1:f6:50:23:9f:53:25:33:e9:3e:f4:9b:d4:3b:ad:
         ab:66:e5:36:26:91:f1:a2:37:99:19:00:ca:9e:fb:7f:8a:37:
         af:a7:99:b7:19:6f:bf:59:b3:f7:72:73:5c:24:c2:82:05:79:
         0d:8b:ad:ff:23:75:22:14:8b:d7:62:df:06:4c:51:17:17:92:
         a3:08:67:08:a5:43:f5:5b:a3:c2:50:34:14:95:90:2b:89:a9:
         8d:d4:7c:6c:2a:5e:bc:e3:e5:1c:57:db:a3:d9:58:c7:07:28:
         f5:9d:2b:0f:50:35:9b:95:08:2e:f8:63:56:e2:66:d8:ec:a7:
         82:cc:89:4b:36:1a:ab:2a:77:b8:17:59:72:3d:39:a1:24:aa:
         55:ee:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:27:14 2025 by rpki-client