Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          mpsTuRoQUEUlBdFMfN107SYO0NHUkSEYFdDYYMwHhuM=
Subject key identifier:   15:7A:4D:7B:7B:66:3A:64:3A:30:BE:A0:63:3A:F5:31:C9:C4:32:55
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       0196C683B7D851CE7D405A3BD42596FC6152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          1540
Signing time:             Mon 12 May 2025 22:00:43 +0000
Manifest this update:     Mon 12 May 2025 22:00:43 +0000
Manifest next update:     Tue 13 May 2025 22:00:43 +0000
Files and hashes:         1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: rG4nbl/lgdDyN1mj3O2+LIR1Bfesxzk/mR7vPnPovMk=)
                          3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
                          4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
                          5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:b7:d8:51:ce:7d:40:5a:3b:d4:25:96:fc:61:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: May 12 22:00:43 2025 GMT
            Not After : May 13 22:00:43 2025 GMT
        Subject: CN=157a4d7b7b663a643a30bea0633af531c9c43255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:0e:e3:98:3e:2c:1d:4a:a2:d0:65:f6:f4:
                    74:d1:b9:b0:cc:63:3f:f1:f0:a0:b4:84:f4:c3:22:
                    ff:1a:09:85:93:9c:1e:83:9e:75:6c:2c:89:63:b8:
                    f7:8a:52:1d:da:02:33:b7:4d:52:e3:38:ac:a5:ef:
                    ca:9a:d4:54:20:82:fb:59:70:7b:a9:3e:19:9f:f0:
                    bd:70:8c:51:c7:66:5a:6b:86:57:38:15:f3:d5:9b:
                    e9:d7:ab:e0:55:e1:b0:4b:9e:b5:b4:67:f0:08:7a:
                    2d:fa:60:9a:b2:52:8b:3e:f4:77:38:d0:f6:c9:24:
                    37:33:d1:cd:8d:75:9b:a2:a6:24:cf:e7:19:8c:c5:
                    36:e7:62:27:3b:f0:dc:f5:95:6f:f2:d3:ae:b6:e6:
                    21:f1:20:b4:3d:0e:97:ad:58:58:b6:e0:f2:d2:7f:
                    5a:7c:3a:2f:41:f7:ea:11:b8:48:73:8d:2b:4b:f6:
                    57:f0:b3:b8:42:28:6f:ff:8b:c4:06:27:95:99:2d:
                    af:e5:5a:48:73:31:f1:b6:f8:59:41:91:eb:86:c5:
                    ca:3d:54:8a:ff:15:80:31:db:27:77:36:53:6c:28:
                    15:24:11:5d:11:23:48:07:41:dc:39:36:11:a1:fc:
                    ee:b9:a5:d0:32:a5:63:3c:59:02:bb:46:8f:2e:38:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7A:4D:7B:7B:66:3A:64:3A:30:BE:A0:63:3A:F5:31:C9:C4:32:55
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:30:c0:19:1d:91:56:67:6b:ca:8c:03:93:8d:65:ba:bd:
         f6:7b:b5:95:0a:10:b2:67:37:84:dd:c7:2f:c7:e1:57:cf:37:
         b9:e8:0d:ed:8a:0f:a2:ac:bb:fd:26:00:7a:f2:cc:82:57:60:
         17:81:5f:5e:7d:73:62:dc:f7:ea:15:d4:82:ca:c4:96:e7:c1:
         9a:d4:30:3b:ec:37:2f:a6:e6:44:43:f5:40:b1:b6:24:e1:6b:
         a5:47:a2:3f:f3:79:3b:5d:49:7e:bc:9f:d1:be:80:3f:3f:6b:
         0d:c8:18:01:7f:45:12:09:d0:02:91:79:d3:1b:86:ab:f8:4f:
         a7:53:fd:e8:cd:ce:30:00:a9:fb:05:50:38:46:f8:c4:26:1a:
         fa:ad:2b:6c:67:67:c8:f3:db:f5:a2:de:af:85:d1:44:a1:db:
         3d:2e:a8:d7:cb:9a:b6:41:f1:c4:57:db:67:23:10:e8:b3:1c:
         68:e8:23:26:8a:b8:d7:7b:0c:70:61:7c:12:53:ba:4e:88:6f:
         49:ff:b7:04:1d:16:8f:26:fb:46:a4:3f:7c:68:4b:25:99:56:
         96:5e:7a:01:1d:3b:18:23:01:9e:53:ee:d2:1f:07:f8:e6:11:
         f0:63:9e:77:0b:b0:eb:9f:75:49:ba:9f:ff:90:fd:0f:99:c0:
         67:53:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:37:07 2025 by rpki-client