Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          CnL8Kze/VLO9aXpp1szNvMZXeAFYGGRo6F3pcpZ6AQE=
Subject key identifier:   06:72:33:37:47:96:CA:E4:84:15:76:2B:0E:92:3B:68:41:94:B9:D2
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       0196CE3D06E8639EC82006A5C0725A6CC916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          1542
Signing time:             Wed 14 May 2025 10:00:27 +0000
Manifest this update:     Wed 14 May 2025 10:00:27 +0000
Manifest next update:     Thu 15 May 2025 10:00:27 +0000
Files and hashes:         1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
                          2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
                          3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: 0GqYIcgk993ywmPSCkPgO7PxJSrwmPxNhgxCm11Vsgw=)
                          4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
                          5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
                          6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
                          7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
                          8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:3d:06:e8:63:9e:c8:20:06:a5:c0:72:5a:6c:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: May 14 10:00:27 2025 GMT
            Not After : May 15 10:00:27 2025 GMT
        Subject: CN=067233374796cae48415762b0e923b684194b9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:a3:29:4b:ce:1c:9a:c2:b8:72:da:b2:89:
                    f1:aa:d9:07:fa:a2:f4:2f:e0:67:27:ef:d8:0f:61:
                    94:5e:ab:cb:29:29:98:7f:0c:36:91:e4:39:3d:69:
                    e5:29:f7:1f:3f:76:76:48:16:07:fe:09:d0:98:a8:
                    d2:5e:5e:74:ba:a8:6c:a6:a5:19:d8:d5:9d:84:ed:
                    80:a8:5e:bc:57:95:19:fb:ca:84:c5:84:6b:5b:47:
                    7a:8b:1e:97:38:23:73:f3:f6:60:f7:6e:54:48:b0:
                    3a:ea:d2:f6:a0:ff:7f:c3:fc:d0:74:64:4c:33:69:
                    dd:39:51:c1:19:87:02:9a:9f:52:3a:f1:4e:b1:3a:
                    61:90:11:4d:56:0c:fb:b3:db:f5:58:e6:7a:b9:b9:
                    61:9f:1e:e4:f1:a7:ed:a4:56:34:2b:99:6b:1e:69:
                    64:0d:17:9c:59:4e:3a:d0:c8:d8:70:e4:97:16:3d:
                    37:86:08:c8:16:7c:8a:b7:ce:e6:31:a6:8d:5c:df:
                    c6:cc:1a:13:77:ab:f4:35:07:59:2c:00:27:6c:69:
                    0b:b5:fe:80:66:82:ee:87:b1:25:9a:3a:bc:eb:e3:
                    e1:66:7d:19:74:a3:bf:27:e7:7f:52:bb:40:ae:c2:
                    21:5e:a0:06:5d:93:99:61:d5:57:31:c8:e3:78:83:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:33:37:47:96:CA:E4:84:15:76:2B:0E:92:3B:68:41:94:B9:D2
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:10:34:8f:86:91:9c:97:fd:1e:b0:b9:dc:c6:17:75:3e:0a:
         46:1d:f2:b2:c3:9f:b1:ce:ba:9f:0d:8d:f3:9e:1b:d7:6c:3c:
         df:ae:bc:cc:56:ba:1c:ca:79:61:50:d5:18:5c:56:92:a8:82:
         d3:e4:4c:1f:48:40:ff:f4:51:14:03:f0:2f:45:66:42:4e:c9:
         2a:e9:cb:78:41:6c:d1:19:eb:2b:2c:24:a3:be:6c:a2:13:0f:
         9b:6a:01:60:aa:9d:18:a1:7c:1c:5b:67:bf:5b:a7:8d:04:12:
         ca:c4:dd:78:7a:8c:db:50:15:ec:3b:aa:0c:7f:69:f0:bc:39:
         84:0d:8c:76:f4:d3:27:30:da:c2:d1:71:ad:a7:83:70:78:bf:
         77:0d:1d:1d:a2:7a:6e:32:9f:a6:6d:0d:8b:a8:7b:e9:21:65:
         cf:8b:41:ef:6e:70:bc:0d:3f:f4:11:61:db:de:43:ae:bf:36:
         d5:1a:b0:40:10:95:4a:ce:3d:c4:7b:88:87:29:b8:15:f3:43:
         5d:3c:ec:53:b7:60:10:78:65:04:1a:49:3e:9e:08:80:83:7e:
         01:1f:cd:b1:74:45:2d:ea:48:30:9e:b7:3b:65:19:ec:da:e5:
         cf:c5:c8:22:a6:d4:16:f8:0b:6a:8d:a0:d0:7e:c6:1c:f8:d4:
         05:be:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:14:33 2025 by rpki-client