Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft
File:                     M15yXKz4PJf0V6VnYs-EbWQxF80.mft (raw, json)
Hash identifier:          v6Shq9EAUSvDpj4BYn8bGvMivViFL6qJKBIzFkwQEPo=
Subject key identifier:   8B:C0:FA:EE:AE:19:80:85:E4:54:B2:44:1F:72:1A:39:49:1F:CC:0A
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Certificate issuer:       /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial:       0196C202788F41A0E16D9952ACCF48067103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft
Manifest number:          1535
Signing time:             Mon 12 May 2025 01:01:03 +0000
Manifest this update:     Mon 12 May 2025 01:01:03 +0000
Manifest next update:     Tue 13 May 2025 01:01:03 +0000
Files and hashes:         1: 4iDiM0pAr1Av69v5T4vArTCXc7s.roa (hash: 5Spma88dZDszRIBrFCz19VF3VQiXWo6dB+yAo/6d6Y0=)
                          2: ASwlDul39PG8j4x52ooSTz5VcaI.roa (hash: /1/LfhksHNmhifCBbdPkU8E0bnPeD/YdIT0/qpjomHw=)
                          3: BGjOsejiH1AKAtpZ7dKiAsXqVL4.roa (hash: hqsfP8zv2rWJq1NCJMu5Xcdi5bE5jODOs3LPrkK9Zeo=)
                          4: M15yXKz4PJf0V6VnYs-EbWQxF80.crl (hash: V151+Ib2G0o9sCy0MLKXdYtlAJoJAU0vrI288HqUQPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:78:8f:41:a0:e1:6d:99:52:ac:cf:48:06:71:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
        Validity
            Not Before: May 12 01:01:03 2025 GMT
            Not After : May 13 01:01:03 2025 GMT
        Subject: CN=8bc0faeeae198085e454b2441f721a39491fcc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:05:67:94:44:ab:f3:a1:46:bc:46:b6:61:
                    da:db:03:67:f3:5b:b5:32:e2:7a:0d:3d:10:fc:0a:
                    4e:6c:91:78:5a:44:ca:63:ec:27:b6:45:63:b8:51:
                    a3:16:40:5b:57:13:ec:fd:a9:3e:c0:a7:6e:2e:2e:
                    fd:44:7e:7e:4c:75:49:ae:8f:bb:88:ea:07:f2:00:
                    b7:c3:6f:81:71:3b:48:d4:7a:b2:d3:fc:9c:7f:b4:
                    cf:d0:a9:a0:8f:6f:ef:28:d0:c0:ed:4f:c2:9f:2e:
                    db:5c:90:2c:be:ad:2f:f3:db:50:b8:ef:de:71:98:
                    72:21:13:db:e0:78:45:93:9f:13:3c:4e:ce:40:71:
                    9a:2a:b6:b4:fb:8c:87:af:cf:a7:85:02:46:a2:4b:
                    57:b3:23:55:23:11:f2:dd:80:e4:15:ee:70:92:5f:
                    b9:19:91:64:bf:b7:e8:86:cf:4b:e4:01:74:a5:c4:
                    22:13:3e:52:c2:7c:22:8a:e4:ec:76:e5:73:57:78:
                    78:7c:da:be:83:34:7e:c8:f8:45:74:37:0a:5a:d1:
                    90:d8:fa:2c:57:e4:19:aa:61:b3:a8:b0:ff:b3:de:
                    5d:5e:f7:1c:2c:23:59:9f:69:42:b2:1c:84:64:aa:
                    70:8b:38:7a:e5:a1:01:ce:84:8b:b2:67:a5:21:4b:
                    71:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C0:FA:EE:AE:19:80:85:E4:54:B2:44:1F:72:1A:39:49:1F:CC:0A
            X509v3 Authority Key Identifier:
                keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:26:a6:9a:f3:73:18:56:65:ef:a4:01:16:60:95:ca:27:
         c8:80:6b:c8:0f:2c:c6:93:82:63:a3:41:1b:4c:ac:70:af:e3:
         73:89:70:b4:93:a3:0d:e6:06:a4:9f:f2:01:0d:1b:81:74:69:
         11:84:c5:eb:1b:ad:80:a3:f4:64:ae:4d:e9:32:db:4e:78:16:
         eb:dc:5d:45:dd:ad:d9:46:01:26:87:35:1f:00:a7:f7:7e:cb:
         78:fa:1c:79:5b:a1:67:63:3e:c2:cd:85:18:97:37:18:b5:22:
         de:c2:68:9b:df:58:76:e4:35:55:6a:6b:d0:f3:04:83:1d:cb:
         38:68:f4:6c:62:15:42:a1:7f:5f:3f:54:d2:ea:9d:db:0f:3d:
         40:03:ce:43:85:6c:8c:12:7d:b9:4f:90:6c:d6:1d:84:97:e8:
         ba:21:d3:9a:ae:f1:3b:ae:6f:51:10:6e:e0:0a:27:29:5b:00:
         af:8c:f1:64:1e:a5:27:2b:9d:17:11:e7:0d:d7:9d:f4:0f:00:
         57:61:cf:74:86:57:1a:7f:0c:14:ff:ca:c1:20:3e:8d:29:55:
         b0:b4:2f:3e:2a:a5:94:da:62:4c:36:38:44:90:72:c7:b3:c0:
         bc:ad:0e:1e:d9:ba:71:58:c6:77:ff:f4:ae:ba:b6:65:dc:81:
         6d:17:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:23:39 2025 by rpki-client