Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File:                     1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier:          KKo8SwwF2pGlHzauW3pv1/cRyu2Jn/O2a8/GqYM2L7A=
Subject key identifier:   25:79:D8:A7:C6:A0:93:11:D8:57:D6:19:09:01:30:F6:DA:21:8E:40
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer:       /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial:       0196C5A7F72DF940149586CF86D284C633C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number:          104C
Signing time:             Mon 12 May 2025 18:00:41 +0000
Manifest this update:     Mon 12 May 2025 18:00:41 +0000
Manifest next update:     Tue 13 May 2025 18:00:41 +0000
Files and hashes:         1: 1lITG_UqnfavYQ_xoQlV3wFv38U.roa (hash: EEjmi7deVkOh9RZ1Yb2ahklKAUhFdcMk/pd79vay4U0=)
                          2: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: v8h3q2t2uxb5KQDjF9TKCjTeBrLjwy6ntDAr0YMRYA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:f7:2d:f9:40:14:95:86:cf:86:d2:84:c6:33:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
        Validity
            Not Before: May 12 18:00:41 2025 GMT
            Not After : May 13 18:00:41 2025 GMT
        Subject: CN=2579d8a7c6a09311d857d619090130f6da218e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:be:56:79:a1:94:3b:26:c7:bb:e6:3f:e3:
                    ad:7e:e9:b4:73:77:27:a5:7f:2a:69:37:b1:5d:85:
                    08:00:98:5f:69:5b:c9:ea:9c:d6:ed:d0:dc:5d:70:
                    2e:9a:89:45:6c:51:b2:de:5a:16:c4:74:39:41:ea:
                    17:6d:9e:20:83:85:e7:25:04:d1:64:1a:69:6e:41:
                    ff:eb:0a:72:18:08:20:72:2f:b3:ce:d9:29:68:20:
                    e3:c6:75:dc:25:99:a4:86:cf:51:ac:03:84:83:66:
                    ae:e2:86:34:8d:50:82:68:d1:d3:77:a0:7f:ed:b1:
                    65:99:8c:86:97:19:3b:82:4d:cf:44:9e:47:9d:0d:
                    04:db:59:d7:37:4f:f1:c3:54:f8:35:8a:5c:57:b4:
                    fb:9b:44:37:36:db:59:d5:45:7a:74:6d:66:92:9a:
                    f0:f0:dc:24:a0:7d:02:c6:0d:3d:7e:39:3c:79:44:
                    47:e3:87:1f:7d:e0:9c:bb:f0:1c:2b:20:26:5e:90:
                    9c:4a:8e:06:5b:f3:47:e7:fc:15:c9:37:a7:59:1c:
                    ea:99:34:3c:b4:22:5f:d3:76:41:b2:31:5a:f9:0a:
                    6d:43:bc:be:66:42:45:c3:7a:68:d4:cf:d6:96:8a:
                    ce:d0:10:69:bf:a7:80:64:a6:fe:86:b8:4a:31:6c:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:79:D8:A7:C6:A0:93:11:D8:57:D6:19:09:01:30:F6:DA:21:8E:40
            X509v3 Authority Key Identifier:
                keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:85:65:0e:0c:2c:67:d5:0d:29:e9:be:16:5a:34:42:01:19:
         22:0f:21:83:47:b1:93:6e:31:64:61:61:a0:fe:ee:81:31:80:
         8f:4c:d9:86:27:b0:30:e5:df:44:d3:8f:aa:0d:8b:bd:84:08:
         8b:4c:cf:93:68:55:3a:39:0d:e8:0b:55:88:1c:58:d3:34:e7:
         69:28:ab:d7:86:16:a5:37:9e:74:a5:c4:4f:28:76:52:09:d9:
         72:68:c8:19:00:22:84:d1:17:e1:90:4a:bc:98:78:b1:1a:22:
         93:c0:0c:4a:3b:95:ff:78:7e:97:cd:f1:33:be:51:31:51:9b:
         8a:dd:c0:40:2c:d0:51:ca:bf:ef:19:ba:28:36:c7:fd:6e:98:
         31:1c:fb:41:f7:b3:28:6d:99:0a:bf:0d:f1:c7:f2:24:ef:73:
         cd:5a:3e:3e:26:8a:0a:d1:ba:a8:a2:2f:ba:92:1b:25:99:ab:
         71:2c:6a:f9:00:f1:c1:d7:59:36:18:53:31:f7:99:1f:32:f1:
         43:ff:bc:5f:03:00:08:58:29:31:32:e0:f0:bf:26:22:35:33:
         4a:83:da:1c:75:d2:35:31:ff:20:00:07:f9:de:97:13:0f:12:
         06:fa:5e:14:2f:5c:af:94:f6:ca:77:85:bf:42:28:c2:e0:55:
         b8:a2:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:54:50 2025 by rpki-client