Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          mU6ugbZsSBjAD01/5JCSZXuP/xiLYCvxJ5WDn0VWGog=
Subject key identifier:   27:BB:FF:4D:26:2E:DA:C0:10:A5:12:A3:5E:76:71:C5:1F:AD:12:4F
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       01969F75F664A4474A595683DEAFA3DE824C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          0E4E
Signing time:             Mon 05 May 2025 08:00:30 +0000
Manifest this update:     Mon 05 May 2025 08:00:30 +0000
Manifest next update:     Tue 06 May 2025 08:00:30 +0000
Files and hashes:         1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
                          2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
                          3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: /v1fI/rkpoc44cenoEWnfQEjaXemnKGpKEy5JiJYssA=)
                          4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
                          5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
                          6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
                          7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:75:f6:64:a4:47:4a:59:56:83:de:af:a3:de:82:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: May  5 08:00:30 2025 GMT
            Not After : May  6 08:00:30 2025 GMT
        Subject: CN=27bbff4d262edac010a512a35e7671c51fad124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:42:9b:3f:bb:ce:de:e0:0a:af:fe:b2:c8:
                    4a:23:34:0f:ff:de:b0:f7:ff:d7:73:32:b4:03:23:
                    cf:ec:28:c5:18:da:14:18:61:e0:19:90:ac:de:0f:
                    1d:24:3a:af:5d:e0:65:e8:d6:df:b5:f3:7f:f6:82:
                    89:36:5c:a3:21:ad:fc:4a:8a:0f:34:5d:e6:24:de:
                    b5:d9:c5:6d:45:38:e0:72:19:20:42:c1:e7:42:63:
                    d7:23:07:ff:d2:8f:49:05:49:0e:ee:97:61:9b:2f:
                    a9:fc:f9:8b:90:cf:1f:5d:c2:96:0d:6c:d7:3e:8d:
                    a7:2d:74:5b:22:12:7c:4f:e2:b0:9f:55:7c:ec:c9:
                    e9:c3:86:fb:ed:68:ee:4d:75:37:5e:39:a0:9f:ad:
                    fc:97:4d:37:50:89:0f:53:11:70:ca:dd:33:29:d5:
                    79:a9:e6:2f:d2:d4:20:a9:3b:34:1f:18:d9:48:76:
                    bc:47:15:f8:15:b1:73:c5:24:79:00:51:56:d1:b5:
                    47:d8:3c:a7:b3:bf:85:47:0f:47:f5:d9:61:9f:f2:
                    52:b1:55:e6:f2:4c:02:10:d9:09:ae:0d:4e:55:b9:
                    a5:ff:e1:00:48:bd:68:9f:13:75:81:db:1f:39:04:
                    37:72:00:67:07:20:b1:5e:76:7a:b8:30:8f:91:d3:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BB:FF:4D:26:2E:DA:C0:10:A5:12:A3:5E:76:71:C5:1F:AD:12:4F
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:03:2c:60:bb:f0:72:56:63:ad:af:ab:ac:6a:20:c5:b2:3d:
         9e:e3:c7:ea:dd:51:53:e9:fb:ec:9d:6f:e5:7f:1b:41:d6:46:
         c9:3f:a5:65:58:99:cd:bd:37:8f:20:82:c9:76:33:f0:1e:d8:
         18:a5:db:06:18:10:89:7d:49:ef:22:85:89:de:35:5e:e7:81:
         09:01:0d:86:c1:97:f0:d8:d7:e8:af:c9:78:01:ce:84:1b:fd:
         b2:d6:b8:13:1e:cd:a4:ef:f1:e6:a1:00:8c:e6:4b:fa:c7:5b:
         c1:b4:b7:21:00:0f:88:a5:22:25:e0:47:57:59:c7:c4:fa:d4:
         3b:69:96:50:e1:3b:18:b1:2a:b0:28:a7:ab:4a:68:a1:b8:46:
         a1:8d:a8:84:55:36:e9:3c:be:78:35:3a:45:ef:22:38:69:19:
         43:de:5e:bf:1f:9a:b1:d0:0b:a5:83:02:eb:9e:0e:f9:44:33:
         ee:34:7b:cd:14:0f:fc:d7:0d:1f:15:09:96:40:14:e9:61:b2:
         aa:a0:4f:74:1b:14:ed:32:d3:6c:92:51:db:ea:32:05:b7:8f:
         a9:c7:ba:86:ce:fb:88:5c:a7:e6:9d:ad:94:ab:c1:aa:b4:f3:
         c9:6a:2f:67:27:a5:18:c7:96:a3:3e:61:ab:60:ea:31:25:88:
         6a:6c:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:41:51 2025 by rpki-client