Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File:                     XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier:          at6UOrZ1lck492ckIp7Jj4TlXlddhOpQlJjjkOUzIOg=
Subject key identifier:   F5:A0:04:CC:42:8A:4F:5D:09:1C:6C:87:54:FB:5D:36:29:4A:84:A0
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer:       /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial:       0196C2A6C9FC3E90F1D5A1FB3A765B690032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number:          0EAE
Signing time:             Mon 12 May 2025 04:00:32 +0000
Manifest this update:     Mon 12 May 2025 04:00:32 +0000
Manifest next update:     Tue 13 May 2025 04:00:32 +0000
Files and hashes:         1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
                          2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
                          3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
                          4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: Qwq22Hau2MLZwWj28ddBSFiPTqh5cBlyEvkjRvHG1SU=)
                          5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a6:c9:fc:3e:90:f1:d5:a1:fb:3a:76:5b:69:00:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
        Validity
            Not Before: May 12 04:00:32 2025 GMT
            Not After : May 13 04:00:32 2025 GMT
        Subject: CN=f5a004cc428a4f5d091c6c8754fb5d36294a84a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:e2:13:bc:2b:f5:0e:d0:df:44:ab:72:2b:
                    94:57:97:50:93:16:5d:2c:de:34:28:85:52:35:40:
                    b3:fa:e0:5f:fe:99:cd:af:f4:14:79:43:2d:28:0d:
                    27:7e:0f:35:7f:3a:3b:75:2e:84:8a:49:23:fd:88:
                    ae:52:95:02:d5:4e:3a:92:be:85:4d:85:d4:29:94:
                    e4:e8:b6:5a:f0:0e:91:8f:03:27:30:ba:e1:88:97:
                    35:51:f5:46:d2:a6:ca:72:da:7a:9e:22:ed:31:37:
                    de:50:e3:82:56:13:64:a6:ae:d8:d7:d3:34:b8:7e:
                    9b:2d:e4:eb:0d:53:4f:0c:bf:48:2b:79:d6:e3:32:
                    60:a4:51:11:71:db:d5:fe:03:47:ea:3b:a9:63:36:
                    5e:f1:47:0b:d6:b2:0d:d5:3c:4c:9f:c7:b2:82:92:
                    b7:d6:3a:c1:ce:84:73:83:b7:27:4c:72:90:17:5c:
                    c5:75:22:18:d1:49:14:a0:7a:a6:0a:bb:93:37:a6:
                    c8:03:83:f1:cd:e2:6c:f8:fe:6c:22:7a:11:e1:30:
                    e5:6e:b9:c2:2d:54:e1:ed:81:a8:44:82:91:16:9c:
                    7e:4a:0b:86:e3:9b:23:ca:c1:ea:10:79:1d:1f:04:
                    92:6c:36:d6:a8:2b:6a:3f:c3:f1:40:e9:f6:a5:cd:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A0:04:CC:42:8A:4F:5D:09:1C:6C:87:54:FB:5D:36:29:4A:84:A0
            X509v3 Authority Key Identifier:
                keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d7:50:21:21:93:87:51:85:28:8c:11:a1:e2:22:4b:cf:48:
         95:a6:04:fe:4e:8c:e5:10:74:ec:64:f0:96:56:d2:4f:fb:95:
         35:56:09:b1:12:6c:6d:86:7c:5e:1c:bd:42:49:24:8d:45:85:
         9d:fd:f6:e0:19:53:34:ac:50:d2:6f:0f:0a:b8:f2:43:5f:34:
         56:10:23:1d:c0:b3:f8:0f:bb:dd:23:91:07:31:a3:38:da:7e:
         3f:9f:2d:c9:f4:06:fe:18:90:58:f6:36:73:3e:f2:ac:a3:6a:
         25:ac:ec:d9:7b:1f:00:c7:58:67:2d:2c:0c:16:63:ff:51:3b:
         01:a9:d0:48:52:61:60:68:e8:f0:c3:9b:79:d4:d3:14:20:39:
         2c:eb:e2:cf:a5:51:3b:27:a3:fd:2d:d5:4f:a2:49:fb:fe:1b:
         22:67:2b:ac:32:5d:2f:ad:60:a9:26:4e:f6:9f:6a:70:0a:4f:
         3a:9d:18:d0:0d:9f:a8:a8:be:8f:b8:f6:fa:59:5b:c4:ec:a6:
         ca:c9:ad:cd:d2:97:d8:9a:83:8b:09:33:e6:b7:6e:ce:89:6c:
         21:19:e7:4b:a6:f7:60:2d:cc:64:3a:2a:e8:72:1b:6e:11:86:
         f3:84:67:47:0c:50:b9:43:a3:e8:15:46:0b:da:19:83:f1:06:
         45:ac:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:11:11 2025 by rpki-client