Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
File:                     Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json)
Hash identifier:          UeBWCux3SRgXEilbkodXXwckdBZ0iwgzO0d1RbYxsxg=
Subject key identifier:   D1:8E:FF:9F:ED:88:B9:09:1C:F5:FA:05:BF:AC:B1:08:84:00:CA:BE
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       0196AC8D73792A9D2F8D969B35A855BE67A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
Manifest number:          03DC
Signing time:             Wed 07 May 2025 21:01:13 +0000
Manifest this update:     Wed 07 May 2025 21:01:13 +0000
Manifest next update:     Thu 08 May 2025 21:01:13 +0000
Files and hashes:         1: 05o0ilxpLPFj724SFa-brN8vzXk.roa (hash: CPN9MrS7MYDAN7zH2nr9vN3ZoOoKTAOXjde0z1Y3r4g=)
                          2: 5h88FMdyJ4BKxPsdcgHQyCeiggw.roa (hash: Owv+GMEcs1uONJHFnOZ4mKs3NxskXYOAjZpyCXtz47Y=)
                          3: 7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (hash: k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=)
                          4: 7OOt-MnHsX07hiPdKHIMZaJ8wrg.roa (hash: 7nZ90mtRGZWhPbm1Puw7IzZkWIgR1R3W35D51WFY05w=)
                          5: BT9PpbhARp2PKEupubiiio8TvBc.roa (hash: PoRHUsj11iEWOHUhXg6p185DLswF97IfYO5dpNwM+4k=)
                          6: F1OWe033_DuZ-JjrisCh6PYvi1s.roa (hash: bLONjsizRZ/N6QYxCW6KHMn5K6t8a7PJWP3/t57vEJk=)
                          7: K3PHjFr5iZQBePAHzZD7020H3CQ.roa (hash: cYqNDwyqOAThtjZwtvIGK4yhgMYUiG7kHacZddA60SQ=)
                          8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: pbAee8suagHKcmNq6/GctveDSjVfSNqTZGb3lfqhxVw=)
                          9: PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (hash: FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=)
                          10: SGJaxM1tftN6eWW_JhWZIZdq6Hs.roa (hash: i3+GB/wkLsPOj8TleSkbJUTDI0kj7dMA6dFb0QRWP+8=)
                          11: X-V1c33BeHLMq6YPZ6efCsl3cMM.roa (hash: qD2GqEyAmd2okDBw6OR3DlzX+O8r0bDHBHVLHEg9U3g=)
                          12: X6A7ZOxQkF-N5TBF6hNZ0D-sPxQ.roa (hash: sOJamuYIhYJWJLrvAE1wd1xA2gh7NgXmer7n43KBLdc=)
                          13: Y68HM_eE8K1w4SS6fxm68_4816Q.roa (hash: j5XSBxx8t0t2IG8jaeix/JPoU5Vp2pcHE0yvoVN43nY=)
                          14: eM7RoSEq3C715iKtcwBUqsiVTDM.roa (hash: U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=)
                          15: u-M1H4DlyfJcf3cI4KPf60AAf5E.roa (hash: rqvHkJ1B+GOatMUS6IQfjBMvmK91Ea22MfD3TS1yuVM=)
                          16: us6ukJjPwguMUHmhc8SpjnjeHOE.roa (hash: RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=)
                          17: zvMqPtiLMOCgjOxqm6euJp83YNA.roa (hash: jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:8d:73:79:2a:9d:2f:8d:96:9b:35:a8:55:be:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: May  7 21:01:13 2025 GMT
            Not After : May  8 21:01:13 2025 GMT
        Subject: CN=d18eff9fed88b9091cf5fa05bfacb1088400cabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:c4:10:b4:6a:5f:a5:07:74:f6:ce:ca:f8:
                    a6:08:df:51:f3:27:92:08:ae:56:37:84:fc:61:1b:
                    66:ad:cd:91:13:83:2a:2f:53:35:7b:ce:55:69:62:
                    34:fa:63:9f:6d:60:a5:0e:05:82:54:36:ef:bb:6d:
                    7c:0d:61:e4:9f:cc:15:f6:b9:7a:57:3b:4b:a7:bc:
                    04:13:f2:a2:1c:47:79:d2:99:b4:f0:c1:be:2e:e2:
                    63:1c:b5:aa:d0:d4:f0:93:44:e6:54:2d:01:50:b6:
                    49:2e:d0:6d:b8:ba:56:c1:80:b3:c1:32:06:72:e4:
                    99:a4:ae:a8:47:71:76:cb:2f:da:81:61:0c:a7:4b:
                    a8:6a:ff:ba:14:de:5b:57:08:76:4d:e0:b0:bb:37:
                    cc:bf:31:4e:5c:bf:9f:20:f9:c4:32:35:08:fb:0b:
                    ab:1d:32:d3:bf:53:aa:ad:2a:e2:db:a3:5b:f9:a7:
                    b8:ab:6b:8b:8b:1e:22:fb:23:82:dc:65:1f:d8:3f:
                    c8:8f:ec:90:a3:cd:77:fc:ae:00:49:87:42:03:93:
                    04:9e:e8:be:b0:6a:3f:7e:8b:9d:c4:6d:af:50:1a:
                    86:73:fb:d3:38:c6:3b:75:09:8e:d9:17:e4:a2:e6:
                    6f:44:b2:c7:6d:ec:23:72:5a:66:56:a7:ff:4d:58:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8E:FF:9F:ED:88:B9:09:1C:F5:FA:05:BF:AC:B1:08:84:00:CA:BE
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:4a:57:fd:e7:fc:76:33:b9:3e:05:22:a5:4b:4c:5b:f5:
         ae:e9:01:52:27:d2:7c:33:39:50:14:d6:b3:1c:90:53:74:cb:
         5b:4d:45:6a:16:cc:7e:80:43:fe:cf:d0:f1:43:b9:cb:da:df:
         4f:3b:45:b8:78:61:0e:ff:cd:f9:c1:a7:38:a0:4a:94:d5:66:
         57:5e:c6:5f:ad:f4:18:7f:43:e9:a9:f2:87:2c:27:90:56:e8:
         3c:0a:57:51:75:de:d3:71:7b:08:4a:23:dc:02:16:15:3e:67:
         32:f4:6c:fd:04:96:6b:1f:dc:ee:67:61:03:0b:25:ee:7c:f2:
         79:a7:64:4c:69:21:86:a0:42:1d:b5:a9:93:8b:81:ea:44:ee:
         fc:a7:af:77:9f:49:58:90:80:aa:9f:60:d1:c6:be:e2:93:b8:
         93:e0:ee:08:c8:d8:d0:4b:a6:2e:95:ab:43:3f:29:85:69:13:
         b1:bc:60:f6:20:ac:1d:50:41:e2:89:ef:20:cc:ce:bf:a1:50:
         0e:35:dc:e0:47:2b:c7:4f:7f:94:fe:7e:7e:f5:1a:03:5b:51:
         3d:4c:ac:26:72:f8:14:6c:36:a2:1d:28:29:1a:ec:8c:30:ad:
         ba:44:fb:44:a0:ad:35:09:03:d7:31:6a:16:3b:5d:90:96:03:
         f9:39:71:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:35:55 2025 by rpki-client