Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File:                     xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier:          1gU+Nx5kQvf+9CyMUahJyh8/3ODVo26ZeAc8nvtn0P8=
Subject key identifier:   74:11:A6:CF:CB:D5:8B:78:6F:48:8B:BA:32:2F:57:34:77:17:6A:0E
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer:       /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial:       0196BB241CA7BC8F3E48BE39918D56F03474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number:          1536
Signing time:             Sat 10 May 2025 17:00:28 +0000
Manifest this update:     Sat 10 May 2025 17:00:28 +0000
Manifest next update:     Sun 11 May 2025 17:00:28 +0000
Files and hashes:         1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
                          2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
                          3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
                          4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: BJF7shC4Q0OPUxMpOj8cED8xXF8WjCk/yN4fpOjOEjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:1c:a7:bc:8f:3e:48:be:39:91:8d:56:f0:34:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
        Validity
            Not Before: May 10 17:00:28 2025 GMT
            Not After : May 11 17:00:28 2025 GMT
        Subject: CN=7411a6cfcbd58b786f488bba322f573477176a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:be:a4:e0:ab:1b:94:bc:9b:52:d6:78:1d:
                    bd:ef:33:79:8d:4a:f5:cc:e6:77:cd:d9:b0:6a:2d:
                    6a:85:7d:74:73:93:39:a5:d4:c5:8f:57:0c:68:1e:
                    e6:a0:72:59:4a:43:18:35:44:8e:7e:b8:19:7d:1a:
                    8a:2c:24:82:bb:5b:10:e8:e4:d5:3f:85:9e:f7:84:
                    fa:d9:68:09:61:16:06:67:67:3f:9a:4e:7e:0e:fa:
                    fd:1f:55:5b:cb:9c:46:11:49:d9:26:e2:7d:f8:91:
                    98:a2:56:bb:49:5b:96:e4:fc:18:ee:69:1a:a5:f7:
                    f9:41:d4:3f:96:56:fe:cc:2d:69:bb:ab:5b:22:e9:
                    49:1c:b7:2c:fe:5a:88:2e:e2:fe:3a:8e:7a:0b:bf:
                    c1:d2:d5:a7:11:45:16:6d:c5:c1:b7:3f:12:87:d3:
                    10:26:8f:62:87:df:4b:2a:e6:52:43:85:3f:53:a4:
                    d1:f0:2b:35:06:3d:57:05:e0:df:da:e2:2b:a7:10:
                    5a:8f:bf:b3:65:4a:62:e1:57:04:fa:86:fc:b1:83:
                    50:67:3e:5d:82:7e:46:25:27:01:fa:0f:d8:ee:9e:
                    d0:e9:0c:c5:df:48:cd:56:1c:f4:d2:6a:c3:6c:f9:
                    7e:e4:fa:a5:70:6b:62:d4:18:b7:0c:00:4a:5d:18:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:A6:CF:CB:D5:8B:78:6F:48:8B:BA:32:2F:57:34:77:17:6A:0E
            X509v3 Authority Key Identifier:
                keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:16:1a:ce:7c:ef:82:63:9b:c9:28:ed:ec:59:94:66:f6:
         ab:93:8e:67:f5:03:dd:1b:a6:46:c0:2b:9c:fb:14:7a:9c:ea:
         12:f9:9c:fd:33:7e:98:1e:dd:f1:98:4a:c7:2c:a8:32:23:fa:
         0b:8a:c6:94:84:8e:7d:ae:7b:7d:86:b2:1e:ff:b2:b3:1f:d2:
         4a:36:f6:2d:f1:65:07:ad:ff:16:1d:7b:65:df:44:64:59:0f:
         9a:8c:7d:95:c8:3c:aa:40:ef:de:bb:e4:a4:e7:c0:dc:f4:c6:
         0d:b0:17:b7:ab:0b:cc:4c:55:01:06:f1:46:62:b6:3c:d8:2a:
         42:aa:ef:29:37:b2:34:0b:d0:b4:21:d3:15:19:58:f7:3a:55:
         fe:56:51:8b:2a:11:81:55:5d:58:29:d9:33:66:23:a9:9d:71:
         b6:90:c3:cb:3a:e7:bb:c9:54:e2:c5:60:c2:70:41:9c:9c:c1:
         90:b6:bc:87:9f:b4:9e:ed:30:a8:0c:2f:26:38:a5:8a:ae:5d:
         d2:1c:22:55:d9:e9:e7:a7:52:39:f2:c8:93:63:13:94:ac:0d:
         9d:92:dd:45:73:56:42:1c:46:18:5d:65:22:4b:65:11:76:8b:
         10:f3:d1:cd:43:e2:4d:89:2a:54:ab:67:51:15:4d:71:50:23:
         8b:a2:a2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:03:45 2025 by rpki-client