Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File:                     pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier:          nNSoGB+PPfR48lZIActez5gKkrdA2fWmHi2Qpb+VqxQ=
Subject key identifier:   70:34:40:57:7B:39:D7:67:4A:EA:F3:CF:0D:D0:B8:FD:8D:DA:8D:08
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer:       /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial:       0196A1D26E5AD973AAFFDFA926CFAB1EEA7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number:          1528
Signing time:             Mon 05 May 2025 19:00:44 +0000
Manifest this update:     Mon 05 May 2025 19:00:44 +0000
Manifest next update:     Tue 06 May 2025 19:00:44 +0000
Files and hashes:         1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
                          2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
                          3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
                          4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
                          5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: TG4hHeONCP7Nc/yP8FlGyTg2QvdbQf7InGY6j6jyzBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:6e:5a:d9:73:aa:ff:df:a9:26:cf:ab:1e:ea:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
        Validity
            Not Before: May  5 19:00:44 2025 GMT
            Not After : May  6 19:00:44 2025 GMT
        Subject: CN=703440577b39d7674aeaf3cf0dd0b8fd8dda8d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:2f:c0:be:69:00:51:ef:5e:45:fc:14:74:
                    7f:82:24:65:0b:e0:16:3c:08:c9:da:c2:df:20:45:
                    72:f5:dd:4c:e4:8a:65:1c:50:9d:62:c3:29:2a:99:
                    20:87:12:dc:e8:b9:f1:3c:db:be:e5:14:88:ab:16:
                    fd:a1:ff:3e:46:60:4d:40:39:96:aa:5d:5b:05:a0:
                    8a:9c:4b:bd:81:6c:48:b2:5b:5e:f9:c0:b9:bc:51:
                    8a:31:95:27:e9:07:e5:96:88:ef:fc:2d:8f:52:3e:
                    6f:7b:36:61:ae:b7:92:e2:61:a6:5e:01:87:d7:ab:
                    b7:95:88:f7:b7:c4:3e:fd:0c:79:16:53:46:36:75:
                    2e:4d:0b:06:a1:e1:74:f1:53:cc:a1:49:7a:e6:53:
                    0c:e2:d7:50:dd:f9:45:b5:93:42:47:c9:d4:ed:2d:
                    8f:ed:10:50:ed:72:4d:27:ac:c0:91:6d:57:a1:05:
                    6c:b0:49:cb:01:05:83:58:1c:15:f6:cc:6a:e2:f4:
                    d1:b7:8a:e9:a4:ea:3f:fe:3b:76:76:f3:c5:8e:77:
                    4c:a7:7d:bf:ed:d4:1b:f3:a2:6b:5b:39:3a:c8:99:
                    4e:25:17:7a:cc:30:b6:f3:61:b2:10:cb:81:92:1d:
                    ec:10:4f:4e:6c:23:30:a2:f5:ca:37:f7:8b:1e:71:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:40:57:7B:39:D7:67:4A:EA:F3:CF:0D:D0:B8:FD:8D:DA:8D:08
            X509v3 Authority Key Identifier:
                keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:a2:7e:e4:4b:ab:1a:d9:a5:f0:b8:23:cb:6e:ec:c8:39:37:
         52:cd:2e:f6:b4:6b:46:6e:97:a6:94:b1:e6:f8:be:23:9f:c0:
         83:4b:04:7f:cb:60:45:0a:0e:e4:ff:32:1a:83:ef:ec:f2:0e:
         c7:25:f2:6a:94:e7:c6:b2:66:51:4c:ad:e0:f8:38:b9:47:22:
         31:a7:43:78:5a:f1:ae:9c:10:7d:fe:82:6f:60:4b:cd:25:d8:
         f3:e3:22:9e:36:a9:6d:d7:26:9c:4b:c3:45:e3:82:10:4c:a1:
         cb:6a:8d:1f:f7:ad:3b:7f:00:00:fb:4c:57:b7:35:a6:2f:f6:
         44:35:80:78:bc:4a:9e:7d:8b:a0:5b:44:66:74:9c:4c:13:21:
         b5:7e:2c:58:5f:34:73:35:77:a1:ae:95:a2:1b:df:c2:18:3d:
         4b:a7:c0:4a:83:6d:5d:64:6c:62:61:7e:ed:d3:71:29:84:f1:
         1d:50:8c:c9:28:8c:34:2a:5b:2c:7f:b9:1e:a2:20:6a:8c:a0:
         c0:32:e8:9e:28:36:5b:bf:20:c1:dd:1c:6c:1a:fc:29:67:ac:
         5c:8c:b7:eb:f0:a0:97:1f:56:7f:6c:84:58:bc:84:91:6b:6d:
         b7:ff:bc:4b:ae:a0:79:fb:09:a3:c6:d8:2c:1d:ba:f4:c1:77:
         76:70:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:22:44 2025 by rpki-client