Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          PbbZjkMP6FpJ1g2eCu3Z0BqQXLUhDZfI+fzPgLaNcnA=
Subject key identifier:   7D:78:47:01:DF:F8:F7:73:AF:86:CD:42:76:B8:7C:C3:4E:D1:BD:8C
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       0196A0F6B773F2203984693B2C50D2BE3149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          0263
Signing time:             Mon 05 May 2025 15:00:45 +0000
Manifest this update:     Mon 05 May 2025 15:00:45 +0000
Manifest next update:     Tue 06 May 2025 15:00:45 +0000
Files and hashes:         1: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (hash: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=)
                          2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
                          3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
                          4: gdHjw5BAYBUGiQIKDf_rANYjbqo.roa (hash: rBCOEGXMkDk7MH6Epcgax70EgSCg7o0cp931QH6ZEmk=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: HQOB+dgx75jdzTgjq3oRDfch+zgwkAal3NLE7DgcMsY=)
                          6: y7BcwDEAXqOJr6z4aNGCsX7xfw0.roa (hash: NHC7ZwJSkEI3d9bNJO6OCWV6hxqIR1IsXwJaROvY2+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:f6:b7:73:f2:20:39:84:69:3b:2c:50:d2:be:31:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: May  5 15:00:45 2025 GMT
            Not After : May  6 15:00:45 2025 GMT
        Subject: CN=7d784701dff8f773af86cd4276b87cc34ed1bd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:98:ab:88:db:a8:26:12:04:43:35:b1:65:
                    bf:0e:25:d1:b3:63:3d:24:72:94:d2:b3:fe:02:88:
                    70:65:12:c5:ae:38:56:94:8a:cc:d5:4d:c8:fb:0c:
                    63:d7:78:1d:24:ed:64:fe:b4:ef:a2:69:76:f7:27:
                    8b:24:5d:17:95:ed:a3:bf:89:9f:e0:50:a4:5b:ad:
                    92:ac:48:6d:76:98:d3:de:a6:2d:ac:c4:12:46:4d:
                    63:90:7c:5d:7a:7d:4a:a7:2d:8c:b0:6e:3f:7c:a6:
                    fe:d8:9e:55:eb:e6:31:4b:a5:a0:f6:d3:74:62:2f:
                    5f:38:4c:40:c1:b8:84:2c:4a:37:18:46:85:16:ba:
                    3b:af:73:8b:fc:43:ae:7f:90:57:20:43:b6:af:0a:
                    09:da:40:7d:c3:da:27:c3:cd:a1:ed:85:2a:74:e3:
                    75:60:f5:64:d1:3b:62:60:d1:dd:85:51:6d:21:21:
                    e4:8c:4f:99:20:ac:f0:2b:31:3e:4b:59:d6:e8:46:
                    62:58:56:84:79:a3:40:ee:bb:b6:39:7a:c6:16:22:
                    78:28:60:e0:e6:47:39:39:69:8b:bd:41:81:0b:0e:
                    be:c1:9d:74:44:d2:20:09:13:26:1c:93:fb:75:3a:
                    96:61:ba:cf:8b:06:cb:db:32:78:ee:08:00:bf:5d:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:78:47:01:DF:F8:F7:73:AF:86:CD:42:76:B8:7C:C3:4E:D1:BD:8C
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:2b:84:4a:72:40:bf:a1:ff:72:78:0d:98:3e:fc:93:7b:
         2c:ac:e4:5c:d6:8d:b1:a1:c5:4e:0b:0f:77:57:d2:03:54:19:
         14:0a:1e:99:49:bb:f0:46:08:8c:5d:d3:82:eb:b1:52:01:3d:
         0a:0a:8b:87:37:58:27:ad:f5:8f:d4:23:7f:c3:26:4d:67:24:
         eb:f0:ab:ce:fe:0a:84:e4:04:d7:a0:5a:e4:0a:04:e0:62:25:
         57:ec:f5:1f:ec:f2:bb:c6:dd:50:c1:46:ce:8e:c6:c4:1e:e2:
         2d:3a:4e:1a:9b:68:60:1a:e3:59:64:93:fc:f2:20:74:d4:88:
         36:6b:2a:7e:6b:6e:b7:f6:4d:3c:bb:64:49:c1:17:2f:2a:2f:
         c0:34:11:97:01:c1:ea:27:3c:db:ff:c7:4c:9c:9a:42:f5:37:
         a3:b0:0f:8b:df:6f:58:70:19:a5:94:08:ab:fc:af:16:ad:8b:
         66:4c:dd:b8:29:ac:fa:35:92:8a:77:59:45:e1:55:24:dc:b2:
         d2:a9:30:0b:ad:b0:d5:27:8e:86:14:7e:4e:e5:a3:a3:30:81:
         ae:7b:f6:43:70:42:1c:84:8d:3b:23:65:ab:a6:0e:4e:96:41:
         d7:d4:e5:dd:95:9f:34:18:d9:4d:fd:71:60:f3:bd:a3:e3:20:
         33:57:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:43:27 2025 by rpki-client