Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File:                     K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier:          +Fot1MCyXJ9CsxbaZhJdXqGyWwkM++1Z6CMX/tE0FNg=
Subject key identifier:   B5:07:FD:3E:A6:B8:97:B6:56:D2:78:DA:84:6E:12:17:1E:61:FC:9B
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       0196C6162B7B63DBF3875A1DD3DF92060501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 20:01:03 +0000
Manifest this update:     Mon 12 May 2025 20:01:03 +0000
Manifest next update:     Tue 13 May 2025 20:01:03 +0000
Files and hashes:         1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
                          2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
                          3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: ha9pS4qQN8ixD4e4xsfs/cMSCA5cYEU1pzu26w4GlNA=)
                          4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
                          5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:16:2b:7b:63:db:f3:87:5a:1d:d3:df:92:06:05:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: May 12 20:01:03 2025 GMT
            Not After : May 13 20:01:03 2025 GMT
        Subject: CN=b507fd3ea6b897b656d278da846e12171e61fc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:fe:23:a8:c5:6a:56:f4:4f:5f:fc:ea:b1:
                    22:33:68:c3:3c:f9:06:53:90:08:b7:45:4e:c9:02:
                    94:fb:75:94:f8:a7:c8:5b:66:1e:06:82:3a:c6:d5:
                    37:c4:a3:f7:db:78:0b:39:07:5b:19:1b:c9:26:da:
                    33:de:a1:cc:3d:64:df:76:db:b1:b9:e4:f1:e1:0d:
                    22:40:a2:4e:24:dd:0e:cd:1f:ab:f1:6a:3e:8b:91:
                    8d:00:db:5a:95:d9:df:88:ce:1e:69:fd:04:d4:5e:
                    ec:5d:df:c6:35:a6:cd:28:25:12:fe:95:bd:74:52:
                    8c:2e:36:aa:c4:40:6b:b9:09:2a:a3:0b:06:7b:b6:
                    1e:19:c9:e2:c0:0a:39:12:15:88:1f:bd:2f:80:dd:
                    ce:54:e0:c2:08:66:17:e8:e5:df:07:af:97:53:9e:
                    70:a5:df:b3:76:74:5d:72:bb:7c:35:9d:a9:04:d1:
                    9a:da:49:ca:7d:fc:bc:c0:eb:ed:08:7c:6f:03:c2:
                    9f:e3:73:14:5f:4c:0f:00:c3:c3:94:07:fd:68:f4:
                    a6:60:6e:44:e7:3e:bf:69:44:58:7a:f5:34:80:fa:
                    44:4c:24:db:82:28:86:07:5d:c9:82:05:d0:c4:cc:
                    d9:7f:b0:45:33:29:93:16:bf:ff:7d:ec:2b:95:47:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:FD:3E:A6:B8:97:B6:56:D2:78:DA:84:6E:12:17:1E:61:FC:9B
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:65:07:16:29:ca:cc:28:88:b0:87:a8:9c:86:7c:dc:7e:41:
         d8:8d:68:83:03:65:ac:0d:78:ac:75:14:47:81:5a:8c:9a:5a:
         13:2d:b7:4f:4f:c8:ce:5b:e9:a1:4b:cc:4f:c8:fd:e8:f6:d6:
         c9:13:cd:b1:c1:d7:62:99:e1:63:a8:31:b8:52:47:3d:65:3d:
         8b:f9:44:16:b3:6b:0c:a3:c2:3d:66:b8:33:ce:0e:1e:f2:84:
         d8:06:4f:b1:3a:2c:16:a7:38:fd:ef:7d:d4:78:88:c6:62:44:
         d7:49:14:a3:10:a8:3c:3d:ab:7a:02:64:d5:d1:1d:86:78:8e:
         b2:82:70:0e:ca:94:b3:4f:16:b0:62:75:84:a0:3e:0d:0d:9a:
         56:e6:be:74:a1:11:af:f7:3e:4b:dc:3a:cb:e3:85:44:7a:ad:
         b8:19:8e:c6:3d:4f:2f:6d:91:58:bb:cc:a9:73:ca:20:57:0a:
         6d:db:5a:bf:77:5a:f5:0e:77:f7:fc:4a:3b:c4:9a:06:af:5b:
         36:43:2b:89:99:51:75:4f:c3:47:e0:c8:2d:97:4f:e0:a1:50:
         00:00:a0:4b:49:5a:59:19:4f:98:7a:23:9d:7f:8f:91:ef:cb:
         e0:ae:95:b7:3b:74:14:7f:be:cd:ac:fa:af:b3:b0:d5:f9:8a:
         f3:71:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:04:46 2025 by rpki-client