Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File:                     dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier:          FZU+a8yKUK4mrNPdEbgAIwFWkXG9B+ca4a92kdb9QPY=
Subject key identifier:   A5:09:F4:22:F8:AC:F5:14:7D:E1:88:61:12:2C:99:A1:73:12:FC:E0
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer:       /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial:       0196B3A1896A3C51EE8F373448F973714BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number:          1530
Signing time:             Fri 09 May 2025 06:00:30 +0000
Manifest this update:     Fri 09 May 2025 06:00:30 +0000
Manifest next update:     Sat 10 May 2025 06:00:30 +0000
Files and hashes:         1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
                          2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: IZh2k1jgrsMooEC4AI2zBb5Sn6cT7Gl0NncMCQf6H20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:a1:89:6a:3c:51:ee:8f:37:34:48:f9:73:71:4b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
        Validity
            Not Before: May  9 06:00:30 2025 GMT
            Not After : May 10 06:00:30 2025 GMT
        Subject: CN=a509f422f8acf5147de18861122c99a17312fce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:8f:f1:67:3e:71:df:01:cd:7a:33:63:19:
                    32:c9:97:75:d3:42:fc:45:a5:5e:ac:82:43:8c:40:
                    46:a2:3b:d8:0e:7e:b6:a7:54:a0:f0:1f:ce:5a:20:
                    99:c3:e7:4f:eb:0c:e1:4b:ca:f4:d9:18:01:ae:80:
                    8d:98:d8:11:33:0c:dc:75:8c:fe:03:74:08:75:70:
                    b1:ed:1d:23:f9:49:fd:a3:d7:61:80:0f:65:71:fc:
                    fa:fd:c8:91:2f:d8:9a:21:cb:65:c7:c7:69:9d:13:
                    00:82:63:0f:84:56:82:cc:d6:10:70:6c:3a:10:75:
                    39:bb:69:ff:4d:70:e3:24:e2:54:15:55:1e:01:30:
                    51:b0:54:22:b8:25:09:7e:57:38:1f:ca:6f:8d:1e:
                    0b:e9:ad:0d:21:ab:8e:dd:a5:ee:48:a8:21:4e:5e:
                    a3:9f:19:cc:9f:b9:9c:0b:6d:d4:f5:3c:16:e0:d0:
                    56:81:3a:48:fe:51:f1:2f:e6:53:29:01:f8:00:1f:
                    7d:63:9c:84:fd:49:7b:31:de:33:89:48:2a:b1:d1:
                    d9:42:01:13:1d:ce:1d:54:0a:33:69:55:a2:7a:3d:
                    6b:dd:b6:61:54:cb:4b:79:85:82:30:9b:28:1b:0b:
                    73:1b:1c:8b:c7:66:bd:b3:3c:76:0b:f4:c1:55:ee:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:09:F4:22:F8:AC:F5:14:7D:E1:88:61:12:2C:99:A1:73:12:FC:E0
            X509v3 Authority Key Identifier:
                keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:3b:ee:35:2e:fe:ff:0c:31:94:0f:40:81:e1:b8:01:3b:
         b6:bd:2e:1e:05:8d:3a:6f:fe:3f:02:46:5b:b1:e8:44:a4:96:
         c9:43:59:05:04:ac:ed:42:76:47:a3:55:54:49:14:ad:ad:2f:
         d2:6e:bc:24:ad:77:d0:46:ea:e3:fe:8d:bf:7c:76:1c:6d:90:
         52:0a:07:42:d0:d4:24:e4:21:32:6d:96:99:c9:27:a2:63:74:
         04:e4:29:3b:28:49:5e:48:47:ba:80:f6:7c:d7:fd:b2:bf:ce:
         76:3c:21:1a:4d:9f:ad:ec:1a:19:87:75:d0:7c:98:57:84:65:
         1c:cc:9d:f9:e0:c9:5c:b8:db:55:35:71:9b:8a:81:e3:dd:a4:
         ba:8f:06:14:fa:cc:ed:dd:8c:35:52:0f:47:1d:fe:e3:b9:04:
         29:a3:a6:9b:17:4f:27:45:62:83:80:05:14:90:04:fe:25:6f:
         bc:4e:30:bb:56:7e:73:e3:54:f3:1d:87:fe:2a:52:3b:44:d9:
         b7:fa:32:71:4d:58:76:ed:42:21:0b:d9:e6:6b:d1:cc:d1:ff:
         63:51:7c:d7:1d:7a:6a:b2:54:42:01:cb:6b:af:1e:44:40:33:
         e9:fe:98:6d:58:36:bb:64:13:a1:93:26:db:df:3f:a8:f5:73:
         cf:54:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:51:21 2025 by rpki-client