Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
File:                     c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json)
Hash identifier:          IBTa/GBf6ui2uMKBpr2n+fjFL/blLjsqmHoIgUo7XZw=
Subject key identifier:   7C:D2:62:4A:BB:52:6D:E4:2F:A0:BB:FA:AB:ED:B6:98:78:CF:85:F6
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Certificate issuer:       /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial:       0196B4EAE315411DF398E83D437D493BEFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
Manifest number:          1538
Signing time:             Fri 09 May 2025 12:00:14 +0000
Manifest this update:     Fri 09 May 2025 12:00:14 +0000
Manifest next update:     Sat 10 May 2025 12:00:14 +0000
Files and hashes:         1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=)
                          2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=)
                          3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=)
                          4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=)
                          5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: 6pYyySVby4D0bYp5rknphZH7Oq42uCpnQsrzxOdh/ow=)
                          6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=)
                          7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=)
                          8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=)
                          9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=)
                          10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:ea:e3:15:41:1d:f3:98:e8:3d:43:7d:49:3b:ef:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
        Validity
            Not Before: May  9 12:00:14 2025 GMT
            Not After : May 10 12:00:14 2025 GMT
        Subject: CN=7cd2624abb526de42fa0bbfaabedb69878cf85f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:22:66:c5:df:cd:10:a4:9e:30:e5:a8:e2:
                    15:17:ce:56:aa:bb:15:96:e7:0e:d7:35:71:89:c9:
                    89:0a:03:10:26:94:b2:dd:64:8f:0b:94:90:75:f6:
                    87:f1:42:c6:7f:f6:62:af:48:95:ab:a4:7b:eb:7b:
                    d5:8a:e2:60:43:4c:0e:78:83:45:81:56:85:0f:79:
                    b5:f5:87:20:b4:40:b6:02:58:49:37:fe:c0:02:09:
                    6f:35:e6:b9:8f:57:42:bc:88:4c:b6:b2:0d:87:49:
                    1c:59:7d:0c:4d:ca:2d:c6:10:bd:d8:ff:4e:a3:2d:
                    40:b3:e2:98:62:e9:fe:f1:66:d5:46:c9:d1:6a:bc:
                    c4:32:fd:6a:69:0e:b1:9c:d8:14:a3:d8:bc:96:b8:
                    b8:6d:53:0e:12:e0:5f:76:50:5b:be:99:ab:5d:2c:
                    1c:5b:72:24:c1:21:82:de:42:b4:b8:9a:2a:c2:4b:
                    6e:b9:c6:41:44:74:f6:12:a9:d0:e4:9d:62:31:43:
                    72:c2:64:7f:98:40:72:ef:fd:be:98:91:dd:4e:6a:
                    0f:e2:d2:26:ac:fd:cc:63:16:07:a4:2f:d7:a7:c6:
                    89:a5:8c:a2:96:b7:8b:2e:04:9a:53:0e:fa:6b:13:
                    a7:2a:7e:65:71:4d:89:b5:2a:9e:60:c8:d8:13:68:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D2:62:4A:BB:52:6D:E4:2F:A0:BB:FA:AB:ED:B6:98:78:CF:85:F6
            X509v3 Authority Key Identifier:
                keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7c:50:53:75:a9:50:87:1f:20:31:97:7b:d6:2c:73:9b:0c:
         60:0e:7a:25:5c:a4:db:53:7e:32:f0:ae:5e:1d:51:cf:70:19:
         c1:27:df:21:d8:51:0a:d9:b7:c9:d4:aa:cd:3e:c7:b4:1e:26:
         f9:f1:1a:2f:7b:9e:fc:c0:8e:07:dc:20:fb:e9:e0:d0:aa:1f:
         0f:c0:cd:a9:9d:63:01:0a:b3:94:bb:22:60:ed:0b:a5:77:d6:
         9d:12:ba:76:34:f4:32:23:3b:35:7a:80:4b:bb:53:13:54:c7:
         d0:52:df:94:07:c1:47:e8:6b:f7:c1:6f:36:18:96:c9:f2:d9:
         52:53:aa:37:b8:1d:9e:08:b7:f2:a4:94:95:de:23:f7:17:f9:
         cd:8c:14:36:db:b8:72:de:9d:65:f9:2a:f1:fa:b3:e6:23:e1:
         af:5d:d5:09:49:0f:6a:e2:22:38:e2:c3:c8:e3:c5:bf:19:bd:
         e1:49:4d:63:69:f4:dc:f3:bb:ab:e7:20:10:8b:ce:7e:d6:2d:
         cb:5d:ad:15:46:ba:94:93:6d:fd:66:21:02:48:15:a2:bd:76:
         b5:86:30:8d:cb:3a:1b:94:6b:2c:2b:78:2b:6a:c0:5f:4e:17:
         c8:4f:04:02:7f:34:7a:8c:d7:8a:31:7d:76:1b:f5:e1:a5:5f:
         a4:04:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:43:18 2025 by rpki-client