Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          KtCxvEQgz/VhtIwov+K3gVxx4PIQLeDgPIIZsXOtfPs=
Subject key identifier:   ED:B3:C6:7C:E0:A1:ED:ED:46:B1:DB:BF:F2:04:57:2E:CC:5D:2A:14
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       0196BF3817804C8CFE6E0AFAF6CCF1A1B43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          1573
Signing time:             Sun 11 May 2025 12:00:46 +0000
Manifest this update:     Sun 11 May 2025 12:00:46 +0000
Manifest next update:     Mon 12 May 2025 12:00:46 +0000
Files and hashes:         1: iiUeXLLt-1_q1sqXQylSJn8YIz0.roa (hash: QigdA9bNMVfoJev0ZZ7xl7Qye3Fuam811gOFHSrVr2A=)
                          2: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: 6NcOzCs8sLPma/MMuSwVL8xeYWCmmi0owRqeyOZj2NY=)
                          3: uoQypbe_WXl9fUjjkza2xu-8nhM.roa (hash: YX+cx3IEUEYmyF+dpQ2e75vD+fBMEYY3zSfURoavVBs=)
                          4: ut3Ia6-mOfUCkcqND1t7uvinIqc.roa (hash: aJkTC/NqOQ2/INKdyvEr1miuxsKpaWRMdWzEAJzyDDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:38:17:80:4c:8c:fe:6e:0a:fa:f6:cc:f1:a1:b4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: May 11 12:00:46 2025 GMT
            Not After : May 12 12:00:46 2025 GMT
        Subject: CN=edb3c67ce0a1eded46b1dbbff204572ecc5d2a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:70:91:c6:5c:2c:e9:e5:bb:77:89:01:c8:
                    37:1c:93:63:2d:87:95:76:05:92:13:ad:fb:48:d1:
                    4b:15:df:fd:85:fa:c1:ed:28:cf:15:2f:84:1d:5a:
                    2e:b8:90:29:9f:19:3e:22:7f:66:86:5e:0d:bc:bf:
                    aa:cd:bb:00:4c:3a:5c:10:6c:8d:13:c1:56:d7:57:
                    d3:31:21:2d:59:4c:79:92:77:5a:70:54:39:3f:ec:
                    fc:47:5b:0f:27:e6:6c:c8:aa:91:67:59:81:ab:41:
                    e5:9f:6e:4e:65:e5:8f:ea:9e:e9:47:1b:bd:b3:4d:
                    3a:d4:7d:f8:ca:3f:31:3a:88:6c:9d:24:0f:64:35:
                    ce:c7:8c:4a:6d:31:31:1a:4d:a1:0a:59:42:5d:dd:
                    3f:72:36:e7:12:79:02:63:7b:ed:56:da:c5:74:60:
                    ac:20:9d:0b:e2:c1:a4:5c:13:dc:bb:6e:53:76:97:
                    f0:22:70:ea:f6:32:9a:6d:39:d5:cc:d6:6e:9a:52:
                    0c:cb:3e:75:cb:6f:98:d7:bb:af:b1:68:65:8d:67:
                    86:98:98:bd:e4:fc:74:6c:a0:cd:b8:f3:24:0e:96:
                    b3:51:11:62:3f:a2:0f:a6:15:96:4b:9e:62:65:0d:
                    dd:8e:94:8c:af:f3:75:ff:9c:74:2d:8a:e7:27:b3:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B3:C6:7C:E0:A1:ED:ED:46:B1:DB:BF:F2:04:57:2E:CC:5D:2A:14
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:25:18:42:e2:42:94:d7:f4:86:ad:8a:34:8e:94:14:62:a5:
         5e:3f:5a:49:36:17:17:50:c1:30:5b:63:25:03:d0:85:46:e6:
         b8:fa:5f:95:a9:ea:99:2d:92:ec:68:c1:96:7f:c0:a4:8c:b7:
         75:9a:b6:28:a4:ad:05:ec:6d:5b:a5:c6:dc:98:7b:67:1b:ac:
         0a:a6:ab:5f:7b:b3:db:ef:58:6f:4c:a4:93:ee:76:6c:50:06:
         0d:0a:2f:c8:bf:64:4f:7a:2b:b9:ee:4d:70:95:04:61:8d:91:
         62:9f:91:44:cf:06:b0:61:c0:63:d4:4c:85:f9:66:86:24:f3:
         be:d2:9b:b4:94:49:de:5f:f6:bf:fb:13:01:d7:af:bd:e7:97:
         ab:7d:18:63:c4:9e:ed:44:03:ce:76:70:3d:02:84:47:1d:6e:
         f6:31:eb:86:87:84:07:cb:e0:98:f4:29:47:d0:aa:01:6b:e2:
         47:7a:01:68:68:b6:62:66:88:a3:3d:71:10:29:a4:a7:e4:47:
         8f:7a:db:e9:3c:de:1f:40:9c:ba:99:d7:67:3a:ae:42:af:de:
         e9:a0:f2:08:0c:4f:a5:9d:29:96:8a:78:f2:56:8a:97:60:e1:
         41:82:ca:39:92:fe:c2:5f:df:6b:9f:61:8d:f4:23:60:07:08:
         1d:d1:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:41:53 2025 by rpki-client