Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File:                     vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier:          qoCErDv6/MLOVgTkf3fFNJB94Ph4dKLWsVFc28/YJVc=
Subject key identifier:   E4:35:37:1D:5B:95:8B:8A:60:78:09:4E:C7:BC:B3:B2:14:87:6A:49
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer:       /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial:       0196A0517F6F0F8E5A445CCAD46768057E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number:          1526
Signing time:             Mon 05 May 2025 12:00:17 +0000
Manifest this update:     Mon 05 May 2025 12:00:17 +0000
Manifest next update:     Tue 06 May 2025 12:00:17 +0000
Files and hashes:         1: 3alv3XwEbOFu7iiK8LFbOce6T6M.roa (hash: 0D37DkikXSNhNHk7nw4gpplDRFgdjXDIi3MfBRU1TWY=)
                          2: QfCE84C5mXjE3pc-vv8Z3PN8Ftc.roa (hash: fWz5/zlEwc/FfIJ7uTaCeiVlT5ulVNUEAcYZgSkvI+4=)
                          3: XuYgpmXug2q0Cu_sdJBe-1XGD2I.roa (hash: joQ8DCTmx5DI+ZzMDXT+0TtQtcaVPpX4LENPUyxWUVI=)
                          4: dYt1KKj4tCGLif9Uw-PUq5XSPt0.roa (hash: VRn5rOavF3Z1TUQt1A8oCfFVCQrXkGJKkkqLjlnItNg=)
                          5: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: JsmGW5gHEN1Sjd5EvLs/TZLbPlXkntK6Kj6Wso7+xGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:51:7f:6f:0f:8e:5a:44:5c:ca:d4:67:68:05:7e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
        Validity
            Not Before: May  5 12:00:17 2025 GMT
            Not After : May  6 12:00:17 2025 GMT
        Subject: CN=e435371d5b958b8a6078094ec7bcb3b214876a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:fb:33:7f:4f:c6:14:ab:93:d7:ea:36:27:
                    42:3b:80:e7:ef:0e:e8:97:55:29:47:0b:fd:80:9d:
                    ff:ad:ac:f3:03:0a:0d:0f:71:81:4c:23:37:d2:b4:
                    a8:a9:f9:2b:dd:c1:ca:9e:fb:fa:06:bf:06:f6:12:
                    1e:f2:f3:4a:86:07:bf:7a:af:25:66:eb:cb:1f:87:
                    cc:70:91:0d:70:cf:5a:48:b4:54:e0:14:d7:40:d9:
                    b4:2d:dd:b1:ee:38:73:42:77:7a:98:3b:a4:db:9d:
                    bc:41:6b:3f:75:45:46:76:ce:fc:93:35:8c:ed:5c:
                    c5:e7:e0:c4:ae:f9:17:83:27:87:6d:7d:e9:84:94:
                    0f:23:46:76:49:e7:c5:4c:3f:cc:1d:be:82:89:56:
                    8a:c9:9e:70:b5:48:a6:5a:1c:db:2f:7f:67:24:d7:
                    56:04:58:c5:10:ba:b2:61:3d:12:c3:9a:7d:64:e4:
                    a1:c4:94:9f:10:62:54:85:ef:11:1d:2e:f1:c6:b0:
                    2c:63:1c:b9:e3:dd:35:f6:5b:71:98:78:48:fe:76:
                    42:e2:68:2a:27:75:27:ec:ea:b7:df:dc:0f:21:13:
                    37:fc:f7:b3:1b:44:2e:85:d3:47:d1:19:b4:b4:79:
                    58:75:68:c8:a4:b8:17:1a:60:14:53:65:da:24:6d:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:35:37:1D:5B:95:8B:8A:60:78:09:4E:C7:BC:B3:B2:14:87:6A:49
            X509v3 Authority Key Identifier:
                keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c3:b8:ae:de:33:02:35:8a:be:50:aa:66:9c:4b:d0:66:2e:
         22:ee:fe:e9:f4:bf:df:f9:65:01:b7:e0:e7:71:ab:c0:4a:a9:
         83:81:65:c4:96:62:35:23:f2:29:da:8a:03:02:94:61:53:8a:
         ac:95:57:c0:b9:9d:03:da:a7:4f:ec:cc:53:f2:a9:2e:6b:98:
         a1:94:e8:89:65:bf:70:1c:2c:0e:15:6c:0d:b0:36:43:06:8f:
         55:c2:95:6a:80:5a:94:ae:04:10:77:8d:7b:30:dc:59:22:0f:
         e7:52:08:f7:69:fa:de:9c:c1:8c:41:84:ba:cc:df:31:50:3d:
         a6:d0:4e:72:5d:47:c6:ce:07:12:1a:4b:9f:5e:43:8a:24:8b:
         4e:31:19:2f:36:72:fd:23:3e:e9:1b:4b:cb:ff:b6:06:59:63:
         20:b5:77:bd:13:cd:f2:e1:e8:8b:a4:aa:cd:8a:4c:67:f5:53:
         4f:3d:ef:9f:6d:2b:70:98:67:d0:60:29:e7:20:e7:b8:29:fc:
         29:e7:f3:a5:ee:a1:43:7f:ec:a5:86:13:9e:a0:a2:fc:fd:34:
         ba:14:2a:2b:30:12:12:41:92:f6:98:a7:dc:1d:3b:79:f0:3e:
         b7:1c:47:5a:28:d2:03:1a:d8:ed:d7:88:3d:16:8d:47:57:c6:
         a6:30:a0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:59:50 2025 by rpki-client