Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          Jk186FNRspuCRkWOyEdvTdMQAbrGuw9EIDl9gYNKMt0=
Subject key identifier:   77:95:DF:A2:33:0C:C0:3C:53:57:95:19:9C:BF:E9:7A:D8:4F:93:BB
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       0196A54130807C98088FDC57567F6702F8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          1537
Signing time:             Tue 06 May 2025 11:00:34 +0000
Manifest this update:     Tue 06 May 2025 11:00:34 +0000
Manifest next update:     Wed 07 May 2025 11:00:34 +0000
Files and hashes:         1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=)
                          2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: 67hWOdCB7kEJkw0JcT3tSZ6Dn1cX+wwSrawIM5B1C0E=)
                          3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=)
                          4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=)
                          5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=)
                          6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=)
                          7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=)
                          8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=)
                          9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:30:80:7c:98:08:8f:dc:57:56:7f:67:02:f8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: May  6 11:00:34 2025 GMT
            Not After : May  7 11:00:34 2025 GMT
        Subject: CN=7795dfa2330cc03c535795199cbfe97ad84f93bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:f5:61:06:2c:71:23:e8:6d:d1:9f:07:71:
                    49:b9:1d:9f:c0:15:37:fd:37:cc:69:09:17:d1:04:
                    be:42:7b:55:b0:4e:e3:b9:70:e8:cb:d5:05:e3:5b:
                    e6:2a:38:03:93:12:c5:77:54:27:4e:58:7e:26:1e:
                    e1:2a:3d:03:a0:ce:68:5d:39:24:3b:00:49:9e:b8:
                    85:f9:4e:9a:4b:1d:02:db:7b:26:fa:ec:a6:54:31:
                    85:14:30:fa:f1:8f:62:89:fc:72:48:05:da:ef:bc:
                    1f:3e:74:de:74:50:0d:89:bd:c4:a4:69:24:3d:be:
                    7f:7c:4b:d8:39:fa:ba:d9:ba:29:72:ac:b7:d0:3a:
                    45:71:b5:3e:21:8d:e5:d0:0f:02:2b:6e:2e:54:a2:
                    0f:3f:c2:52:8d:28:83:76:4b:8d:5f:95:96:73:d7:
                    24:d3:42:6d:e3:09:1a:41:65:82:b7:c5:84:fd:41:
                    d5:0e:80:cd:d5:f4:25:db:06:84:9f:66:2f:84:8c:
                    18:38:cb:bc:a1:ed:7b:b4:d5:67:ef:06:37:7e:e8:
                    08:15:16:46:66:cf:e7:f9:0a:d0:f7:9a:ef:47:b1:
                    44:03:db:9b:2b:51:8a:87:18:b3:d9:06:9b:fd:e5:
                    9e:b6:9a:c1:d8:9e:93:76:24:e7:1c:96:87:3f:0a:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:DF:A2:33:0C:C0:3C:53:57:95:19:9C:BF:E9:7A:D8:4F:93:BB
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:27:e6:27:dc:ac:ce:a7:4c:13:be:d2:5d:76:ed:b1:10:
         6a:30:2f:da:98:16:ef:c3:85:12:25:a1:fa:6e:e7:ae:2a:b1:
         89:0f:83:4a:9f:89:64:3e:9a:95:0d:6a:d9:ca:23:c8:24:ba:
         9a:45:01:69:bc:ee:b5:d0:e3:cf:13:26:28:b7:02:3b:2d:1c:
         77:a7:74:dd:ad:7c:1e:28:65:14:ed:29:cf:4e:ff:59:77:78:
         09:ae:3e:1c:89:56:f4:aa:50:a9:d2:13:c1:bf:f3:17:23:ef:
         17:61:65:53:66:b7:98:8f:7b:f5:19:35:e1:13:42:51:e3:ee:
         7f:5c:3d:52:ac:c9:30:69:53:ca:6f:a6:83:4f:df:7b:07:e1:
         24:84:7e:08:47:aa:22:7d:a5:4e:0e:2b:7f:39:43:cc:1a:52:
         80:1a:6a:9e:aa:d7:bb:12:57:38:95:8f:77:2b:48:e8:db:7c:
         b1:b6:0e:07:31:71:b9:a6:ae:8f:c9:12:b0:f2:70:a4:98:84:
         39:fb:9d:5b:0d:1e:be:58:73:2f:4b:d9:b0:e1:9c:68:a9:6d:
         08:79:92:0b:e6:64:ca:fa:8f:43:d0:0b:b4:93:49:64:a3:56:
         5c:51:7a:56:d7:d3:64:b4:f1:a3:c6:ad:6e:3d:d0:c2:1b:8a:
         8f:54:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:00:13 2025 by rpki-client