Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          gwUhp6r73Lw3oBIOsU4HKla9tRjZKqpqL0eCbd6R4NQ=
Subject key identifier:   EA:E0:89:52:23:12:DF:6A:1B:7E:9D:7C:29:FC:25:D2:A1:23:FD:AF
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       0196B1454210423AC183357D1F0D27C33DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          0E01
Signing time:             Thu 08 May 2025 19:00:28 +0000
Manifest this update:     Thu 08 May 2025 19:00:28 +0000
Manifest next update:     Fri 09 May 2025 19:00:28 +0000
Files and hashes:         1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
                          2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
                          3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
                          4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
                          5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
                          6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: XswZxojatN6cXIP3zIzTVsjihTUP3ASdrS6xhjeWCoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:45:42:10:42:3a:c1:83:35:7d:1f:0d:27:c3:3d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: May  8 19:00:28 2025 GMT
            Not After : May  9 19:00:28 2025 GMT
        Subject: CN=eae089522312df6a1b7e9d7c29fc25d2a123fdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:ba:49:f7:6e:d4:ad:e5:0b:27:86:e2:41:
                    fd:9a:e1:89:f5:9b:39:ea:d0:6a:ba:88:a6:86:69:
                    fe:af:85:8a:b4:80:78:32:3f:27:0b:3a:3d:f6:8f:
                    52:3f:96:04:e1:c2:ba:1d:3b:d9:58:d0:b6:96:5e:
                    d3:e7:d8:e2:2d:ce:d8:32:cc:0b:89:ba:4d:62:a5:
                    d9:a8:5b:0b:48:76:a0:3b:58:df:a2:5f:f4:ae:7e:
                    6b:74:00:4d:d5:a3:fd:ad:19:7a:19:fd:88:19:b7:
                    30:bd:c1:69:6e:12:99:cd:98:57:6c:82:7c:e4:7c:
                    96:ab:6e:bb:98:14:6f:88:82:b3:d8:c0:f3:38:ec:
                    44:5b:3b:60:e1:bc:54:c1:3e:ae:31:da:ef:eb:5e:
                    2e:8d:32:0a:2b:ce:e9:72:ee:a6:ad:4e:bf:05:91:
                    ec:8c:a6:2c:bb:06:f4:e8:34:17:9a:b9:b0:7b:ea:
                    46:ad:04:be:1d:a5:26:13:c4:75:ca:70:b6:10:57:
                    e5:05:e9:46:01:00:16:a4:83:49:bf:b4:3f:4f:cb:
                    5d:9c:cb:b6:aa:5f:9e:22:ae:de:71:0e:29:bf:19:
                    e6:04:3a:cf:fd:f1:01:33:a7:7d:a0:ea:a8:3a:5a:
                    e3:5b:c8:e6:37:83:4d:cc:83:a3:c4:aa:d7:69:03:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:89:52:23:12:DF:6A:1B:7E:9D:7C:29:FC:25:D2:A1:23:FD:AF
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:04:a2:16:2f:45:14:d5:fd:2a:2b:3d:84:74:ad:ef:0a:b1:
         1c:8d:ca:02:2b:da:57:28:d6:56:87:64:97:fd:5d:51:c9:82:
         ad:d4:2e:c0:ba:d1:c1:1c:01:9c:36:df:7b:87:f0:04:ac:69:
         1e:e2:04:35:84:b8:11:08:fc:b9:5e:95:92:44:db:99:5a:58:
         1a:b7:7f:9c:b0:eb:35:a1:5e:25:25:58:a3:7a:65:dc:aa:34:
         35:30:e6:5e:c5:85:f3:1b:ba:da:56:cd:22:0a:35:b8:c0:33:
         79:6f:33:da:07:35:86:4f:ff:41:5c:1f:e1:e7:af:9d:31:f0:
         a5:8a:1c:82:0f:1a:1a:06:40:f1:4d:a2:2d:59:2f:45:29:f3:
         6f:fa:e6:c9:de:d9:69:a6:73:f5:1d:0b:9e:7a:88:c7:83:28:
         ec:79:52:41:b4:8d:89:7a:98:04:8b:67:e0:03:28:d6:9f:a9:
         e9:96:3c:a2:ed:96:60:68:ae:86:dd:15:7c:b2:8f:46:0c:27:
         6a:9e:c6:d3:8a:cb:d1:df:5c:dc:15:d4:44:91:52:da:24:f5:
         1b:82:e2:35:16:05:45:ba:96:1e:44:62:c3:7b:f5:f3:b7:0e:
         fd:17:25:3d:68:f4:64:02:b6:09:91:01:7a:b4:1e:39:fa:04:
         d4:42:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:58:35 2025 by rpki-client