Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          PjmxFN5vrMktTbehVMym7kDYcrNcugppcadcNOrEl7c=
Subject key identifier:   6D:26:6C:D6:E4:58:5D:5F:2A:71:AD:77:A3:A8:52:88:15:29:5A:00
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       0196CF4FA623485F45500F18337FE43F6866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          153E
Signing time:             Wed 14 May 2025 15:00:25 +0000
Manifest this update:     Wed 14 May 2025 15:00:25 +0000
Manifest next update:     Thu 15 May 2025 15:00:25 +0000
Files and hashes:         1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
                          2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
                          3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
                          4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
                          5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: zXC5z7pdWbwfnrTu25Dkc+5/17KtGqRryEJZchOtUxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:4f:a6:23:48:5f:45:50:0f:18:33:7f:e4:3f:68:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: May 14 15:00:25 2025 GMT
            Not After : May 15 15:00:25 2025 GMT
        Subject: CN=6d266cd6e4585d5f2a71ad77a3a8528815295a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:ad:be:5a:30:ee:51:4c:1b:e2:fc:00:6d:
                    9e:41:73:16:62:23:7a:85:b5:fa:10:d7:da:de:e8:
                    83:67:9a:47:96:f7:a8:00:74:f9:5d:de:c0:af:ca:
                    1b:7e:94:10:19:83:d5:6f:31:31:64:37:26:a8:04:
                    c2:ec:40:4b:9a:84:6c:5c:c3:e9:ad:8c:42:6c:2e:
                    bf:b5:ce:b6:b7:51:da:77:47:aa:54:2f:8f:d7:88:
                    b0:96:a7:38:38:82:14:c6:63:57:0c:9a:38:6f:1f:
                    f1:dd:f2:e7:5a:0a:c5:b1:f9:e7:4e:5b:39:95:88:
                    58:1b:58:cf:a8:24:e8:b5:a7:75:a2:db:7d:ce:82:
                    5d:dc:40:73:c2:89:60:8a:87:ee:e3:57:4d:60:8e:
                    f4:65:c4:7b:ee:fc:41:b3:18:c5:33:55:21:b5:8e:
                    1e:14:8b:86:ff:86:f9:70:59:83:a3:8a:dd:1b:df:
                    2e:d2:3e:fb:42:2b:56:db:66:48:eb:3d:c7:4a:ab:
                    f3:bf:8c:6a:3e:b7:87:57:d4:e7:ba:13:6b:b6:8f:
                    6d:ee:b2:5c:f0:a1:b4:08:82:43:8b:89:51:f9:00:
                    6b:56:fd:af:d4:81:46:3b:b5:f3:dc:5b:a5:d1:4f:
                    64:04:2a:96:02:b3:36:3e:89:06:d5:2c:72:3a:9c:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:6C:D6:E4:58:5D:5F:2A:71:AD:77:A3:A8:52:88:15:29:5A:00
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:18:88:23:67:57:07:dd:51:27:f9:1c:a6:6a:76:ed:4e:7b:
         26:c1:32:1b:74:c2:dd:0d:24:f3:88:e8:50:b5:02:4c:d1:30:
         9c:66:ce:a2:f2:3f:b4:2f:34:f6:3e:a6:30:cb:73:2f:c4:26:
         ad:cb:22:ef:2e:f0:35:14:ba:79:0e:5b:b6:cd:94:66:40:fa:
         57:7f:5b:2a:2b:56:c3:81:b9:6a:4e:36:5c:ca:32:83:76:04:
         d6:71:ce:c1:2a:34:5c:1f:8e:31:7f:17:5f:c8:e3:ed:63:64:
         5d:c5:91:20:66:01:0a:f5:0e:b9:64:e8:94:b9:22:eb:d0:b9:
         be:7e:75:68:8d:46:e2:61:0e:42:ba:af:41:87:0a:57:ee:a1:
         76:4f:4b:74:b2:a6:ae:da:66:8f:a9:a0:db:fa:69:22:34:cb:
         16:a4:89:4a:9a:8b:71:c5:ac:ca:bf:81:30:12:c5:97:4c:90:
         41:21:f7:1a:55:7e:80:64:c4:31:8f:c8:f8:c2:e0:6c:20:29:
         66:b6:25:61:38:b2:e9:ac:23:e1:93:f7:37:96:b6:69:cc:5f:
         7e:74:77:16:ae:3f:d8:86:e9:43:38:bf:ab:b9:97:dc:b3:bf:
         08:19:98:89:7a:60:5d:ac:f7:b9:bc:83:ad:94:9d:fe:d4:90:
         8c:84:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:37:33 2025 by rpki-client