Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File:                     a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier:          pIF9PNYhHz7XoMtA2nqRrQryyKQCQdvt6dttZeHYpfU=
Subject key identifier:   EF:10:FF:11:BD:B0:E3:BC:CA:7F:5D:B4:33:F8:96:5E:F9:41:57:FD
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer:       /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial:       0196CD2A404456BF7091BF94596B98105932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number:          1540
Signing time:             Wed 14 May 2025 05:00:20 +0000
Manifest this update:     Wed 14 May 2025 05:00:20 +0000
Manifest next update:     Thu 15 May 2025 05:00:20 +0000
Files and hashes:         1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=)
                          2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: 9+6d9B+S0wgzqsEPVm065g0F5NZCIph9F8J1jr8H1sY=)
                          3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=)
                          4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:2a:40:44:56:bf:70:91:bf:94:59:6b:98:10:59:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
        Validity
            Not Before: May 14 05:00:20 2025 GMT
            Not After : May 15 05:00:20 2025 GMT
        Subject: CN=ef10ff11bdb0e3bcca7f5db433f8965ef94157fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:83:c7:e6:5b:10:90:0d:9e:50:b0:59:38:
                    a1:ec:03:07:c0:db:0c:6e:86:05:56:9e:54:ef:a6:
                    7e:53:d1:d6:25:be:5e:74:93:70:b4:e7:a7:67:ca:
                    a3:45:3f:07:09:f5:a0:68:e0:fc:db:bb:22:eb:4f:
                    8d:fc:06:55:b1:bd:8b:a5:de:af:a3:da:a4:5f:47:
                    c3:4a:94:d0:e3:81:3d:bd:0b:a3:eb:03:05:69:b8:
                    81:de:f3:db:65:af:e7:23:e6:d0:e7:79:78:fa:5e:
                    c5:2e:84:67:b0:98:41:5f:de:c0:03:db:74:ae:58:
                    0b:05:aa:7a:52:21:21:f6:3d:34:51:fe:c5:ae:f8:
                    7f:ad:1f:39:21:0e:27:2a:a3:6f:37:a9:ef:98:69:
                    4b:b0:a7:19:0f:6a:82:da:69:53:19:cf:1d:ab:54:
                    a5:41:75:a0:52:4d:5e:3b:af:68:5c:ec:2f:9c:6a:
                    c2:ba:7f:8b:51:da:aa:c6:fb:87:47:eb:bd:3c:3f:
                    bb:e3:10:1f:5a:dc:09:2d:6c:65:de:8c:21:0e:d8:
                    84:03:69:00:d4:5a:a2:39:9b:f3:d7:00:08:ec:df:
                    7d:32:19:3f:20:44:93:83:1d:de:9a:43:98:28:ee:
                    95:36:5d:95:c9:f1:69:8d:75:08:9a:d2:b5:d0:49:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:10:FF:11:BD:B0:E3:BC:CA:7F:5D:B4:33:F8:96:5E:F9:41:57:FD
            X509v3 Authority Key Identifier:
                keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:df:66:5b:fa:56:f0:a8:67:2b:65:af:3d:af:38:cc:24:
         2c:22:54:52:1f:e5:4b:51:33:72:14:8d:f4:0a:ed:c5:c5:46:
         62:25:1f:ae:10:f4:39:72:ac:d3:01:79:5f:a3:d1:e1:89:1f:
         80:5a:8f:b0:1e:cd:9f:ae:32:79:b1:3a:d8:1e:a8:f6:96:f9:
         48:ff:f4:ad:59:d9:73:b2:4b:0e:a0:c1:cd:33:f2:48:b2:4e:
         95:21:20:20:dc:71:16:28:f9:a6:59:66:fb:1e:75:61:a5:af:
         1b:fc:66:85:4a:b0:66:b1:a9:d8:62:f8:08:d0:03:fa:a5:ca:
         79:38:bf:67:5d:cc:95:77:be:31:05:36:38:75:7c:f4:cc:e2:
         a5:b9:bb:89:6a:aa:86:0e:c5:38:d6:e5:dd:55:8a:a4:5e:cd:
         11:f3:e9:31:67:b7:04:4f:8d:c0:f6:a4:fb:d7:d3:09:a0:75:
         7c:6f:35:4a:ef:f2:85:1d:9e:dd:fb:65:e0:7d:f7:67:4c:02:
         f5:7d:1c:e3:f1:7f:a1:2a:4d:0e:7b:07:06:33:2a:2b:bb:8a:
         d7:e5:57:aa:af:e3:b2:c9:42:10:da:65:b4:e6:7a:58:13:01:
         05:f4:a1:84:18:b7:a4:82:67:c5:66:8a:4c:31:e3:d3:4f:f4:
         15:96:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:02:53 2025 by rpki-client