Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          DNrSnn8YBB5+DMyUYTU1ax7c/JEWmxAPR018GgvxqsI=
Subject key identifier:   0D:A6:8A:79:85:9B:58:F4:0B:42:D7:7D:24:28:DD:E4:44:22:C1:90
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       0196BC6E64A42C3E175ED2D5E010B4FA916E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          1537
Signing time:             Sat 10 May 2025 23:01:13 +0000
Manifest this update:     Sat 10 May 2025 23:01:13 +0000
Manifest next update:     Sun 11 May 2025 23:01:13 +0000
Files and hashes:         1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: QXarGi9CzoNN8CdKvvd6I5vnNMWXRnTpiwpfMRd2l4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:64:a4:2c:3e:17:5e:d2:d5:e0:10:b4:fa:91:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: May 10 23:01:13 2025 GMT
            Not After : May 11 23:01:13 2025 GMT
        Subject: CN=0da68a79859b58f40b42d77d2428dde44422c190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:19:97:a9:16:1f:d6:83:fc:a6:df:85:26:
                    e3:a1:f9:19:be:27:2f:0b:b9:15:87:21:33:41:56:
                    df:a0:10:32:9a:50:a0:9a:31:c7:1c:17:b9:5e:3a:
                    25:bd:bf:b1:40:60:6c:80:9b:43:24:9b:81:f0:52:
                    99:93:40:90:8f:ea:7f:80:27:e5:03:ac:08:f9:ee:
                    41:0d:33:4c:05:0d:21:46:4e:ec:c4:5f:ee:c7:3a:
                    54:14:b3:a0:7d:c3:ce:37:49:1a:bc:4c:d0:a3:ce:
                    54:f0:ec:cc:75:85:5a:8e:41:b3:d5:d3:b0:24:8b:
                    9a:17:b7:0b:90:8d:a9:17:03:ed:58:e3:c2:83:95:
                    72:fd:72:85:e2:4b:28:f9:92:68:77:54:1e:39:88:
                    68:87:af:86:34:6f:40:9a:12:73:51:cf:ad:e2:60:
                    68:9a:59:99:bc:b7:f1:08:42:e9:ab:f2:d6:34:ad:
                    31:54:aa:38:62:e3:fa:70:2f:47:7d:b6:37:07:60:
                    6d:f1:16:9f:58:ff:71:aa:01:99:5d:70:fc:bf:73:
                    12:f0:d4:87:7a:69:f4:a4:bb:c8:d5:8f:9f:1b:d1:
                    21:83:04:d8:b2:e1:c7:16:59:cb:b4:19:03:28:81:
                    b7:3f:fc:a3:78:f7:b1:10:b4:0a:18:b5:62:fe:74:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A6:8A:79:85:9B:58:F4:0B:42:D7:7D:24:28:DD:E4:44:22:C1:90
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:11:f2:f8:0b:80:21:4b:72:45:cf:46:7a:2f:ee:df:69:e6:
         37:8b:f4:09:4c:03:17:de:5f:8e:5e:ec:6e:aa:1e:fe:d7:f3:
         b3:41:90:84:48:09:4f:ca:c5:61:36:b1:ca:ab:2b:bd:73:33:
         6b:ab:58:e8:b7:40:04:01:db:23:a2:3d:86:fa:c2:91:c9:60:
         9d:e4:2f:33:22:8f:6d:e8:95:89:e6:d8:a8:b3:fa:6b:d9:51:
         25:22:fe:01:64:91:f8:e1:fa:ed:fe:cb:fd:45:63:97:5a:95:
         7b:69:78:f1:59:c4:1e:bd:ae:1a:18:4c:b7:9c:fd:cc:f7:be:
         c9:41:89:18:9a:e7:88:9e:41:2b:8c:67:f2:b0:8d:e9:d8:4c:
         98:b2:e1:35:17:4e:1d:c5:c3:11:27:c4:5c:af:52:a0:1e:38:
         43:c2:4a:77:e9:cf:63:2b:a3:1e:00:b8:60:d6:cc:9c:62:e9:
         6a:a6:74:25:6e:d3:cc:70:b6:f0:b6:84:50:82:48:c7:25:7c:
         32:90:2a:8c:67:03:40:8f:9a:b1:a0:c2:00:25:7c:54:79:4d:
         3f:92:1b:7a:d3:45:2e:62:8d:d7:51:80:54:9a:3b:9f:49:49:
         3c:e7:bf:d2:a8:53:97:3e:2c:53:f2:63:83:b0:46:df:a2:95:
         da:74:19:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:18:43 2025 by rpki-client