Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File:                     x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier:          GlfRbkfgKeglRTe670Q7ORXcchjvGMjMhQhr0hSdzlg=
Subject key identifier:   78:D3:A4:55:84:C5:D9:28:E9:89:A6:A1:CA:DF:82:88:CC:C4:2E:E9
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer:       /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial:       0196C42719107819B1C6CF23FED32541D7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number:          153D
Signing time:             Mon 12 May 2025 11:00:18 +0000
Manifest this update:     Mon 12 May 2025 11:00:18 +0000
Manifest next update:     Tue 13 May 2025 11:00:18 +0000
Files and hashes:         1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
                          2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
                          3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
                          4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: 1h9tTIE1PcFlzb5evLdEFdsF/DdHym3Lef8G3pgdF2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:19:10:78:19:b1:c6:cf:23:fe:d3:25:41:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
        Validity
            Not Before: May 12 11:00:18 2025 GMT
            Not After : May 13 11:00:18 2025 GMT
        Subject: CN=78d3a45584c5d928e989a6a1cadf8288ccc42ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:9d:26:e9:6e:ec:de:bd:c5:f3:5c:ff:ab:
                    b5:23:80:10:81:29:b2:46:cb:a1:b3:89:df:0c:27:
                    f4:1d:e5:25:45:a2:cd:8e:1d:f7:7f:e7:c3:aa:af:
                    43:78:3a:75:28:85:b0:52:2c:d7:9a:26:f5:ae:29:
                    f8:4b:f6:3b:8c:a4:f7:e6:bb:6a:85:f7:8f:3f:f1:
                    a2:cb:d9:9c:58:91:24:14:32:cd:63:eb:17:a5:e2:
                    11:12:e5:94:d9:05:21:ca:73:be:c4:53:e6:17:1c:
                    73:01:7d:19:6d:74:6e:6f:94:32:cc:64:2d:07:34:
                    9b:0f:c6:81:1b:1a:6a:fe:ea:6c:ec:31:4f:1b:cc:
                    64:c8:83:45:6c:a0:ed:b5:6b:20:85:ea:ac:67:e3:
                    fe:c7:48:29:e4:a2:21:ae:0e:1d:17:35:12:a5:a2:
                    19:14:02:17:de:c0:e2:ea:ac:00:16:09:e3:3f:df:
                    e4:8d:4e:e0:de:b2:c7:9d:0c:83:37:6a:10:29:17:
                    a8:0a:61:ee:37:ed:0b:d7:39:c4:81:9b:7f:3f:2c:
                    43:27:53:c8:3b:87:ae:7b:f4:70:2d:f9:f5:f4:29:
                    70:2a:b0:2b:3a:51:03:e1:81:e7:0a:17:04:48:e9:
                    c6:6a:3d:e2:25:33:83:c2:fe:1b:2d:a7:ff:cf:a1:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D3:A4:55:84:C5:D9:28:E9:89:A6:A1:CA:DF:82:88:CC:C4:2E:E9
            X509v3 Authority Key Identifier:
                keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:24:fa:86:ae:f0:3e:68:ca:ac:ce:c4:4c:40:21:f9:40:78:
         cc:d4:71:cb:a0:53:d4:f9:50:05:7b:7c:c2:5a:45:0f:18:44:
         1b:1b:83:4e:3d:2f:d5:6e:6b:0c:24:58:f3:29:ed:ee:f7:0b:
         a1:3f:87:d1:a8:1f:28:2b:18:9d:64:d6:3f:63:93:a3:8d:85:
         cb:d9:a7:d0:32:71:0b:62:0c:50:17:dd:59:24:fd:3f:7d:75:
         a2:d8:6b:4a:e3:ef:4e:31:32:d4:10:a7:36:26:3d:70:88:07:
         27:4a:4c:df:ca:a1:1e:5f:d9:9c:43:11:b3:b2:08:aa:97:d2:
         c6:95:9a:de:48:52:b8:30:fc:65:00:f7:9f:22:47:7c:90:df:
         f9:ed:e3:b2:87:d2:c9:98:9b:45:7b:aa:11:92:57:3b:0e:88:
         16:f2:35:85:02:a4:b0:9f:a0:15:63:08:24:da:05:5e:5a:2a:
         67:98:20:43:de:14:d8:c1:b0:9f:87:26:dc:15:8c:f3:59:ce:
         d7:d5:ef:4e:01:82:97:c8:77:f5:5e:74:5c:00:86:45:e2:73:
         77:d3:96:79:ce:f9:29:d3:f6:a9:39:7e:c7:55:eb:ea:a5:59:
         7d:10:98:24:1a:99:61:e0:5e:ec:95:2b:ec:ae:14:af:ab:df:
         9c:83:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:36:56 2025 by rpki-client