Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          3LSjfooeH0lM3uqLx+wF6OclMjKQcNVjCAArZjhY/5U=
Subject key identifier:   43:A4:F8:AD:F5:F0:F7:F2:1F:6F:9C:9A:AF:9B:B6:71:1B:11:03:B5
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       0196BCDB981DB025FB686BC1D346D5889BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          1538
Signing time:             Sun 11 May 2025 01:00:29 +0000
Manifest this update:     Sun 11 May 2025 01:00:29 +0000
Manifest next update:     Mon 12 May 2025 01:00:29 +0000
Files and hashes:         1: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (hash: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=)
                          2: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (hash: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=)
                          3: GYuIoE-jlXSckwk_qSK_aV7UB4Q.roa (hash: sORKouCrelcQgpTPPPbZDvGrSxjdHNUzrheoRMHaMrw=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: ySMgrAls3A8cM1y+BdCv/UjDfa0Qpz3Ix8TeY063jOc=)
                          5: aa2j5wVm0c-lQnZ_s16QHGRxbVU.roa (hash: 2qdz/uEuQTzsIMdeNOG9LQdnTQSy4fa2A5Rp2WG5LzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:98:1d:b0:25:fb:68:6b:c1:d3:46:d5:88:9b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: May 11 01:00:29 2025 GMT
            Not After : May 12 01:00:29 2025 GMT
        Subject: CN=43a4f8adf5f0f7f21f6f9c9aaf9bb6711b1103b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:ac:49:60:d1:ff:e3:6d:b8:fa:dd:0f:0c:
                    70:f8:64:e4:21:43:ea:fe:97:8e:9e:53:7f:de:9f:
                    31:9a:e4:26:7b:05:ca:05:90:dd:8d:00:cf:dd:2f:
                    01:e3:d6:34:8a:71:58:21:61:42:e9:44:67:42:6c:
                    62:de:45:93:85:27:36:2d:60:4d:d7:fb:ac:0a:2d:
                    3f:9d:87:66:85:cc:d5:f5:60:90:93:66:9b:e1:19:
                    d9:6c:6c:5a:c7:11:da:33:31:f0:35:76:2a:d0:3d:
                    cd:df:c3:5a:05:7f:6c:a4:38:83:b2:2c:83:77:6d:
                    aa:05:16:57:98:a2:10:41:6a:43:33:11:52:eb:b0:
                    fa:1f:0b:45:c4:24:ab:59:27:1f:f8:51:44:39:1c:
                    2e:04:4a:7c:4c:3a:c7:ad:12:d8:2a:ad:84:c9:6d:
                    da:43:f8:fc:5e:4c:44:02:cc:5c:13:55:2b:fb:b6:
                    f1:cb:05:bb:04:ff:f2:62:6a:15:b3:8b:e9:8e:19:
                    ab:69:6d:b4:5b:69:51:30:0c:0b:dd:e2:ab:63:7a:
                    b7:78:44:43:1c:d4:08:e3:5a:5b:01:1b:18:52:26:
                    ab:50:9a:df:2f:5d:a9:90:a9:ce:14:20:88:7d:d4:
                    aa:bd:0f:c4:6b:02:1d:bb:0a:68:19:70:99:49:29:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:F8:AD:F5:F0:F7:F2:1F:6F:9C:9A:AF:9B:B6:71:1B:11:03:B5
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:90:51:92:97:a0:8b:b5:a9:90:fb:20:40:ba:82:41:9c:
         2a:ff:55:6c:45:28:02:0c:38:e1:4a:bd:e1:ed:0b:6c:79:f8:
         3f:aa:97:d6:cf:cf:62:45:14:28:79:a4:b2:47:2f:ce:fd:b2:
         9d:f2:a3:0b:9a:6a:ca:d6:55:f5:cb:4d:02:9a:00:78:02:27:
         f7:f4:7e:94:b3:3f:f4:a0:38:b4:ed:c3:15:93:c6:a2:35:bd:
         5f:af:b2:3b:9e:62:a3:26:fd:3f:44:9e:96:e9:44:11:f6:bd:
         0f:7d:df:e2:14:15:a0:0c:f1:06:12:07:1c:65:2b:06:ad:5b:
         d2:40:ae:60:27:c8:b5:17:cc:28:d2:31:09:d1:74:0a:64:6e:
         1a:a3:45:2f:ae:57:db:b3:b1:c3:e2:93:d3:e3:50:41:b8:2e:
         d0:e9:8c:ad:de:4b:55:00:8f:70:d0:99:5a:42:e8:0a:f4:de:
         a1:18:97:b4:66:5a:00:ba:c8:b4:7f:7d:09:19:de:ea:41:bf:
         0c:5f:a1:96:45:64:68:a6:9a:cb:3a:8a:48:d5:8e:33:83:35:
         31:af:64:1f:3d:ca:7f:86:9b:b0:59:3b:a3:b4:ae:a8:ae:1a:
         72:5e:05:f4:ff:e3:c5:fc:65:06:78:57:00:fd:af:5d:00:2a:
         0e:ce:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:01:01 2025 by rpki-client