Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File:                     f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier:          k2A3OSeyF8tw+plJCy+UbLYOmjvcd5de5yBNvQ4qHW0=
Subject key identifier:   97:27:3D:E9:A7:48:6B:27:2C:29:6F:B9:77:75:C2:7D:3D:75:E8:CF
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer:       /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial:       0196AC1F1B053D61EA5BD718A5195F2E4C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number:          1102
Signing time:             Wed 07 May 2025 19:00:41 +0000
Manifest this update:     Wed 07 May 2025 19:00:41 +0000
Manifest next update:     Thu 08 May 2025 19:00:41 +0000
Files and hashes:         1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
                          2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: eRojn1ScciZQPMAgIiK3d+Kqm5fwXmXjOsSJInfADzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:1b:05:3d:61:ea:5b:d7:18:a5:19:5f:2e:4c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
        Validity
            Not Before: May  7 19:00:41 2025 GMT
            Not After : May  8 19:00:41 2025 GMT
        Subject: CN=97273de9a7486b272c296fb97775c27d3d75e8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e1:74:1f:7f:62:9a:d0:63:ef:e4:a4:3d:9d:
                    b4:d6:81:7b:70:22:9f:11:6a:94:f8:31:4a:d8:20:
                    94:fa:69:65:a0:34:98:59:c6:f0:c9:2e:14:d8:8b:
                    44:9e:2e:d0:7a:f4:12:22:4c:8a:e1:36:ba:d6:6e:
                    0b:d3:6e:f9:4c:f6:31:45:f2:43:2c:6d:29:3c:29:
                    fe:bd:25:af:83:0c:94:80:af:00:16:ba:98:05:26:
                    3c:87:76:2e:e6:5d:90:33:69:5f:24:38:7b:e6:bd:
                    48:01:59:e8:11:10:cd:56:3d:29:12:ea:29:d9:50:
                    fa:9b:12:70:fc:d9:93:85:2e:91:bc:06:f9:2f:c8:
                    d1:5b:11:e4:f6:17:06:a3:ce:89:4c:7b:9c:52:58:
                    74:50:70:ad:c8:e4:a6:fe:18:0d:cb:9d:df:f3:dd:
                    a7:6b:c6:0a:e2:04:5d:74:00:08:ab:ca:36:ba:75:
                    15:24:db:d0:bc:5c:c4:31:ec:be:31:07:86:1c:39:
                    dc:49:cd:35:47:e8:04:a4:ec:c5:d4:0c:28:06:62:
                    bb:64:e9:60:eb:23:01:1d:a8:1b:01:dc:b3:23:af:
                    35:7b:0f:18:22:e1:54:41:15:5b:2b:2c:38:5f:b8:
                    e1:1c:bd:42:ec:34:62:51:44:8a:40:50:7e:90:73:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:27:3D:E9:A7:48:6B:27:2C:29:6F:B9:77:75:C2:7D:3D:75:E8:CF
            X509v3 Authority Key Identifier:
                keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:57:68:a0:12:f1:e2:ba:34:1c:30:67:41:3a:e5:eb:52:d1:
         fe:ef:5b:d9:ef:5d:47:e3:62:38:79:5f:19:e2:4c:c6:d2:49:
         e3:ef:56:35:e0:18:f7:50:40:ca:8c:72:8e:da:31:56:e8:33:
         f6:05:62:2a:da:32:ae:dd:db:af:c4:7a:52:65:1a:b4:98:88:
         80:44:14:35:9e:44:a8:56:75:b3:24:17:58:e4:48:17:fb:50:
         a7:9c:4b:c6:26:4e:fe:df:3e:b4:cd:65:a2:f7:1e:23:78:59:
         cb:49:7e:c9:5b:ea:c6:46:8c:02:6c:42:84:97:26:88:e2:88:
         20:fd:eb:c2:94:a4:09:21:18:64:26:ec:f1:73:67:c9:9e:93:
         01:09:d4:57:55:b2:3d:cc:1b:9b:79:ae:61:82:3e:64:ba:f6:
         8a:48:4b:7c:81:8b:44:ad:c1:82:fa:48:52:24:a9:64:80:d9:
         1d:cd:2e:de:ab:8e:b4:5f:09:38:cb:6e:be:d1:24:1a:c2:7f:
         96:4c:5d:75:19:d1:ab:59:e3:d2:30:cb:de:d3:25:a8:9a:2e:
         96:c7:5e:3d:9c:98:26:62:0e:21:b3:ce:19:1e:31:f4:09:a5:
         02:b8:c5:5f:a3:0c:91:85:29:9f:a3:7b:0d:57:d3:da:79:f9:
         18:32:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:12:17 2025 by rpki-client