Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          /hUAxNAiMrigCWa4TNYUpnVwM1nNF9JFY78h1CjaWXo=
Subject key identifier:   A9:AA:05:C6:C2:69:D2:52:E8:8C:14:15:B1:1D:69:B9:F6:C7:FE:EA
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       0196CB734A4BFB386461A796F5C86B636FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          1302
Signing time:             Tue 13 May 2025 21:00:52 +0000
Manifest this update:     Tue 13 May 2025 21:00:52 +0000
Manifest next update:     Wed 14 May 2025 21:00:52 +0000
Files and hashes:         1: 2cILvfy_Y8sBWPqBEv-bTSv9h0w.roa (hash: 8uhOdIgcxmr8qEAMLIQFDmCHp28kcqGJRy+w98pxNfg=)
                          2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: iR/HcPxvl+h2zC/uQma6vBp4HAQ6oZcQ0lEYk8S519Q=)
                          3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=)
                          4: NS5b0PGbWotAIYMckbCTZQBj8Lw.roa (hash: MgQ66zaWbIbQhYagmVb0WjGZYhV+fCIGw9jelQ16jzo=)
                          5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=)
                          6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:4a:4b:fb:38:64:61:a7:96:f5:c8:6b:63:6f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: May 13 21:00:52 2025 GMT
            Not After : May 14 21:00:52 2025 GMT
        Subject: CN=a9aa05c6c269d252e88c1415b11d69b9f6c7feea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:e4:3b:25:93:cc:a1:4d:7a:1e:e9:df:7a:
                    20:49:8a:c6:cc:f8:b0:3f:3e:c8:9a:9f:53:2b:4c:
                    01:72:df:72:00:0d:ca:0e:78:75:0b:5e:b1:12:19:
                    41:f8:f8:fa:b6:c1:e2:82:89:6f:e3:4b:8f:57:52:
                    72:00:25:b9:7d:a7:ab:bb:31:b0:38:d4:c6:d4:ef:
                    49:31:ac:0b:3f:f3:68:5c:e8:0f:01:95:b9:8e:32:
                    bc:be:b8:ca:a5:41:6d:68:71:e3:6b:1f:4b:31:86:
                    9d:10:26:b4:15:8d:2a:ba:1a:0f:c7:53:29:a1:8c:
                    b1:01:ef:77:e1:27:ac:a1:dd:b4:3e:a9:44:04:8e:
                    00:d0:df:3d:35:05:56:08:af:d8:ce:2a:9b:5d:21:
                    35:3c:76:2e:37:e5:ba:10:69:48:29:9a:c3:3a:81:
                    79:0e:8d:8a:0a:ff:7a:b0:ea:f1:82:f6:ab:c9:8e:
                    74:e9:40:a2:e3:c5:d9:82:25:2a:6a:c8:4f:22:aa:
                    6a:b8:27:21:78:3f:21:97:e4:7f:e7:e0:64:1c:25:
                    79:9d:25:f0:5a:32:f1:35:b0:28:90:f3:81:33:17:
                    ba:8e:21:64:3b:5a:fc:0a:9e:82:85:91:bf:73:e0:
                    0f:e7:c7:5f:d1:ba:7d:f9:a0:bb:ab:88:98:5e:71:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AA:05:C6:C2:69:D2:52:E8:8C:14:15:B1:1D:69:B9:F6:C7:FE:EA
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:72:1f:40:50:5b:3b:eb:57:44:4d:d2:41:d3:5b:7e:b3:
         e4:0c:9f:84:2f:22:35:b5:fa:36:5b:5a:14:cc:56:20:7c:6e:
         3f:bb:52:da:06:02:36:e2:49:56:a4:0a:7b:72:e5:fc:28:6b:
         ff:e5:4b:8f:f9:dd:71:aa:08:b9:e3:66:47:1a:2b:6e:90:35:
         b3:63:9e:0c:e7:11:7c:62:05:b4:8c:36:7a:e9:ec:d9:b4:82:
         20:84:a4:c9:36:4a:e7:3f:ef:24:cd:8e:21:5c:28:35:cc:23:
         24:ea:1e:95:99:1d:a0:ac:ed:13:18:e8:ef:41:63:8f:8a:ab:
         e3:bb:d7:d7:c4:7e:a6:fa:7a:54:61:87:7f:cd:22:3d:f3:aa:
         df:7d:b2:32:54:f5:29:5d:38:46:bf:b8:d8:14:bc:73:86:ec:
         74:fe:7f:09:44:0a:51:ec:40:aa:06:c5:5a:b2:71:46:ce:df:
         d0:38:94:de:4d:93:c9:2d:dc:c4:83:23:16:72:87:d0:d1:80:
         11:41:0c:e6:82:90:38:08:42:15:71:7a:44:d1:a7:06:77:e9:
         77:11:50:96:27:0a:ca:79:42:da:27:ca:a0:57:fa:2a:43:51:
         91:68:d9:76:de:e9:49:21:1d:35:36:57:c6:b7:82:a3:a1:52:
         91:15:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:58:07 2025 by rpki-client