Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File:                     mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier:          Da2F4XLmmpU6NsTjMghGx+DJtFcD3Y+kfo/v4Fa1zbM=
Subject key identifier:   4A:DA:C8:15:75:F0:B6:EF:67:10:6B:51:70:36:4F:F1:E9:05:38:DC
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer:       /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial:       0196A4664486B9139B9B8FF8031D2D3163AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number:          1529
Signing time:             Tue 06 May 2025 07:01:27 +0000
Manifest this update:     Tue 06 May 2025 07:01:27 +0000
Manifest next update:     Wed 07 May 2025 07:01:27 +0000
Files and hashes:         1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
                          2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
                          3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: TaH3keFjiHyZllZpZsqH/mwY7U2TzyXdXeBqU+56UNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:66:44:86:b9:13:9b:9b:8f:f8:03:1d:2d:31:63:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
        Validity
            Not Before: May  6 07:01:27 2025 GMT
            Not After : May  7 07:01:27 2025 GMT
        Subject: CN=4adac81575f0b6ef67106b5170364ff1e90538dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:6f:30:c9:32:cc:df:4a:3e:14:a7:a9:7a:
                    9d:02:66:e9:56:aa:59:98:f7:0d:59:9a:96:a6:4f:
                    b3:05:0c:17:03:81:49:c1:07:be:c4:6f:94:7b:4f:
                    ae:9e:56:cc:64:85:9e:c6:d3:b3:a3:62:5f:f8:da:
                    e4:3a:60:b6:4c:6c:39:92:ca:fc:ec:61:1f:3e:a7:
                    fe:1c:6f:ed:93:6b:8a:cd:c8:89:9b:56:7d:0b:b3:
                    e3:4a:90:38:37:5a:17:3b:29:5c:d6:35:88:71:2a:
                    55:6e:39:8c:83:3a:0d:06:ae:09:54:3e:b5:29:ec:
                    a4:97:c2:b6:8c:ef:10:5c:fc:76:9f:a4:1f:60:14:
                    85:b0:dd:ba:3b:29:93:6a:00:51:8b:7e:44:00:9b:
                    72:88:2f:f2:50:e4:6f:4f:bc:c0:0d:ee:cc:8f:30:
                    91:f2:1c:38:78:ad:e2:a0:a1:97:b1:7c:4e:64:77:
                    f7:b8:9d:0c:7f:20:e3:c9:2c:b6:13:9c:ca:85:5a:
                    c2:97:ca:40:1e:f1:68:02:ba:db:65:16:27:ef:97:
                    fc:6e:21:b4:fd:39:5c:4f:69:d2:57:07:d9:19:ff:
                    8b:ca:89:f6:66:98:9d:b7:62:2b:77:59:ce:d6:0a:
                    58:19:85:f0:a4:cd:4c:61:9f:9c:72:da:68:37:99:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DA:C8:15:75:F0:B6:EF:67:10:6B:51:70:36:4F:F1:E9:05:38:DC
            X509v3 Authority Key Identifier:
                keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:dd:22:44:53:94:45:8e:75:57:77:87:2c:d6:0b:61:42:ca:
         69:5b:43:fa:80:7e:af:5f:88:6b:f7:22:1c:3e:b5:79:16:17:
         f3:73:1f:91:29:da:94:1c:97:de:38:ed:e4:90:38:5e:a0:ad:
         b2:57:8a:51:e9:92:44:55:bf:6b:4e:9f:07:6e:07:5b:49:e3:
         9b:51:de:73:58:d3:25:8a:97:aa:d5:5d:84:5d:d9:5e:07:45:
         4c:6b:4f:58:75:83:07:d3:93:d2:78:d5:2f:d7:ce:2d:87:dd:
         cb:94:d0:ce:60:f9:bc:38:78:54:3a:bf:e7:15:a0:04:af:e4:
         6f:d0:94:44:1b:0a:24:62:61:b5:b0:ee:03:85:56:a3:a4:76:
         03:20:af:a7:0c:42:04:26:b0:1d:9f:de:04:14:9e:81:c5:3c:
         18:02:07:b1:14:d9:9b:fa:d6:90:79:fe:f3:cb:c3:17:86:98:
         2d:85:8a:b7:b4:e6:c0:29:49:e7:af:47:dc:3d:be:0b:78:d7:
         20:53:d6:e1:84:88:a9:ed:86:be:eb:40:03:71:88:f3:88:89:
         cb:06:9b:45:69:b8:9d:98:2e:2d:83:80:cf:c2:ca:71:28:e3:
         e6:be:76:6f:dd:30:28:0e:a1:30:92:22:db:69:11:3d:c2:22:
         21:27:69:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:48:47 2025 by rpki-client