Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          9nQpvXq6tTLMxv8a5xvRBLPfjRh68i2sVfTrmhRsG9k=
Subject key identifier:   AD:D0:08:11:72:54:52:24:91:04:48:C7:E1:64:20:B8:F3:CB:90:69
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       0196C8E0050A85144A4F772B50461AEC4F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1548
Signing time:             Tue 13 May 2025 09:00:46 +0000
Manifest this update:     Tue 13 May 2025 09:00:46 +0000
Manifest next update:     Wed 14 May 2025 09:00:46 +0000
Files and hashes:         1: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=)
                          2: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
                          3: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
                          4: TsuT9Vw01G7XqqTGmTLgG8Nw8uM.roa (hash: ibCOP7I9k1NxSVR0Ud+oed1vqdJZQQbZepYSXJmVuOo=)
                          5: b_Rjl7l5s2ruXfIZC3d6OBIlvjw.roa (hash: RN1eBvJ7M9cQIHDZtgB/+TlsTuYLflAWSHeZCPPxyMY=)
                          6: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: ZEf8tM+IvTaW5yk05sszR5xuwNCe4GcroAu3xD+9au8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:e0:05:0a:85:14:4a:4f:77:2b:50:46:1a:ec:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: May 13 09:00:46 2025 GMT
            Not After : May 14 09:00:46 2025 GMT
        Subject: CN=add0081172545224910448c7e16420b8f3cb9069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:6b:a6:4f:6b:90:3a:25:62:15:cd:e3:19:
                    d9:a1:c8:e2:6d:18:51:6b:e2:8f:4e:73:c6:30:25:
                    6b:0a:61:4d:ad:59:fa:b7:30:96:6a:e9:fe:6c:31:
                    5c:49:ce:24:ee:6a:36:fc:14:d0:8f:23:f6:5b:3f:
                    9b:27:48:d8:ad:af:37:22:1b:16:c3:bc:09:a7:73:
                    4b:f4:c9:54:df:58:70:8c:b6:4b:71:75:0b:5d:6d:
                    c0:af:b8:81:1d:df:97:80:2b:29:b8:4f:cf:25:70:
                    65:2a:66:af:1c:94:d6:95:18:8f:3b:51:4d:7a:06:
                    ab:3c:a6:6a:a2:13:67:69:f1:0b:8e:49:84:37:cf:
                    dd:b8:4d:dc:61:ca:c4:13:11:b9:ac:e6:d9:c1:75:
                    cd:31:5d:9a:9d:67:6f:c6:32:ae:08:f6:9c:ba:26:
                    20:ca:84:b4:c4:24:df:7d:62:55:c7:1d:1c:e0:8e:
                    6f:6f:95:ff:e5:ce:a6:04:e1:3a:f3:c4:0c:8f:61:
                    8c:74:9b:d2:a7:5b:36:d7:31:0d:62:ec:9c:91:e1:
                    b8:50:35:ee:d5:6c:e7:e2:1d:15:0d:fc:00:03:1a:
                    05:b3:7a:0c:0a:5b:f3:eb:a0:01:ac:01:94:5b:54:
                    8d:6a:0f:95:1a:93:2c:5b:80:cb:fa:da:2b:7e:2f:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:08:11:72:54:52:24:91:04:48:C7:E1:64:20:B8:F3:CB:90:69
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:00:45:0f:7e:ec:f7:37:48:dd:f6:82:17:c7:55:96:40:19:
         5e:91:f3:72:35:ac:92:f2:66:81:c0:dc:1c:79:05:73:9a:c0:
         1a:58:c8:83:bd:c6:b2:8a:b8:b2:85:4c:10:04:47:d7:03:d5:
         43:6e:f2:39:a5:e6:d4:3b:b4:73:18:e1:00:69:30:b9:c4:bf:
         f4:3e:53:c6:73:1f:12:66:8c:4a:fb:b0:31:67:c9:4b:6c:78:
         59:64:89:24:dd:7e:8c:10:69:f4:30:27:80:e8:f7:06:ac:51:
         14:fb:d1:24:2b:5e:36:c8:57:8b:ad:6a:05:74:da:b6:49:6e:
         39:ab:58:ae:74:a8:d3:cb:65:74:4b:68:19:5d:83:95:97:7d:
         f5:52:f1:28:8c:7c:ed:3d:51:ed:bc:3e:8f:b6:09:32:87:15:
         98:ed:59:8b:99:b6:e5:98:43:5c:ca:d7:e3:4d:cb:ae:b8:b1:
         13:27:5e:ef:2b:2d:fe:57:b5:55:34:ba:d1:5d:10:1b:03:ad:
         61:94:bf:98:9c:40:41:53:e9:a5:44:7e:75:7c:3e:cc:4d:d3:
         de:89:19:da:81:bc:ff:21:e7:e2:7d:4a:b2:94:8f:fe:3d:64:
         f7:2f:98:70:1f:12:5f:fd:40:d4:93:53:72:f2:98:ee:b1:6c:
         67:ea:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:11:56 2025 by rpki-client