Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          dXLbqeyhvi+7dieVqG1auSSIhHpGRPvkqCeMg82F0jk=
Subject key identifier:   69:14:9B:2F:61:AE:A0:59:5E:9B:87:6D:68:4F:A9:91:1F:C9:07:5B
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       01969E9A19E9F9F795D724A02F52D3C9C46E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          1529
Signing time:             Mon 05 May 2025 04:00:21 +0000
Manifest this update:     Mon 05 May 2025 04:00:21 +0000
Manifest next update:     Tue 06 May 2025 04:00:21 +0000
Files and hashes:         1: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (hash: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=)
                          2: RruUWaulD3Ts5bLhPekvKUpKn6Q.roa (hash: MWhOe4vkp6Dp9lK3nL7VGv6jbmHEX1p3ZT+EvK2+o70=)
                          3: T1ExYbnMScXpW49W3TzA2j25m2g.roa (hash: y19xXSPvsH3iQpElfEG+Wwae1lHCoSGQlARfuGWM2P0=)
                          4: XUdNcNwhMqFtYsebg1gOrES8fg8.roa (hash: 1SCBRGG9BH3bL2AIx7nLNmgCfpwCw1UXMhqNEU4goqY=)
                          5: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (hash: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: FKoKVDrO1gN5sD0rm5dbARgpC5PrUphjPOTtKC1APXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:19:e9:f9:f7:95:d7:24:a0:2f:52:d3:c9:c4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: May  5 04:00:21 2025 GMT
            Not After : May  6 04:00:21 2025 GMT
        Subject: CN=69149b2f61aea0595e9b876d684fa9911fc9075b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:8d:db:9a:74:7a:b1:cd:5a:6b:f1:28:0b:
                    89:1f:e5:41:89:4a:cb:e5:10:45:e3:09:2d:ad:32:
                    59:0f:80:49:1d:6d:7e:67:ea:90:0a:33:f6:f4:8a:
                    96:38:c6:ea:13:7f:95:d6:5a:fc:30:8e:ec:4e:73:
                    fa:cc:8a:f8:ca:ec:91:55:6b:20:63:04:3d:c2:5d:
                    16:ce:1e:26:7a:40:3a:2a:d8:7a:df:4d:74:7c:b8:
                    03:4d:b8:0e:75:10:fe:63:c2:2b:f7:35:a7:95:5d:
                    1d:37:9b:11:6b:b7:2b:cd:8d:62:a1:b0:1c:77:24:
                    ca:cf:08:c8:3e:f3:ae:a3:f2:f8:1d:89:76:24:2d:
                    f9:4c:11:b4:ac:d1:5c:39:cd:a0:1a:a2:66:b3:29:
                    58:25:2d:c6:82:1c:f3:42:9a:27:7c:da:dd:98:64:
                    7a:9f:65:91:5e:a5:41:4d:1b:4d:b5:4d:7f:64:be:
                    f5:f2:46:de:66:0c:7a:5b:7e:55:fc:22:ad:a4:8b:
                    8b:aa:81:d0:87:8b:2b:0e:e8:6b:61:c4:81:b4:27:
                    21:c6:48:1a:23:89:6a:a6:a5:48:b2:d7:56:24:39:
                    98:20:fd:60:ce:00:a6:24:46:ba:e4:d5:f4:b7:d4:
                    a4:0f:2e:a8:17:e2:e8:9e:69:09:2c:fd:d8:c0:94:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:14:9B:2F:61:AE:A0:59:5E:9B:87:6D:68:4F:A9:91:1F:C9:07:5B
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:ee:26:2c:08:09:b2:54:41:ec:01:2d:e6:0d:05:c8:bb:
         1e:0b:b8:75:f3:6e:85:ce:18:e4:ca:d9:8a:be:27:69:da:cf:
         54:dd:dc:d5:a2:2f:de:d6:fc:11:35:ed:be:d9:c4:4d:af:97:
         50:77:b4:76:06:5b:bd:63:cc:80:02:01:3b:b3:9d:53:0c:49:
         69:b3:70:09:cb:7c:4e:00:9e:72:d7:b0:9b:92:9e:41:2b:59:
         e8:c3:7f:f2:9a:e3:89:09:51:fe:8b:06:2e:04:19:47:74:71:
         87:c0:2b:b9:3d:43:77:5f:6e:54:c6:f8:34:2e:be:f3:56:2a:
         25:af:57:43:3d:ee:27:09:d1:2c:4a:8f:d5:38:e3:72:a7:f6:
         90:1c:fc:00:35:22:04:1a:bb:42:ff:e3:71:dd:a1:b7:a1:cd:
         56:d3:75:31:5e:b5:06:e6:94:32:12:08:79:f6:a2:aa:2e:d1:
         cc:14:d3:68:7e:47:88:28:e9:54:23:b2:8b:2d:2a:21:43:46:
         6f:10:01:fc:e1:92:d9:88:2f:60:be:1a:7a:b8:0d:cb:e8:f7:
         93:4c:69:47:44:76:51:19:12:9e:24:1b:16:8a:5e:ea:51:43:
         9e:1f:be:64:ad:e3:5b:1d:c9:7e:f2:7b:25:84:0f:af:e3:05:
         38:d2:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:31:36 2025 by rpki-client