Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          8UBCyKgp9Qzy3m7J1NMo3hXzwtk+EJlahTj/QNfVg1U=
Subject key identifier:   81:65:3C:6B:6E:A4:B8:B6:96:B3:C5:91:0F:DB:FB:E7:AB:DC:EE:FB
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       0196BA1158EA37929B3D3BA58DA8132E2581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 12:00:21 +0000
Manifest this update:     Sat 10 May 2025 12:00:21 +0000
Manifest next update:     Sun 11 May 2025 12:00:21 +0000
Files and hashes:         1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
                          2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
                          3: 820Ud_GR15OB6xKqzxayx2Vq2Ow.roa (hash: Y4mHtGXvZVwTMpirNMNXroWlScEk84KdYNqjkd/s7Qk=)
                          4: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
                          5: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: rfgCzqoXpx6tvwrgA/k3EsSAPlqmlUvWQhi4XK6bAH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:11:58:ea:37:92:9b:3d:3b:a5:8d:a8:13:2e:25:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: May 10 12:00:21 2025 GMT
            Not After : May 11 12:00:21 2025 GMT
        Subject: CN=81653c6b6ea4b8b696b3c5910fdbfbe7abdceefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:8a:85:05:05:35:03:35:92:ee:f1:48:a2:
                    25:ed:06:03:14:e5:38:46:78:e0:ae:0c:a2:e1:bc:
                    3c:9e:17:48:0a:35:55:6f:2f:e1:96:7e:47:06:0f:
                    ec:7e:f9:c4:d5:08:29:fa:71:e7:75:6e:87:77:3b:
                    a2:27:8d:e2:4c:be:4b:17:e8:45:f8:57:b6:25:f0:
                    70:03:71:cd:65:74:e9:d1:b3:ef:9a:c7:ff:2b:50:
                    a8:05:a4:03:be:4c:8f:e2:1d:9f:34:92:e4:40:be:
                    ca:d9:d5:d2:b0:d6:88:3f:17:11:2a:87:ce:a9:cf:
                    66:e4:36:c3:eb:7f:34:06:11:92:50:41:75:6c:34:
                    da:fe:ca:b4:c0:f6:99:e7:b0:1d:32:23:f9:42:5f:
                    40:17:ed:b5:bc:41:ec:17:51:28:8b:94:da:0d:a7:
                    bc:66:f1:67:21:af:a0:7b:a1:8f:54:e5:30:96:12:
                    ea:c8:c4:a5:28:a4:fa:2e:08:91:bd:e1:70:d6:f8:
                    d7:79:23:ef:20:d4:4d:e4:6d:7b:71:8a:f2:a5:45:
                    37:84:67:79:21:6f:d6:07:aa:f2:6d:43:02:c6:64:
                    a1:c8:20:d8:81:90:0a:70:b9:38:bf:92:09:5a:6f:
                    75:b7:82:b1:56:00:60:f3:3f:78:09:31:f0:6b:36:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:65:3C:6B:6E:A4:B8:B6:96:B3:C5:91:0F:DB:FB:E7:AB:DC:EE:FB
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:53:12:98:6c:f0:da:8b:0f:b9:58:b5:5e:1f:3a:54:6b:e2:
         05:51:32:9e:d3:65:82:b3:7f:4c:a2:86:e2:a2:0f:aa:d6:6e:
         21:82:65:eb:3b:50:f2:27:1f:bc:8b:e7:5e:e5:8d:f2:04:cb:
         98:8d:df:5c:06:d2:0d:f5:ab:21:04:60:7f:03:34:d1:aa:02:
         e9:c3:d8:07:db:8d:af:1e:bd:b7:2c:20:ff:d7:3d:73:c0:06:
         dd:aa:8f:74:b1:d4:5f:b4:73:15:3b:c4:33:86:b6:ac:1a:6e:
         a2:98:96:bf:65:08:a1:85:15:de:1c:02:62:9c:4e:6e:00:6f:
         7a:1d:4b:23:96:fc:f5:a5:e7:ff:42:54:9a:5e:c5:69:bd:c5:
         ca:f9:f2:5c:86:73:63:e9:ee:12:66:af:04:96:df:b7:fa:25:
         dc:17:fc:33:cc:e7:ca:39:fe:f8:f4:0c:37:4f:25:38:9a:da:
         de:00:c5:e4:f7:a1:d9:91:17:f8:a7:18:b0:d1:5a:f0:54:b3:
         c4:14:ea:06:41:c3:74:ab:bf:19:5f:9a:c0:8e:e4:ea:7a:73:
         f6:cf:80:db:a3:e2:21:86:dd:e4:f4:8f:23:70:b5:05:d1:ef:
         62:bf:f8:1f:a9:18:b9:22:17:14:0b:75:fb:9c:ee:47:11:1b:
         81:aa:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:08:47 2025 by rpki-client