Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File:                     RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier:          jzEDzLCpjZvFqOjpcdR9gZljOtzc6xkgPIaAVRD2kEo=
Subject key identifier:   F2:59:E4:AC:EC:90:8D:78:1C:C8:7E:44:A9:9B:A2:BB:3E:A7:37:6F
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer:       /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial:       0196BE930901E4A2397F9E036689D085F813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 09:00:29 +0000
Manifest this update:     Sun 11 May 2025 09:00:29 +0000
Manifest next update:     Mon 12 May 2025 09:00:29 +0000
Files and hashes:         1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=)
                          2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: OPSZU6urCLh6xVLEQ1SvQfhUQwFNp4316YMqIvJD6Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:09:01:e4:a2:39:7f:9e:03:66:89:d0:85:f8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
        Validity
            Not Before: May 11 09:00:29 2025 GMT
            Not After : May 12 09:00:29 2025 GMT
        Subject: CN=f259e4acec908d781cc87e44a99ba2bb3ea7376f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:9e:8b:3b:4c:05:e6:fe:c8:9f:28:c5:b2:
                    b2:c3:ec:f9:53:03:91:b8:3d:07:32:cf:ca:5f:44:
                    df:d0:ee:8c:98:10:07:8e:e9:1a:87:1d:d9:a9:a2:
                    35:d2:a2:f3:42:ac:cd:b2:e8:f8:84:02:cb:73:18:
                    2a:6c:35:83:a9:25:16:ea:4b:12:6f:0a:3e:8f:0c:
                    ea:ce:21:c1:c4:3b:fa:ca:32:4c:fb:68:b4:a5:98:
                    99:58:26:91:cd:ea:5d:4f:0e:52:f2:db:95:6f:ba:
                    fd:d7:b1:d4:dc:2e:98:e7:0d:04:09:5e:ed:c6:63:
                    ff:b3:e7:91:9b:dc:0b:86:b2:c4:4d:a3:05:01:07:
                    64:e9:69:fb:ec:28:6d:f4:a0:d8:eb:dd:0f:ab:40:
                    bb:72:20:99:38:18:c4:1f:cb:38:44:36:67:19:e3:
                    0c:41:62:b0:78:f3:39:dc:de:fd:dc:cd:7c:e9:2b:
                    47:ba:2d:0d:5f:3f:25:a7:f0:86:81:8d:6c:f1:cb:
                    c5:89:fd:f9:23:67:61:d0:e5:91:d4:6c:cd:9f:2c:
                    1e:88:4d:02:9c:e3:55:2e:2a:0f:9c:8a:6c:09:2a:
                    be:10:a2:bb:74:e8:5a:54:41:fe:a7:7e:e5:85:ee:
                    40:df:39:0a:1c:81:d3:e4:0b:45:cd:ee:76:74:d9:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:E4:AC:EC:90:8D:78:1C:C8:7E:44:A9:9B:A2:BB:3E:A7:37:6F
            X509v3 Authority Key Identifier:
                keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:32:26:6a:71:59:35:83:60:fc:2f:b4:2a:7d:30:39:c4:
         67:65:5d:c8:1b:8b:19:3d:d5:06:eb:ad:d1:9b:a0:80:86:06:
         ca:b7:43:b0:58:0e:b7:fa:ce:75:a7:e1:3a:da:d9:40:19:ec:
         b2:0b:5b:9c:9c:39:fd:20:ae:67:91:b3:0a:65:ec:81:2b:4a:
         99:54:1e:6e:ad:c5:1e:e2:d1:be:14:4b:b6:cb:eb:67:ac:75:
         12:d2:be:a8:77:da:68:28:58:4b:e4:8f:f4:d0:e4:3a:a1:94:
         04:bf:53:ff:59:b9:04:17:b5:79:63:67:fd:7d:7f:25:ed:6b:
         72:19:c0:89:1b:20:77:99:11:01:21:75:54:32:b6:c1:c3:81:
         33:04:60:5e:da:a2:f7:4c:0b:e5:8e:7c:56:6c:38:0f:ee:ea:
         e1:cf:49:67:f5:29:41:27:ac:dd:73:ed:7a:42:bc:2e:06:4a:
         93:2a:81:66:8c:a3:ed:49:ab:99:f9:cc:6f:c3:3d:dd:17:dc:
         58:a6:8c:a5:94:bc:42:42:10:8c:a1:10:fb:b4:9d:35:23:3e:
         84:88:99:73:54:84:f4:44:a9:86:f3:4b:66:dd:e7:89:0a:5d:
         06:ab:db:c2:84:06:2a:91:d0:da:ae:87:fa:a5:e2:57:2a:5c:
         f4:8e:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:20:51 2025 by rpki-client