Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          OJp3lNjknvwRRGE+6q1SW9fVsYMfCDxceHyZkCw6Mww=
Subject key identifier:   C3:70:E0:76:63:7A:20:38:34:15:74:EA:C0:7B:40:3D:3B:CC:2D:AB
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       0196A79D2FFC47732D58E6A37A13C242F019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          152C
Signing time:             Tue 06 May 2025 22:00:18 +0000
Manifest this update:     Tue 06 May 2025 22:00:18 +0000
Manifest next update:     Wed 07 May 2025 22:00:18 +0000
Files and hashes:         1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=)
                          2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=)
                          3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=)
                          4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: 1zO3tMZVpDnqK2iNAYd0QlPYvV5fBpPCYg1KMx9EkQQ=)
                          5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=)
                          6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=)
                          7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 22:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:2f:fc:47:73:2d:58:e6:a3:7a:13:c2:42:f0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: May  6 22:00:18 2025 GMT
            Not After : May  7 22:00:18 2025 GMT
        Subject: CN=c370e076637a2038341574eac07b403d3bcc2dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:d2:3e:ea:8e:a2:14:77:7c:35:de:2a:68:
                    5d:f7:59:ee:02:6a:c9:1f:87:6f:32:7d:e7:0c:9e:
                    a8:c9:51:9f:2c:43:02:d5:a9:50:41:43:81:fa:96:
                    bf:10:29:84:5e:c2:b4:d9:fa:02:3f:84:22:7b:f3:
                    74:82:a2:fe:51:90:3d:97:5d:9e:e7:d2:ce:ae:c6:
                    a4:fb:6f:bd:cc:5d:02:d6:83:7d:7c:c5:e6:49:85:
                    54:36:e1:f1:3f:86:76:e7:e3:41:36:cb:b6:8c:28:
                    e1:dc:a9:12:89:6c:89:95:45:b7:11:24:2d:13:ff:
                    4a:de:91:a5:fa:20:d1:cb:44:6a:b2:3a:ef:69:2a:
                    cd:8a:2b:49:bb:e8:a8:1d:00:88:00:b9:2a:f5:2d:
                    15:0e:16:a4:38:3f:05:91:08:97:b2:3e:b8:6b:81:
                    0a:26:3d:ab:ba:b6:13:bb:6c:49:ea:ce:d2:3f:a2:
                    7d:e7:f4:e8:45:e9:ca:6a:4b:4b:de:45:04:e3:77:
                    22:c8:22:54:b1:06:85:da:01:74:df:2d:e9:ef:1b:
                    06:b6:26:b4:de:a2:b7:55:bd:7e:d2:75:d1:2e:ef:
                    89:8d:18:fb:b6:0f:8e:cc:dd:ab:51:40:55:47:c0:
                    1e:18:b9:6e:1b:59:98:3d:2b:52:39:6a:0b:42:61:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:E0:76:63:7A:20:38:34:15:74:EA:C0:7B:40:3D:3B:CC:2D:AB
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:dc:50:cd:33:e8:dc:da:46:5f:36:8c:57:c0:4a:20:c2:70:
         80:83:2e:a5:2b:23:3f:3b:98:e0:01:2a:88:02:77:11:b6:24:
         c7:3b:f8:1b:86:f5:1a:80:53:37:f7:6f:63:69:97:65:fb:eb:
         08:cf:9d:e3:a3:71:ed:03:9d:f0:61:5a:19:f5:31:c9:f0:f5:
         3a:83:2c:d0:5c:3e:46:0d:59:b7:20:4e:ea:57:61:3f:1a:ca:
         2b:2d:7c:f2:b9:0e:f2:1e:69:4d:26:f0:eb:62:22:8f:6c:d1:
         88:57:f3:ad:b5:4a:04:f8:65:58:0f:d2:dc:2f:58:a3:60:19:
         20:d7:0b:9f:90:38:bb:7b:57:68:6c:4e:69:ff:ba:56:e1:fd:
         24:e3:dc:f2:0c:fa:3c:92:8b:25:fe:ff:b7:56:65:7a:ff:3f:
         96:fe:75:87:62:76:90:a2:3e:c5:c0:9a:43:17:38:f1:f0:4e:
         39:72:42:63:28:fc:48:ca:f6:33:de:ca:18:3a:1a:41:28:12:
         a8:0e:db:45:70:14:65:cb:63:15:c0:34:cf:89:ba:92:56:ee:
         86:0b:8d:5b:78:3c:20:2d:a7:61:0e:8d:00:3f:f3:05:40:0a:
         40:17:b3:63:c2:df:e8:68:78:70:7b:0c:b6:b4:e3:a8:38:45:
         72:42:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:31:48 2025 by rpki-client