Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
File:                     Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft (raw, json)
Hash identifier:          mJVzD9tgsRAPpIOEW5t65XedIEM58sO/ksx+HLYRQYo=
Subject key identifier:   54:90:61:F6:7E:4B:B5:9C:E0:36:90:22:EA:94:82:20:9F:36:A7:98
Authority key identifier: 4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
Certificate issuer:       /CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Certificate serial:       019686FFA922E1078C289202D05B9F3585F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
Manifest number:          0BDA
Signing time:             Wed 30 Apr 2025 14:00:23 +0000
Manifest this update:     Wed 30 Apr 2025 14:00:23 +0000
Manifest next update:     Thu 01 May 2025 14:00:23 +0000
Files and hashes:         1: NZZp83GD9DMoLhn3D9M5XusFTxI.roa (hash: OiMifk7R6FismqZrdc/pOMDrQLzXG34BDoHmuCJQZZM=)
                          2: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl (hash: sRSSC7Pob19qtmm3ZIEU5u2s4gzfMyB4FIlohQdavbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:ff:a9:22:e1:07:8c:28:92:02:d0:5b:9f:35:85:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
        Validity
            Not Before: Apr 30 14:00:23 2025 GMT
            Not After : May  1 14:00:23 2025 GMT
        Subject: CN=549061f67e4bb59ce0369022ea9482209f36a798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:8a:66:2a:1e:0a:f9:90:92:54:5c:56:81:
                    a6:1d:08:e0:59:89:0d:72:2d:09:4f:62:fb:31:2e:
                    90:d3:ba:92:97:74:09:e6:56:02:59:e3:2d:81:ed:
                    14:55:1b:f3:62:b5:a2:06:aa:04:36:20:34:01:dc:
                    43:b7:0f:46:f4:c2:43:06:00:7d:22:ac:62:5d:bf:
                    50:cc:9f:38:5d:04:2e:48:da:be:e4:a9:79:b3:57:
                    f1:3b:86:05:f2:06:cb:23:bb:ad:88:c6:c2:69:2f:
                    63:0a:b3:93:8d:b1:c1:15:6e:4b:13:5f:3b:b1:90:
                    ed:11:d4:c5:68:0d:51:59:9e:6b:16:74:8a:88:73:
                    7a:ad:69:3e:c4:67:68:47:ad:bc:6d:70:d3:40:7c:
                    06:a3:6c:d7:25:da:14:62:56:aa:5f:05:6e:5a:e5:
                    ec:15:e0:da:02:21:e5:84:8d:dd:b9:0c:9f:bf:a0:
                    db:03:5d:da:27:43:05:f4:41:df:c1:85:43:ed:27:
                    dc:58:aa:77:55:fd:80:6d:8b:72:cf:76:78:1a:64:
                    ed:56:8a:ca:ae:a8:ac:dc:77:90:4f:6c:8c:85:bb:
                    24:29:a4:45:03:03:32:22:57:af:49:5b:68:c9:eb:
                    9c:a1:ee:f3:8c:da:f1:40:4b:87:4c:a2:f8:50:d7:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:61:F6:7E:4B:B5:9C:E0:36:90:22:EA:94:82:20:9F:36:A7:98
            X509v3 Authority Key Identifier:
                keyid:4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:98:3a:6b:cb:41:ff:84:96:06:58:98:c2:86:9f:68:25:
         ad:80:79:ff:e4:1d:4e:0a:41:a8:66:17:59:00:36:7b:2d:5e:
         c1:77:32:1e:54:51:ac:fb:4f:9a:82:85:3c:14:1f:79:89:dd:
         c5:ff:89:d4:81:62:9f:a9:c5:8e:c4:fa:76:72:f9:83:91:39:
         25:f0:be:b3:2b:a4:ca:48:b0:c2:cb:c8:9f:7e:bb:cd:47:31:
         54:0b:77:30:f9:15:9b:2e:c8:39:c0:47:30:c2:6a:36:a9:12:
         9f:f5:bd:0f:26:db:ac:d5:51:89:47:17:8e:cd:70:86:66:c4:
         5d:56:fa:f6:99:c2:e9:61:67:1f:3d:29:ce:5e:81:69:00:3b:
         4b:c8:58:fc:f0:59:c2:76:63:3c:ef:75:4b:d9:bd:2e:b6:71:
         2b:e2:87:1d:e1:78:eb:54:c9:5a:94:0f:7e:38:36:13:d8:9c:
         8e:a4:08:dd:36:11:5c:7f:ce:23:ce:c6:9f:48:91:f4:56:5b:
         4c:29:ef:74:d7:cd:d3:ec:b9:d7:30:0a:d8:e3:05:90:e2:88:
         b0:ee:6d:80:f8:2e:b7:d2:35:32:6a:7d:3b:5e:ae:d7:9c:eb:
         f4:a8:6a:e8:be:b4:ff:8a:cd:8d:6b:c2:db:fe:c1:f7:df:32:
         40:b3:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:09 2025 by rpki-client