Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
File:                     ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json)
Hash identifier:          mKp/PgSUHG1YpRGbaiBnTR/tuQa+RkZ9JknKzLeCeOM=
Subject key identifier:   EE:CD:68:EC:2E:03:69:54:21:F2:CA:DD:8E:DF:16:40:C2:14:43:FA
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Certificate issuer:       /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial:       0196846C867514D0B2D5F02A97B52886375A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
Manifest number:          1518
Signing time:             Wed 30 Apr 2025 02:00:26 +0000
Manifest this update:     Wed 30 Apr 2025 02:00:26 +0000
Manifest next update:     Thu 01 May 2025 02:00:26 +0000
Files and hashes:         1: 1-Ww6_zY-cf4_pNxKQtK1P8fP1C0.roa (hash: 0TcdfQeJAJLEnkaZYWVb8FupumHFnMsYWXGkxyczS0s=)
                          2: 83sJuzNcyjAJmIRil7l88NYWBMA.roa (hash: MJ5oBVNNCDLPnHeShHSTHYAAvYpJCfm/fRpbcBOIwJQ=)
                          3: AH8YfsuwJx0af1H6sw2nAIpol7g.roa (hash: QB8f2OrNQnT+GeqYmkp8zb67UdxInw+pNReppkRi83M=)
                          4: GqlBEeTH2BeoRvE11HJ8GrZqFDE.roa (hash: naav5Y+vpoLFfuKrSX9+iKGyQaheX7homqtPr9pYrkM=)
                          5: NJ2TGhxbE7k4-OWyg3tajojbLFw.roa (hash: CTFiHd29yRwltG28gbz8+HiRp4EgXhGthGX6E8wzrhc=)
                          6: sqZ6AtAoscTLuSbJUsk3W14dTDk.roa (hash: 5N6Dz7LxTX6s/W6RwvFwXOBJJhCL1Lo6JqWUSH17UMs=)
                          7: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: IJXmNss+QZGF+ObPnAwF7bY1iDOD6bBq1YEMR/yzBXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:6c:86:75:14:d0:b2:d5:f0:2a:97:b5:28:86:37:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
        Validity
            Not Before: Apr 30 02:00:26 2025 GMT
            Not After : May  1 02:00:26 2025 GMT
        Subject: CN=eecd68ec2e03695421f2cadd8edf1640c21443fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:39:aa:72:01:95:48:a0:cc:ff:4c:25:0a:
                    66:ff:01:00:f6:18:30:69:a5:5d:0b:26:f6:25:73:
                    99:7c:3c:d5:3b:fb:bb:07:c4:41:ed:e2:da:ae:6f:
                    af:ae:a8:e8:d5:50:bf:76:2b:df:ac:d7:ee:7c:46:
                    69:56:b6:60:9a:45:5f:ca:e0:86:83:3a:92:27:87:
                    e8:e6:c6:f8:13:bc:c5:1b:9e:78:99:e7:ef:85:9a:
                    fb:23:39:11:97:62:6f:36:53:6e:17:66:a3:1b:36:
                    5a:ba:ac:0a:ad:6e:25:6e:49:16:9e:c4:b9:ea:28:
                    df:1c:26:ca:1b:f5:0b:83:ae:62:ea:8d:06:09:30:
                    b2:08:d6:f0:a6:26:74:4a:36:4a:bc:aa:ef:63:fb:
                    ee:0c:9d:8f:e0:12:c2:21:02:b6:fb:54:12:73:5f:
                    48:4e:7c:41:8e:60:b2:78:ef:f0:33:2d:50:ec:f7:
                    8f:6f:bf:00:cb:16:4e:42:b8:af:f0:a7:d1:48:73:
                    90:6d:51:77:35:03:bb:7c:f2:bd:5c:ca:a8:77:57:
                    27:8a:42:94:1c:41:07:a1:87:5b:07:c0:12:a3:b8:
                    f4:a0:72:9d:25:05:5a:29:ec:02:a1:9d:b7:e9:0b:
                    bb:b9:4b:ef:12:0d:75:9b:b4:8c:b5:5d:19:60:db:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CD:68:EC:2E:03:69:54:21:F2:CA:DD:8E:DF:16:40:C2:14:43:FA
            X509v3 Authority Key Identifier:
                keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:e0:64:e7:0a:89:c6:b0:da:32:a3:43:28:e7:62:85:7a:
         37:27:27:7f:31:5a:fb:4b:fb:c2:95:24:30:26:bc:5c:04:10:
         6c:7c:6e:43:2f:58:2f:e6:f8:c6:34:91:f9:10:4c:1c:61:95:
         5e:63:4e:2a:8c:1d:cb:1a:49:cf:b0:8a:67:c7:1a:06:15:56:
         46:4a:45:c1:9d:1a:54:d9:b2:44:41:de:b6:b2:81:23:51:fa:
         c7:33:1c:38:20:65:13:bb:4e:85:0e:f6:7e:45:e7:55:30:23:
         d8:d1:6a:34:3d:5c:b1:e3:a7:24:c2:c4:c3:c1:14:10:4a:69:
         60:6c:47:e6:c7:a1:ac:78:f5:7c:c6:a0:b0:3c:b2:f1:fa:c7:
         f1:95:ed:bb:72:04:4d:b4:d7:6d:87:7f:bb:99:b0:76:47:c6:
         35:b3:f7:21:32:3c:15:12:c7:c8:ed:ce:ab:f0:91:27:fb:3c:
         61:7d:44:b4:f3:56:15:0d:37:15:75:61:18:a7:de:cc:6e:d8:
         11:d5:ae:81:9b:ac:41:7c:ed:da:5b:b9:53:ec:7a:cd:8f:56:
         e9:7e:19:31:99:56:f8:9c:30:88:97:5f:cd:bc:06:13:c2:f7:
         d9:b7:6e:75:95:2b:ab:cd:03:7d:54:f1:d1:7c:0e:a8:f2:ce:
         bc:74:b0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:43:00 2025 by rpki-client