Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File:                     grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier:          bAX+I2Hg/KsxwgoeyN+yxq7Lt8TQD+udslPAFgBP5jQ=
Subject key identifier:   51:32:16:DD:EB:14:66:ED:19:32:82:3F:6D:37:11:2F:9E:2A:50:F5
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer:       /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial:       0196764347EB143E77096E6D3030D033F938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number:          10B4
Signing time:             Sun 27 Apr 2025 08:00:42 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:42 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:42 +0000
Files and hashes:         1: 2x3GH0uugj9PiKapw7_y_5XF8YY.roa (hash: Q5ocnBPifUXZuaMrfYFAL794jt6aZyPuaM4u2/TpMXA=)
                          2: cYL1PLXBlxYVDNJh8eskDp73wJI.roa (hash: sc3bndIqRaS/g3PvEGkay4IT17gUF6IlbM+GmNxxekk=)
                          3: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: JFlse4MPb8NA3A7VCqXmH3AFUDyECy/OhTTJLHDfnk4=)
                          4: jkh_FFhFNHENA3gIbYhebQVvuBM.roa (hash: cA2VhsNT4DoSkMtREZkBzaZ4CHPg5DwGT95fVOvu/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:47:eb:14:3e:77:09:6e:6d:30:30:d0:33:f9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
        Validity
            Not Before: Apr 27 08:00:42 2025 GMT
            Not After : Apr 28 08:00:42 2025 GMT
        Subject: CN=513216ddeb1466ed1932823f6d37112f9e2a50f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:e5:d3:de:8f:f5:e5:84:f0:32:23:4f:d4:
                    62:3d:c7:f8:28:51:5f:cb:71:3d:9e:58:76:a8:e6:
                    3a:ef:d5:00:2b:da:51:f8:9c:40:1c:82:02:85:d3:
                    64:5c:f1:2b:63:63:7a:23:2a:92:eb:c3:bb:22:77:
                    30:33:2f:0d:c2:e9:c2:b9:23:b5:bc:88:94:e5:65:
                    e1:42:ab:ca:d4:dc:a7:1f:21:28:27:03:8d:47:18:
                    a1:f9:55:81:8b:18:50:f9:b7:dc:23:7d:59:19:e8:
                    86:aa:b6:21:1f:28:e7:47:23:58:f4:de:e7:b3:bd:
                    45:dc:0a:e2:16:b0:2c:4a:fa:bd:7f:77:65:51:8e:
                    b8:7d:f3:35:6e:a5:c3:75:17:1d:54:c8:05:aa:a7:
                    5d:73:7f:d3:e2:dc:50:89:43:ee:19:e4:2a:f3:2d:
                    cb:98:7c:15:f1:48:66:8e:b2:49:7e:0e:31:9c:04:
                    a0:ae:20:fd:82:ce:9e:71:d9:92:d4:ca:66:57:84:
                    71:67:da:16:84:0e:63:ef:44:ef:3e:7b:c4:f1:8e:
                    cc:b6:cf:77:bf:62:28:9e:5b:08:d6:de:78:9c:e1:
                    38:f0:9f:95:83:06:5f:13:1b:e4:a6:fa:8d:74:a2:
                    88:f0:6b:f4:4e:fd:82:47:62:84:d2:b1:1f:b0:e7:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:32:16:DD:EB:14:66:ED:19:32:82:3F:6D:37:11:2F:9E:2A:50:F5
            X509v3 Authority Key Identifier:
                keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:16:8b:c9:9a:9c:f9:92:40:12:4d:e3:15:68:01:d8:5d:
         c7:6e:55:33:23:a7:75:b9:dc:ff:e3:25:cc:08:f3:da:60:ca:
         4a:a7:b6:ab:5c:d5:47:12:33:bf:68:e4:96:81:4c:9f:7d:5f:
         8d:92:a0:e7:9d:aa:b0:6c:51:8b:41:b0:c3:97:f1:30:66:b8:
         cc:95:21:6e:6d:92:be:7c:c7:34:04:c7:c2:ee:85:a7:63:a5:
         d5:34:e9:f8:05:7e:03:07:70:89:15:9e:0e:29:43:ec:80:14:
         20:76:03:38:e1:34:ef:51:76:aa:e5:b6:55:4e:c6:e3:93:fb:
         0e:7a:2c:4c:25:7a:b2:f8:54:13:10:62:f4:78:9d:36:c8:24:
         b1:7b:fc:8c:c1:cd:28:19:d4:09:11:ba:74:e6:5b:51:c8:3b:
         47:10:f1:cc:a6:b0:31:74:be:36:49:02:84:91:db:ca:a8:5e:
         b7:e4:70:d2:9f:ed:7f:99:f5:e8:44:b7:fb:e8:94:6f:28:c5:
         2e:34:e6:b1:62:74:f9:6d:91:e4:08:2d:b8:bf:f5:c0:5a:eb:
         7e:c3:6b:9d:af:c2:75:5d:1a:db:5e:29:8d:64:a4:6b:ab:70:
         99:db:97:94:3d:c4:13:48:b6:7d:c4:75:3a:99:bd:fe:ac:81:
         7f:bc:ce:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:15:31 2025 by rpki-client