Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          xOsp8jcheCpwe1q3vpQ82cBf+oTDai7Es0ZVNBmGjC4=
Subject key identifier:   01:90:CF:04:BD:24:84:93:84:BE:03:01:20:EC:5F:E5:82:B8:A7:BC
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       0196767A80245B79F6418A6A564212434860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          1517
Signing time:             Sun 27 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 27 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 28 Apr 2025 09:01:01 +0000
Files and hashes:         1: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: BbuXH071wN4jvxMrqt82UMwBNN2Er+vp3/aZA9rS1bQ=)
                          2: 5A2wLed6xy4LK7jvkiIkYMXSVEw.roa (hash: eL5G+05NzxZ+JGYnXx8r5lFHlGHbv8UGaYg9EhNH504=)
                          3: EeuiVBHDBppbMbvhnK9cVO-GWuY.roa (hash: RibVRzvF2zG1KnABcO1H1cwM+0LZwhWIJrVmfB+N9ZY=)
                          4: JMkLxoa9gyb522lPudXUln-VtH8.roa (hash: HGRLs3/3xdKBB32Jm7MzBkeAQwnme0p6aKkTVOkrnLU=)
                          5: UdT52qeUwfKz4cUKsNmdkQLdPTw.roa (hash: Kck1eebPn1LOtIjWwJSFOCY1FX3byBpP9hqNzAg6lBY=)
                          6: feh72HR-_mrzGLz7VSpEFnXqaJo.roa (hash: LwnQ+vMA051C/u4c2Kzemun4LSgaDWuT73rcQZC4pSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:80:24:5b:79:f6:41:8a:6a:56:42:12:43:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Apr 27 09:01:01 2025 GMT
            Not After : Apr 28 09:01:01 2025 GMT
        Subject: CN=0190cf04bd24849384be030120ec5fe582b8a7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:e1:8d:6e:8b:cd:ee:54:ee:7a:9c:83:b9:
                    75:74:22:83:ed:1f:a9:52:ae:2e:24:8b:05:c6:cc:
                    0c:5b:a9:7e:71:c0:ca:c6:14:a6:55:17:36:7c:de:
                    4c:a0:ab:d9:ab:e1:e6:be:3d:fb:3f:58:a7:13:99:
                    37:d9:86:92:c7:29:df:e3:f3:f4:91:b7:04:7b:bc:
                    fb:d6:a4:31:fb:b7:e0:8e:70:ae:32:2a:7f:cc:38:
                    ba:08:b4:33:dc:4f:7a:ff:47:9b:43:51:d9:b3:b1:
                    1c:ba:09:35:06:f4:31:b7:4f:f8:18:53:65:69:68:
                    da:f7:19:95:2b:07:5a:84:25:0b:18:dd:88:5d:f2:
                    d2:5e:95:83:bb:e5:b5:29:cb:a4:29:c7:80:85:50:
                    f9:93:86:cf:6a:77:97:c6:e5:20:71:69:e8:ba:18:
                    49:f2:f6:be:1b:79:71:49:80:8e:4a:7b:3c:59:e7:
                    c0:1e:d8:d2:60:da:2e:f4:dc:3c:1f:8c:cc:b8:df:
                    a9:55:dd:21:43:f8:25:b1:9e:af:ef:eb:fa:2e:14:
                    66:9b:a7:9f:c0:8f:15:e5:b5:de:f9:4f:3a:4d:e3:
                    30:be:76:6f:6e:0c:49:2b:4f:26:f0:19:a6:26:ac:
                    12:72:76:42:4d:3f:6f:56:16:1f:2b:49:67:ee:4a:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:CF:04:BD:24:84:93:84:BE:03:01:20:EC:5F:E5:82:B8:A7:BC
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:e3:9e:6c:e8:cf:73:cb:96:11:33:e9:e9:4b:6f:d9:87:
         ff:22:4d:58:a7:8a:d0:a6:90:99:f9:48:85:65:5b:78:06:a2:
         de:d3:93:0c:e7:56:e0:e8:63:8f:10:f6:ee:91:49:37:d2:7f:
         08:e0:53:8e:3f:e6:db:34:b3:c8:e8:6b:e7:92:b9:e8:13:05:
         5e:de:13:c0:c9:d1:66:d8:2e:19:49:29:6a:ce:11:21:f7:b3:
         1c:9d:12:4e:4a:4e:41:84:7b:56:72:ec:8b:01:6f:a7:5f:4a:
         69:37:e4:2a:73:20:4c:6d:db:92:2d:d4:cc:45:f7:e7:ec:82:
         4d:90:32:4a:a9:06:95:95:ce:85:6e:d4:bb:c9:5c:8d:36:b8:
         2a:f5:4c:02:c9:eb:dc:8b:9e:03:d3:c3:85:e2:9a:0c:2d:8d:
         0c:46:5f:d7:81:24:13:d2:ff:05:ce:dd:53:01:80:d9:96:f5:
         7f:e9:7b:db:54:08:00:31:50:7e:98:93:22:fe:5f:d5:d1:ab:
         75:cf:d6:6b:c9:b7:c3:5d:db:85:7d:2e:44:2c:54:5f:9d:50:
         da:a6:a0:17:47:a2:09:bd:98:a3:d2:bb:3a:ee:74:0b:8c:15:
         26:cb:17:ad:44:57:f9:02:5e:b3:f5:5e:5c:85:b5:02:bf:4d:
         8a:79:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:02 2025 by rpki-client