Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File:                     iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier:          0UlGiNr9VobHqcnNPU6WMVXz2/9tpTuppNk1xTwJHUg=
Subject key identifier:   EF:19:2A:24:75:14:19:1D:AF:9B:5A:18:18:A2:DB:24:12:42:5F:F4
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer:       /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial:       0196730B5E1C310E89A02B09CCCF4B61F430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number:          122E
Signing time:             Sat 26 Apr 2025 17:00:46 +0000
Manifest this update:     Sat 26 Apr 2025 17:00:46 +0000
Manifest next update:     Sun 27 Apr 2025 17:00:46 +0000
Files and hashes:         1: OIDmEPbDXYESb6L8W110fitW4aA.roa (hash: AIH3VvHzWUC8AtgPyCBt/ld6YdiGtY4TDL+tLd/3C+w=)
                          2: OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa (hash: UN46ctiu4ND9IXGCd4EhP/dQ+ESw5QeLedCQ9yxaLnU=)
                          3: WV7QPmFglb32ubsYCfgK2rSXhGk.roa (hash: 7jclXGuRVqisqCezIaon+r4NXFS6nrK/O3nscYXGo0k=)
                          4: WYkwsfl1LrYxcZc4hOn_dwqrnKU.roa (hash: OFI3Jc8HI7chg6jym9Pd2h5sq7FHfkNT1WJbvujMSAY=)
                          5: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: 1RJcCbBE0d4c4bDPRibJX0xzTjauFCCkYl9zVy4vlaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0b:5e:1c:31:0e:89:a0:2b:09:cc:cf:4b:61:f4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
        Validity
            Not Before: Apr 26 17:00:46 2025 GMT
            Not After : Apr 27 17:00:46 2025 GMT
        Subject: CN=ef192a247514191daf9b5a1818a2db2412425ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:31:b1:5a:ff:eb:b8:bb:b4:0e:b1:f5:e4:
                    be:92:68:46:ae:11:c2:cc:f0:88:e7:46:75:75:3e:
                    df:e4:d2:eb:53:93:73:5a:ca:bd:cc:2e:20:6e:c7:
                    45:f2:ee:5d:14:cd:34:46:56:bd:1b:46:49:9e:ca:
                    14:1c:8d:dd:14:51:02:12:49:d6:44:8f:b9:94:2e:
                    3b:10:e0:f3:ad:9d:5e:63:1f:b6:22:bd:85:f8:51:
                    0a:3b:b2:22:e9:cd:86:6c:a3:82:d1:57:4a:6d:41:
                    43:2b:5c:91:0b:23:b7:a2:c1:4c:fa:9c:be:9d:7a:
                    ae:f4:88:e5:f8:25:ae:80:24:f4:98:da:9f:a7:42:
                    40:68:7f:1a:3d:c9:f8:d9:a5:b7:e3:4f:a6:58:0e:
                    b2:3b:bd:78:15:9e:d8:fb:45:12:e4:37:a0:6f:92:
                    e3:eb:3a:74:90:16:d1:8e:5c:32:56:ed:bd:3e:91:
                    ed:62:6b:65:34:83:fa:4f:87:9a:b8:91:f2:3d:ed:
                    f8:ec:5d:d5:3f:77:04:b8:f3:28:19:b7:9d:75:80:
                    3c:a4:76:6f:ac:a4:2a:01:7b:80:5f:88:66:78:62:
                    75:43:5e:4c:fa:5e:71:8d:3d:69:23:3e:04:f5:45:
                    e9:48:7c:11:f9:4f:77:ec:cc:34:20:b0:b6:8a:65:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:19:2A:24:75:14:19:1D:AF:9B:5A:18:18:A2:DB:24:12:42:5F:F4
            X509v3 Authority Key Identifier:
                keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:22:27:78:92:47:55:bb:80:71:8c:e0:83:47:ef:ad:b3:
         35:dc:91:fc:49:9b:69:72:dd:80:3d:73:7e:df:81:f1:af:ce:
         48:47:9f:23:cb:7f:68:f4:15:de:60:6e:8d:aa:02:26:05:c9:
         f2:1f:a1:0f:c2:72:ba:68:34:c2:1a:53:50:3e:91:b7:d1:60:
         00:2c:59:c3:67:22:65:57:4a:b5:90:6e:68:06:f5:34:e0:a5:
         a0:b1:2e:43:fb:bd:08:99:73:96:0a:18:4b:76:5b:80:b0:45:
         cc:23:18:71:6c:6d:ec:44:39:4f:7b:99:5c:3f:b2:8b:36:d1:
         71:b0:35:91:b6:2c:fd:a2:49:b4:e5:d8:61:1f:46:7d:81:af:
         3e:3a:59:21:58:07:6d:91:35:82:f6:39:6c:46:41:d8:bb:ea:
         dc:2a:ec:09:70:ee:c0:8c:cd:e7:72:96:a9:9f:7b:26:d5:b8:
         67:a3:a9:3d:4d:fa:79:c4:6c:97:7f:23:b2:b9:d5:04:a2:a6:
         d0:c6:f3:bb:8e:4f:e1:86:a8:99:53:45:5f:24:b1:f3:11:a8:
         ce:1a:67:d3:b9:56:77:58:19:3e:69:28:61:ff:6e:8d:c9:af:
         dc:a8:a0:7d:a1:c8:86:0d:cc:44:31:79:17:37:c3:b3:6c:99:
         84:32:42:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:27:07 2025 by rpki-client