Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File:                     Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier:          VfzZpq97Vx1jqOon4ZyTcg7YIBu72pjTE7FdAUGPMPc=
Subject key identifier:   AB:42:83:93:C8:BA:93:24:C0:E8:76:D1:E9:25:0C:D1:93:49:C5:BD
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer:       /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial:       01967A200B9B521569E4FA3B5189456B219C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number:          1512
Signing time:             Mon 28 Apr 2025 02:00:42 +0000
Manifest this update:     Mon 28 Apr 2025 02:00:42 +0000
Manifest next update:     Tue 29 Apr 2025 02:00:42 +0000
Files and hashes:         1: B9inWc_Zru3DBQYoTCckNvJAJjc.roa (hash: rR3/vKr9FiP0LIExuGsty/9oTkiBHkZoBOxEJZQ25PU=)
                          2: N2iXQzwnJ7HrnDOcVCjZn3aCcVw.roa (hash: YJwpPg1gpuiDf+AucM/2eZ40ZoPeyXC6eibq/R/5usA=)
                          3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: dMb5NI+tmQV++DckzZgUe4e5FOWR0MTYCEZZBUICI10=)
                          4: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (hash: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:20:0b:9b:52:15:69:e4:fa:3b:51:89:45:6b:21:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
        Validity
            Not Before: Apr 28 02:00:42 2025 GMT
            Not After : Apr 29 02:00:42 2025 GMT
        Subject: CN=ab428393c8ba9324c0e876d1e9250cd19349c5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:07:cd:fd:31:5f:c1:7c:58:53:32:70:3c:
                    5a:40:05:fe:48:3a:29:d2:e2:82:6b:80:44:23:1a:
                    ce:53:9c:cc:93:fe:4f:ac:c0:20:d2:08:97:a6:aa:
                    2f:2f:d8:21:d9:30:b7:7c:b0:b6:ef:04:9e:9d:07:
                    7d:cc:e3:6e:d2:5a:4e:f7:dd:83:3a:b9:45:b7:23:
                    40:eb:6d:5f:9b:e8:ed:c4:a2:ba:dd:5d:7d:dc:b9:
                    71:ff:8c:f7:ed:f7:a7:65:c7:91:3e:de:16:cc:8b:
                    76:10:d2:c6:5e:9f:9d:25:78:c9:51:b0:0d:bc:f2:
                    98:28:47:ba:e8:5d:f0:ab:47:6a:82:cb:c4:cd:98:
                    bc:1e:63:24:cb:68:23:f6:f6:12:da:f5:e9:54:6b:
                    c2:28:94:78:2e:4a:32:15:0a:c3:c2:a7:fe:56:bc:
                    bf:cb:b1:70:25:e3:7d:b3:46:bc:07:2f:24:79:4e:
                    e4:e5:1c:ae:c1:0d:d7:1c:89:0d:ef:55:bc:c3:12:
                    58:89:96:ff:ed:f0:0f:94:16:44:e4:76:6e:57:4e:
                    58:ef:cf:2f:21:84:81:16:fe:9d:f7:8c:72:52:5b:
                    76:2b:05:7b:fd:16:a0:97:cc:d4:1d:4e:29:8d:ee:
                    8b:b4:ad:e2:fd:55:e3:5c:42:6c:7a:c9:6f:a5:17:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:83:93:C8:BA:93:24:C0:E8:76:D1:E9:25:0C:D1:93:49:C5:BD
            X509v3 Authority Key Identifier:
                keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:5f:a6:c7:23:10:d7:7e:87:cd:e1:56:53:ac:38:4d:d3:
         18:42:17:f8:ad:8a:18:0a:ae:af:7a:1b:e6:a8:d0:84:91:9f:
         83:a8:b8:8a:5e:c9:d6:a6:57:5e:17:f8:5e:a0:cf:95:28:67:
         7b:93:4f:62:46:3e:cb:f2:ed:cb:68:9f:1b:55:02:4c:87:af:
         de:ec:58:4b:63:41:c8:1a:bc:b0:9c:b6:7f:6f:e2:4e:5f:4a:
         34:aa:6b:0b:f9:96:f4:c2:4e:c1:cc:61:ee:cf:a7:56:00:1c:
         63:21:76:3b:6a:00:32:2b:df:e5:13:46:9b:89:52:f8:ee:5c:
         21:9f:b7:f0:10:9f:b4:fc:b5:0a:90:f0:10:69:54:36:d1:4f:
         08:fd:6f:19:ee:0e:cf:fb:a2:10:b6:6d:63:8b:e0:de:a7:4d:
         90:83:e0:72:90:51:e3:15:0f:a5:01:79:20:6a:31:2f:21:56:
         0f:6b:bc:89:c4:36:9a:b7:15:e5:69:7b:a0:62:57:d8:66:b7:
         18:8b:de:69:ee:43:e7:85:8f:ac:39:0d:eb:1b:c7:3f:44:c7:
         63:6c:d8:80:5a:e6:15:6b:e8:f9:16:7d:75:d2:10:ca:54:09:
         2c:38:5c:3f:0a:2a:ea:b6:c4:43:23:1f:cb:ad:22:ca:8f:d6:
         36:42:f6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:38:26 2025 by rpki-client