Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File:                     ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier:          75XJuvatxTQcHStuQ0YnaVsjlC2mwRARSD48+Omsldw=
Subject key identifier:   F1:A4:B4:3D:A5:D7:C7:92:F5:FE:88:7B:4F:AE:52:6D:44:29:93:E6
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer:       /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial:       0196730B49D268AFADE30C149062E2BD3BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number:          05C0
Signing time:             Sat 26 Apr 2025 17:00:41 +0000
Manifest this update:     Sat 26 Apr 2025 17:00:41 +0000
Manifest next update:     Sun 27 Apr 2025 17:00:41 +0000
Files and hashes:         1: J1p4HbSx9YoNvjErHtTwAUyVgDo.roa (hash: umKZAeg8WGSa+fZsQuR2FqJchnQHVyD2NsdZFLjN3sU=)
                          2: aBe_qtLg50vG-QMNS0DazoOJIzc.roa (hash: o7O5hbF44CxzgFroAfMy5Oe9mhj/OcqkE277oD0IFeY=)
                          3: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: JNPRO07HxBj3k8lnoZlHqUSdqPszZi2XvH5e8PRqJNc=)
                          4: jbpo7UEJqge335LMUeNSgvCaNTI.roa (hash: MZqdVSw/apK3pc3ZeATkJS+ETEBWZhP6yk5oDbnCI8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0b:49:d2:68:af:ad:e3:0c:14:90:62:e2:bd:3b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
        Validity
            Not Before: Apr 26 17:00:41 2025 GMT
            Not After : Apr 27 17:00:41 2025 GMT
        Subject: CN=f1a4b43da5d7c792f5fe887b4fae526d442993e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:ca:6e:fa:74:54:be:0d:51:1e:a5:49:9e:
                    0e:70:b5:2d:7c:f4:ed:a1:0d:23:cb:d2:33:af:33:
                    2e:08:4c:cd:85:ab:fe:22:1c:66:f5:8f:6f:5a:dd:
                    f3:5b:09:ca:1f:50:84:cb:cb:99:6e:72:ba:3b:0c:
                    a9:2e:34:e1:14:27:48:74:87:3c:d2:17:a9:1b:84:
                    10:f3:21:90:c0:9a:6b:39:9a:0e:53:84:6b:1d:59:
                    e6:1b:2a:80:4a:78:d8:bd:1f:4b:c7:e9:2b:06:86:
                    08:a5:39:08:5f:e5:bd:24:b7:c0:08:3c:2f:9b:4b:
                    5b:41:2d:38:61:ed:7c:24:07:30:78:21:4d:e2:ee:
                    8b:ff:7f:32:ea:f4:6e:2e:6b:93:42:8b:97:2f:12:
                    7a:f1:4a:14:33:cf:60:ae:c4:b6:39:4e:a1:ff:6a:
                    d9:54:27:2b:fb:bf:f0:4f:0f:9a:14:07:d4:d1:64:
                    37:fc:ec:e7:22:74:d8:7c:f9:ba:8e:a7:e4:d9:43:
                    a8:c8:06:53:f3:a0:3b:20:6b:e3:c3:45:e1:d9:f9:
                    4c:17:6b:00:1a:41:ac:31:0a:19:f8:cb:08:a8:20:
                    fd:eb:55:7c:eb:8a:ca:89:9a:c6:dc:f8:77:de:22:
                    58:9b:9f:28:48:27:07:9a:ad:04:9c:e4:ff:0b:ac:
                    83:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:B4:3D:A5:D7:C7:92:F5:FE:88:7B:4F:AE:52:6D:44:29:93:E6
            X509v3 Authority Key Identifier:
                keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c6:bf:c4:20:87:c4:0c:ba:43:89:73:8d:80:80:ff:a0:c4:
         36:dd:40:ad:63:d8:8c:09:30:eb:57:44:ac:7a:1d:42:10:74:
         71:38:53:5a:97:ac:54:2e:ec:d3:05:d4:1c:c6:d2:5a:6c:0a:
         cd:6d:70:f5:24:e7:3c:2c:c3:02:f5:b6:83:d5:73:09:3b:19:
         e4:34:98:f7:ba:9b:2b:fe:99:1b:7b:ef:0f:29:d9:77:af:ff:
         e6:fb:9a:3d:84:d1:6b:f3:ff:88:e5:16:c1:9c:de:e5:ba:29:
         cb:da:56:f7:75:37:da:2f:7d:01:01:c1:c9:13:49:46:fd:70:
         f1:6b:19:c0:9a:39:7c:7e:a2:61:0b:3f:cf:28:85:5f:ae:b5:
         96:1c:87:24:00:85:fc:cd:0c:15:0b:ab:5f:78:68:53:ab:7c:
         18:24:b6:b6:a9:d3:dc:31:d4:04:0b:ad:ff:62:b3:bd:ba:a3:
         d0:8b:3d:d4:9f:c5:9f:ed:98:c3:1e:4e:dc:9c:f4:94:d3:cf:
         2e:97:cb:a8:fe:66:c1:d2:c6:64:7a:de:81:47:5a:46:1d:18:
         7a:f2:5d:ac:0e:29:fa:8a:2b:9f:62:f0:4f:a7:54:75:e0:94:
         a9:ec:89:31:5e:7b:75:72:9d:00:50:4e:8a:a8:5d:da:72:83:
         d7:af:f7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:02 2025 by rpki-client