Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          6dqaBwXqDkZqICYJ3qKiuWGRh/uYXLp3K78jg2ZBqKU=
Subject key identifier:   4E:46:D5:10:F2:9B:6B:7C:19:39:3A:61:D2:BB:36:BC:93:94:94:83
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01968EF062C32961E64D9EB8022082041C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1310
Signing time:             Fri 02 May 2025 03:00:40 +0000
Manifest this update:     Fri 02 May 2025 03:00:40 +0000
Manifest next update:     Sat 03 May 2025 03:00:40 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: QabVMEVTDuPPuzrx7pVF/GdUG8k2Wmqnc9tb3qsrhxU=)
                          2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
                          3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
                          4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
                          5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:f0:62:c3:29:61:e6:4d:9e:b8:02:20:82:04:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: May  2 03:00:40 2025 GMT
            Not After : May  3 03:00:40 2025 GMT
        Subject: CN=4e46d510f29b6b7c19393a61d2bb36bc93949483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:9d:72:20:0b:a8:53:4c:21:b4:a3:4d:71:
                    4c:2c:bb:cd:f0:35:35:39:7b:cb:1c:9c:14:74:2e:
                    6a:93:c0:2d:2f:0c:ee:3e:36:c4:38:f2:fa:83:59:
                    68:3a:42:3d:90:92:71:94:27:d7:37:92:62:73:5e:
                    20:ed:0a:c0:36:b9:54:17:8d:61:a3:e0:f2:7d:58:
                    1e:a2:bd:04:8d:f3:0e:5e:19:48:11:51:36:e0:e0:
                    db:d4:c2:40:36:e0:b4:9c:14:62:29:9b:4d:7c:e0:
                    a9:bd:16:8e:d2:39:58:79:6b:27:1e:8b:ae:3e:b0:
                    d3:4d:50:75:b5:40:3d:5e:58:ea:f4:a6:0e:70:63:
                    c0:9e:fc:00:5e:a6:37:e8:fd:6a:47:75:3b:95:a4:
                    3f:0b:f4:05:cf:22:3e:e0:4e:1a:67:93:bb:46:23:
                    4c:ab:3d:1e:3b:43:8d:67:8e:f3:16:cb:26:95:fe:
                    af:a7:f4:60:79:31:5c:0c:65:85:27:d3:1d:e1:de:
                    cd:82:d9:93:aa:2d:dc:1c:bc:51:86:19:61:cd:56:
                    ee:63:1a:d3:3d:a0:5a:80:55:03:42:f0:2a:5b:72:
                    b6:b8:04:6a:8e:a8:1e:e9:a4:20:a7:88:e6:9a:50:
                    d8:fa:cb:a4:4c:01:25:08:7c:af:29:d1:c4:ff:aa:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:D5:10:F2:9B:6B:7C:19:39:3A:61:D2:BB:36:BC:93:94:94:83
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:fb:2e:bb:e1:78:6e:02:91:67:e9:10:fc:4e:d3:dd:43:
         44:70:4d:1e:d7:93:69:f2:d0:8a:89:99:8c:50:d0:06:ff:a0:
         91:7e:2a:bb:77:d8:3b:c8:82:0c:d9:f2:55:f2:a5:66:1b:c8:
         13:6c:38:5c:4f:e7:95:f2:22:73:b9:3a:f1:d9:f2:c9:17:fd:
         4b:7c:3a:3f:e0:db:b6:b6:a7:cc:ba:ea:a6:35:5a:50:e4:b6:
         55:5e:ad:49:fe:3a:dc:f2:e0:34:cb:74:75:d3:68:a0:40:7b:
         34:bf:16:e3:9d:99:d3:bc:92:8f:3b:a9:de:f9:af:f2:01:84:
         52:e4:f3:54:e7:c7:3a:5f:76:ce:6a:34:a4:37:0f:22:c1:22:
         fb:3b:ca:a9:54:15:7c:e2:e6:0b:c8:cd:8b:3d:52:d0:ea:70:
         4a:0c:b8:2b:3c:9b:b0:6b:e5:ff:a7:21:78:7a:4a:16:d2:8b:
         64:03:48:0b:1a:62:6a:ba:d5:af:3d:c1:d3:60:38:31:7b:d8:
         9d:31:39:fa:ac:30:0a:cb:a9:42:45:38:9a:64:06:d9:f6:ad:
         43:a9:19:a0:0e:05:f0:4f:65:05:7d:71:2a:3b:a4:f2:53:a9:
         37:04:ef:56:7f:be:c3:86:17:fd:8b:28:a8:f0:47:04:85:7d:
         7e:1c:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:35:48 2025 by rpki-client