Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          04PZuAyQwFm5NU2/HE2Dg//zeqB6HejvHpIiDK+abiU=
Subject key identifier:   9D:21:5B:69:A7:6F:D4:62:15:63:08:0C:19:33:9B:8C:B0:24:AF:97
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       01967378E7B52715FF1921D8B04FDECCC13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          1528
Signing time:             Sat 26 Apr 2025 19:00:25 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:25 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:25 +0000
Files and hashes:         1: 1-ytL3MQL4QkgTO5M87Ngx4l0rX4.roa (hash: cV/JZjXqlK0Ai67oOxA83/8y7fRmowTguIDArz2zLJQ=)
                          2: 5hN1_iD-LZxHAhEyBgtlC238G_I.roa (hash: l8+npfa+10nPLJ6F7ekx7l+emy/4/lpiXsSvRC05Yys=)
                          3: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
                          4: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (hash: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=)
                          5: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
                          6: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
                          7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: cd9i7gT4j/21tFJ6liyH56wv5ZikCvlc4gWny71UV/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:78:e7:b5:27:15:ff:19:21:d8:b0:4f:de:cc:c1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Apr 26 19:00:25 2025 GMT
            Not After : Apr 27 19:00:25 2025 GMT
        Subject: CN=9d215b69a76fd4621563080c19339b8cb024af97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:44:4f:d7:b3:78:ee:f4:32:61:bd:1f:50:
                    fc:27:20:5e:d0:ac:5f:7a:ef:dd:a2:27:1c:d2:fe:
                    05:5e:ca:18:89:93:45:d9:ff:fd:ce:f1:27:be:57:
                    88:9b:2e:95:43:63:87:79:80:6c:21:c2:e2:d0:91:
                    c2:ed:01:f6:a3:30:b3:dc:8e:b7:30:f8:51:5e:bd:
                    7a:80:d6:84:ae:e7:ef:92:b1:d5:b7:08:22:fc:30:
                    02:c1:11:34:5f:68:05:f7:38:a1:72:c4:45:3e:a9:
                    f4:9d:59:54:99:d3:01:f5:47:f0:6e:30:be:fb:ab:
                    95:e8:19:22:16:12:0b:44:8a:4d:8f:15:11:04:7c:
                    b3:fb:d6:0e:12:b5:54:c8:7f:9e:f3:f1:6e:46:af:
                    7f:2f:34:7c:bb:dc:7e:99:a0:73:28:60:f9:4e:99:
                    1e:e7:7a:93:59:81:f9:6c:45:76:52:90:53:85:8a:
                    70:eb:8d:4b:f9:d0:d7:88:07:8a:08:b4:da:3a:53:
                    c7:9c:4a:c7:c7:ca:c1:42:99:70:8d:4f:ed:ca:5a:
                    53:38:a3:74:09:86:c6:74:be:f6:42:af:83:c6:d3:
                    ef:90:5b:a3:cd:e8:92:8b:c1:16:1c:3e:9a:69:ee:
                    be:69:71:5b:2c:cb:d4:0a:1c:fb:aa:4e:44:c5:b9:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:21:5B:69:A7:6F:D4:62:15:63:08:0C:19:33:9B:8C:B0:24:AF:97
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:3b:60:61:62:53:a0:01:ae:41:40:6f:ec:0a:97:22:ae:
         44:0a:fc:4f:a3:bd:5f:6e:3f:19:d4:60:5e:71:b9:e2:85:a3:
         70:e4:56:7a:1d:94:23:1f:47:cd:6b:7b:91:80:c2:46:12:44:
         8b:d1:40:a6:6a:97:57:39:25:c0:11:58:18:a4:b7:d1:9e:d9:
         ca:59:dd:04:4a:70:1d:6e:f7:81:2a:16:ff:af:64:60:9a:1d:
         09:06:cf:eb:7a:24:77:17:49:f9:c5:99:e9:66:98:28:f8:ee:
         eb:fb:64:e4:32:e3:1a:5c:74:42:37:53:2a:b8:d4:7f:6d:00:
         7c:d3:f0:9c:10:b0:33:ea:ee:67:94:f6:33:ce:1b:8f:b9:0b:
         8d:14:10:ab:b3:f7:63:7d:d4:e3:5d:58:87:a8:7d:33:9c:14:
         03:af:c7:0f:a3:1f:0e:7c:ea:17:53:31:59:0d:1a:a0:55:c3:
         41:00:00:b5:34:be:1d:03:ae:b9:aa:28:a4:33:cc:e7:b1:5e:
         ed:f4:bd:98:01:66:5f:ee:fa:5e:24:6a:ba:5d:5f:b1:0d:31:
         1c:b5:6f:3b:27:93:90:72:27:7d:fd:0a:e7:17:57:19:e1:bf:
         94:64:29:7e:fb:8c:09:2d:23:29:fa:3b:a9:eb:23:51:2b:5d:
         01:79:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:38 2025 by rpki-client