Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File:                     s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier:          3BSjebW+s/rfWfFLZ1s5JiAgvc3MOAHJsQXsqYbGzfU=
Subject key identifier:   33:E7:5C:58:7A:05:4D:A5:5E:38:2C:1B:CC:29:64:A3:32:40:1F:06
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer:       /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial:       01968B13789A43062D41FE3C6FACE8D626BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number:          120A
Signing time:             Thu 01 May 2025 09:00:31 +0000
Manifest this update:     Thu 01 May 2025 09:00:31 +0000
Manifest next update:     Fri 02 May 2025 09:00:31 +0000
Files and hashes:         1: 4jKaVB-LfLQCzkTYjVHTGVrvLiU.roa (hash: Dbf5cUJDTFeC16IHWdH+FZOyuiR9fHmIqJ0f+7DT0tY=)
                          2: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (hash: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=)
                          3: VanRC4jdlI0kqk4muFN6P2QYkkM.roa (hash: UwcKA2rVfnEdm7lIuYa2eDQEpkXJsNm7mizYt8PPLFk=)
                          4: ZJAl9ImjoPtFm7tGn32RwL0IJHQ.roa (hash: 9vVACgeehLJBLJEdL35dqakk6HDNA29yLh2EDLIP5+w=)
                          5: ZljRltRiIrsMECExv8F7r5rYKsw.roa (hash: nxmE/fGDsanE/RF9PJbTsPR18T1YycJHuh5uUceeEDM=)
                          6: kYqAky72P3pEnQEl7_H71_oXMrA.roa (hash: OI+pqrPoYdkxRhXaxBipc3lXLF5qKe9eg06gVgRqd68=)
                          7: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: /JIJhafOiS1yWB1YI6a84yXMsUMA728BOSgpB7G2+nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:13:78:9a:43:06:2d:41:fe:3c:6f:ac:e8:d6:26:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
        Validity
            Not Before: May  1 09:00:31 2025 GMT
            Not After : May  2 09:00:31 2025 GMT
        Subject: CN=33e75c587a054da55e382c1bcc2964a332401f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:74:96:de:be:49:87:cf:f7:27:64:be:23:
                    58:73:e2:98:4e:d5:92:fd:d4:6b:a5:af:27:fd:f5:
                    0f:51:13:0d:3f:81:f9:50:88:b0:64:6b:2d:eb:68:
                    2b:be:9b:86:9b:41:6c:b7:86:e9:f3:74:c3:79:78:
                    52:51:bc:b9:f9:07:51:cd:bc:d5:7a:92:aa:78:da:
                    51:4c:84:77:d3:a1:cc:ca:32:99:2e:7e:72:d9:01:
                    c3:8d:a9:63:34:30:01:80:d4:9e:15:1e:a5:7a:2b:
                    d6:94:2f:b7:7a:1b:ab:5e:e7:91:9c:a3:c8:6a:a1:
                    15:3d:5e:19:32:c3:6f:f4:bd:d1:0c:71:28:1e:b1:
                    a5:a1:9c:ee:e7:aa:24:46:44:ca:fb:4f:c8:b7:ff:
                    0c:6b:be:45:c9:25:46:71:ac:40:23:ae:59:3c:bc:
                    78:c3:46:00:c2:53:0e:2d:bf:c4:2d:6c:37:98:4c:
                    bf:51:71:ac:d8:72:1a:71:be:b7:eb:c7:91:44:ec:
                    a0:0b:bc:2f:36:c5:e5:91:d1:e7:af:19:da:2e:ff:
                    68:71:70:7d:75:a2:ee:3b:f8:ca:c6:53:18:11:d0:
                    2c:f0:e3:fd:23:99:90:7d:66:85:52:cc:56:e4:44:
                    e5:e7:6e:12:ee:3c:87:ea:0e:67:d3:b1:b8:b1:4f:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:5C:58:7A:05:4D:A5:5E:38:2C:1B:CC:29:64:A3:32:40:1F:06
            X509v3 Authority Key Identifier:
                keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:40:ca:19:ef:2a:c3:fd:68:01:ed:c9:44:8f:7d:17:6a:
         30:1f:87:7a:e0:b4:41:9a:bd:c1:90:20:8a:fd:7a:84:1a:98:
         fd:5e:5e:a7:38:55:8b:58:dd:b7:78:58:8a:13:dc:5a:44:2c:
         61:aa:60:90:f3:2f:11:ca:71:d9:0a:f2:75:08:6c:ce:85:06:
         1b:cb:c3:fe:a8:ae:d1:a9:58:bd:2f:5f:24:8e:4b:4a:3b:da:
         f2:97:e2:c3:51:17:66:ee:8c:88:09:09:f6:f7:9f:80:db:d6:
         f7:6f:71:d9:74:fa:64:bd:8b:f9:bc:bd:1d:a4:e0:c8:61:25:
         7d:14:6a:5a:5c:13:62:c1:a3:9c:a7:51:40:6c:57:19:7e:50:
         62:57:91:a4:49:c9:ba:29:c7:7e:b5:31:5c:5f:1b:37:24:b0:
         fc:1d:36:a4:96:a0:24:f7:d1:c0:78:f1:18:78:47:c8:5f:a1:
         d2:ab:24:77:4e:28:40:83:29:30:26:7b:43:6c:6c:dc:02:26:
         95:55:59:19:63:81:40:65:06:8e:c3:6b:1d:a0:2e:1c:4e:f9:
         12:99:00:ee:3a:bb:9a:31:09:63:c3:01:7b:12:32:b3:a0:7e:
         c8:ab:06:6d:b2:a7:d1:17:8f:af:9d:25:83:59:54:6d:e0:c4:
         ec:b9:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:45 2025 by rpki-client