Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File:                     SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier:          orEA79Fhd+8J+/+kUWB8/Tk07WWxOOcCBCCqTkeGCS0=
Subject key identifier:   A4:19:C2:8D:17:2A:8F:DA:0F:82:39:8F:59:FC:6D:A5:08:A0:B6:7A
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer:       /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial:       0196827E77F36FC0E2CDBC33656258DA6659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number:          1516
Signing time:             Tue 29 Apr 2025 17:00:48 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:48 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:48 +0000
Files and hashes:         1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: sPwZ/J7YLZhgDV4908pCAt/KsoYQtpUnlpU01qw/gH0=)
                          2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
                          3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
                          4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:77:f3:6f:c0:e2:cd:bc:33:65:62:58:da:66:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
        Validity
            Not Before: Apr 29 17:00:48 2025 GMT
            Not After : Apr 30 17:00:48 2025 GMT
        Subject: CN=a419c28d172a8fda0f82398f59fc6da508a0b67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:2e:6d:f9:78:85:a5:bf:05:59:8e:de:2b:
                    33:3a:43:5a:23:f1:28:7d:a2:70:62:b5:95:6b:be:
                    ec:9f:fb:fc:cd:3b:05:c1:34:5f:e6:9b:55:d7:0c:
                    f2:14:ac:83:f1:e0:7c:c6:71:34:74:6f:81:75:e5:
                    d6:56:52:8b:fe:98:95:f7:d8:1b:7c:1e:44:2e:ed:
                    2e:20:fd:48:ab:d8:11:62:7a:e9:fc:20:7e:98:4e:
                    f9:6d:73:c8:b0:de:06:a8:56:03:43:a0:a8:e2:7a:
                    19:9e:69:a4:61:ef:88:8c:ca:dd:d1:6a:2d:28:a5:
                    c8:2d:d1:ef:1c:b1:ba:8b:7a:5d:dd:dc:3a:15:20:
                    a8:47:bb:9c:52:e3:12:16:62:6e:8b:f4:8a:0d:20:
                    fc:ea:7a:c9:8c:fc:e2:bb:87:4c:ff:a8:04:2e:f3:
                    a8:5a:1a:30:61:6f:f9:4a:b0:19:84:00:c1:9c:4b:
                    01:f3:11:ff:1c:68:13:89:c6:ba:62:7e:d9:59:d2:
                    17:82:19:dd:e2:6b:0c:ae:68:53:66:91:73:a8:18:
                    f5:39:25:cd:b3:ae:22:71:57:09:40:52:48:56:5e:
                    9a:51:7d:32:47:ce:99:ed:dc:bd:d9:1f:64:85:a2:
                    38:1c:6a:80:e1:a5:7a:90:3b:7f:dd:2c:35:8a:f6:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:19:C2:8D:17:2A:8F:DA:0F:82:39:8F:59:FC:6D:A5:08:A0:B6:7A
            X509v3 Authority Key Identifier:
                keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0b:37:d3:ee:85:44:47:9f:85:ee:e8:f6:e2:a7:73:1a:69:
         52:6a:19:ac:11:5e:e7:8c:00:90:ce:81:64:0b:03:a7:0e:52:
         82:3e:3a:97:d9:a6:c2:9a:d1:6d:3e:dd:e5:f7:61:7f:aa:38:
         a1:72:0d:bc:c8:56:22:8a:1d:c9:48:1a:f1:1a:42:eb:8a:0f:
         da:6d:0e:b9:e9:93:e4:63:fa:e2:3e:76:79:6a:3e:1c:70:7c:
         b2:a4:09:93:59:0c:ea:86:52:37:9b:02:2e:7f:79:96:b9:d5:
         7d:a7:53:a4:6f:5a:53:34:26:1b:ab:08:08:10:81:d0:e4:23:
         4b:df:f9:4b:7e:87:2b:93:38:9d:af:a9:bd:e7:3f:39:40:7e:
         c8:3d:2a:18:2c:6c:2a:f3:fd:7d:61:1a:e4:8d:3e:14:05:ee:
         2c:5d:31:f0:d7:8e:cb:7d:e9:65:02:7f:ae:1b:b4:65:59:01:
         00:f7:cc:a6:4a:ed:9b:12:2d:38:10:57:18:c8:b6:30:13:7a:
         52:92:62:25:76:a9:17:07:21:9f:e8:fd:4e:a6:e0:0f:d8:58:
         65:1c:9f:b7:c1:06:23:79:36:6b:4e:df:91:81:6d:a1:a3:d6:
         b6:5b:7f:0d:ad:a1:54:be:39:b8:31:7a:d1:22:38:fa:2a:70:
         40:51:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:42:44 2025 by rpki-client