Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          GA0Ahny6iU2exygcgJJ253Z7pufCgDizjf1renBF4eg=
Subject key identifier:   AE:9B:BE:56:D5:6D:C7:B6:08:6A:CB:30:5E:E4:68:CF:A7:0B:FC:96
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       019673E6C47092531AD65FC37DDD05CF04B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          1131
Signing time:             Sat 26 Apr 2025 21:00:25 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:25 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:25 +0000
Files and hashes:         1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: HS/X/RxjZN48mv5NJ6JoJ34R66E9X1ug5VBh7z/1RF0=)
                          3: 9F7dZYjOPi3rs5NLZXUfov8PBWU.roa (hash: j/9WP0wPl17yaC72aPiHSbkKMZUDz6oycbmdGLPUu6A=)
                          4: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
                          5: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
                          6: jt3uxkc0nzbTvWbsX7a361YE_o0.roa (hash: DdTJIeWIH2giv5XExuVH/S2lYFHAruTpFnXLNoUPjwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:c4:70:92:53:1a:d6:5f:c3:7d:dd:05:cf:04:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Apr 26 21:00:25 2025 GMT
            Not After : Apr 27 21:00:25 2025 GMT
        Subject: CN=ae9bbe56d56dc7b6086acb305ee468cfa70bfc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:b3:99:ea:92:06:ab:05:19:07:60:a1:d1:
                    4d:69:5f:54:97:90:c0:53:f8:20:33:66:82:3a:b2:
                    e3:43:01:a2:b2:3b:fa:52:c6:25:74:ed:7c:5b:8c:
                    25:ea:8e:eb:20:d2:73:ab:c1:8e:a3:2f:aa:e8:a6:
                    fc:2b:08:41:cd:f1:f1:f5:04:59:da:7e:92:83:08:
                    d2:5f:7f:a2:b2:63:63:5a:db:5f:d3:ff:c5:26:1e:
                    96:56:44:ce:7c:b4:d6:89:56:e3:bf:52:e2:58:fd:
                    f1:0e:ec:af:d2:b4:4a:55:fc:ab:e6:ff:f8:13:39:
                    12:6e:1a:3e:f9:c3:0a:3c:18:35:be:9e:d8:11:4b:
                    ee:b2:f4:f4:7f:ce:34:80:7d:65:e9:2b:af:3f:74:
                    53:57:fc:7a:05:cd:be:d0:6d:5a:d2:b7:da:9b:52:
                    d3:6b:4b:80:51:6d:a0:7c:82:2e:76:49:9c:c1:a0:
                    7b:df:40:a3:76:b7:f1:f7:1b:7b:36:93:f0:74:fc:
                    0d:e4:5e:69:0b:a7:9a:7e:6c:6e:7f:c7:81:bc:89:
                    55:fe:15:00:30:06:ea:f6:42:f1:bb:15:c8:7a:b3:
                    cb:a8:18:98:b8:d4:4a:96:00:84:0e:27:92:94:ed:
                    e5:25:bf:44:13:98:14:61:28:90:e4:ea:d1:eb:1f:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9B:BE:56:D5:6D:C7:B6:08:6A:CB:30:5E:E4:68:CF:A7:0B:FC:96
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:d3:ae:ac:e1:31:37:e3:ec:e3:0f:e0:ae:b5:85:9a:cb:
         ef:48:3e:3a:a0:34:ec:8a:f1:f9:c4:55:e4:0f:ca:2a:e5:81:
         0e:52:d1:9d:9d:0d:2b:06:f2:cd:ad:f3:10:61:97:00:b8:ad:
         f1:29:18:56:1d:65:db:7e:9c:47:29:4f:8e:d5:1e:c4:b1:52:
         5b:9a:1a:a3:75:28:09:19:05:71:d8:55:b5:76:6f:36:da:99:
         78:9f:be:5d:43:c5:3e:6c:c4:a8:8b:2c:e1:38:b6:28:a9:b6:
         fa:87:b3:81:9e:bd:bb:cd:3a:72:93:6c:df:a4:db:fb:cf:05:
         14:2d:4d:2e:c0:81:84:7d:c6:94:93:6e:c7:b9:e0:82:f6:2d:
         e2:ec:f0:3a:5d:48:c3:45:96:4a:1f:b5:1e:b4:fa:03:79:4c:
         d6:75:74:09:08:c3:57:2b:4f:ad:74:d4:34:96:ba:69:0d:52:
         5a:fa:ff:89:00:68:6d:b2:28:60:0f:27:27:d9:7c:e6:17:dd:
         c2:5d:54:94:6b:3b:79:b1:5f:7e:fe:75:ea:a0:56:50:85:21:
         31:18:27:3a:da:42:c7:5b:7b:cd:a0:d1:ae:a5:43:d9:6b:e3:
         a1:40:a8:e5:fd:c6:e0:d3:40:98:6d:b4:75:f8:25:42:83:22:
         4b:ad:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:51 2025 by rpki-client