Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File:                     x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier:          yheYCmlRefzYfMOZcWXhJwWwQ269svZ0LZ7inlEisRc=
Subject key identifier:   D4:20:51:78:18:79:16:34:98:FD:53:73:EB:E7:5D:6C:4D:D1:E7:CC
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer:       /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial:       019678D6BCF4D09BB6B713B058FB5040D42B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number:          07ED
Signing time:             Sun 27 Apr 2025 20:01:00 +0000
Manifest this update:     Sun 27 Apr 2025 20:01:00 +0000
Manifest next update:     Mon 28 Apr 2025 20:01:00 +0000
Files and hashes:         1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
                          2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: nSTfscUsvONCmE3uBf2KhHJ1SIEogu30SQ/c+8pZMgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:bc:f4:d0:9b:b6:b7:13:b0:58:fb:50:40:d4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
        Validity
            Not Before: Apr 27 20:01:00 2025 GMT
            Not After : Apr 28 20:01:00 2025 GMT
        Subject: CN=d42051781879163498fd5373ebe75d6c4dd1e7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:f2:ba:33:74:5b:e9:e0:43:6a:a6:07:13:
                    83:8e:b2:3d:c3:f3:6b:b3:89:5c:c5:e3:c4:1e:5c:
                    d9:d4:01:62:d5:71:f1:49:b3:85:e5:97:46:bd:fc:
                    78:62:7c:68:c7:bf:fc:11:b6:6a:10:89:4a:05:36:
                    e6:bd:7d:d3:81:78:19:4b:ed:e5:fd:ae:ae:c7:42:
                    8a:ee:0a:49:a0:2c:9e:e0:e9:5e:7f:73:b9:bb:88:
                    9a:81:7c:ad:3c:74:48:1d:67:c2:ec:16:71:9f:76:
                    75:b9:e1:a9:54:a5:1a:79:fb:41:7b:19:f8:02:27:
                    b0:0f:52:7a:86:57:e1:c2:68:0d:7d:4b:45:f7:8b:
                    4f:8a:8a:6c:7d:1b:2b:2f:fa:7f:3f:76:f9:a2:1e:
                    5e:9c:84:67:cd:5c:e2:75:d8:13:ed:56:b3:e8:93:
                    fa:75:a9:64:b8:3f:69:e4:44:a8:e3:20:49:cf:7e:
                    2d:26:35:d4:9e:8b:ab:98:f7:0b:2d:30:8c:27:81:
                    fb:a0:5c:57:5f:17:bf:24:48:c6:1d:44:8a:dd:2c:
                    83:38:82:ac:ba:8b:88:b9:fb:bc:76:ba:55:85:59:
                    fd:9c:55:d9:4b:c5:ec:3b:fc:c1:a6:dc:9d:d3:9c:
                    c0:a7:4f:59:d7:0f:f4:23:7c:e5:9e:63:0a:f0:4f:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:20:51:78:18:79:16:34:98:FD:53:73:EB:E7:5D:6C:4D:D1:E7:CC
            X509v3 Authority Key Identifier:
                keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:e8:ab:c5:3a:b9:b7:49:a7:1b:b4:84:30:be:22:7d:9e:
         a5:fe:eb:c9:47:dd:79:c1:59:38:f4:ec:2d:d7:ce:75:dc:6b:
         8a:eb:fb:e5:db:63:b8:4b:bf:bf:a2:a3:8d:28:c0:8d:67:21:
         cf:a2:00:04:35:1a:4d:07:f3:e6:db:62:d5:3b:ab:e2:ef:8a:
         84:84:51:f4:db:de:f3:9a:b3:6c:9b:d0:56:89:df:fb:5b:be:
         ad:4a:63:0f:3e:64:ba:69:88:e0:e1:ac:15:42:5f:60:96:2d:
         d0:0b:c2:90:f9:bc:7d:0d:6e:bf:95:51:16:d4:0a:41:93:d0:
         08:56:f0:07:3a:e6:35:f0:42:7f:ee:16:37:22:a7:a2:d2:d9:
         1f:be:56:f3:65:96:d3:6f:3b:79:6f:dc:8f:16:1e:b4:23:79:
         89:6d:ff:cc:0e:0d:d7:9d:f3:42:66:5b:73:cd:07:2a:1d:ea:
         74:72:b0:f5:b1:ab:74:ca:25:bc:be:2b:9e:ef:4f:fc:93:ef:
         69:94:82:8f:29:24:bc:e7:84:68:88:64:d4:1e:4d:0f:d4:ba:
         08:55:f5:3c:63:63:e9:e7:1b:1e:bf:dc:38:b2:3c:88:88:e4:
         3e:79:11:a6:50:46:cb:78:b8:c9:8e:67:cc:5c:d5:05:8d:aa:
         0c:00:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:18:09 2025 by rpki-client