Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          +0MJIAY8vLr+K7xgi6mudlJUIEcfY2DfZ4b2qOTNsSg=
Subject key identifier:   E3:95:E4:B4:63:01:E1:EA:5C:E2:FF:1A:1E:09:E1:38:FE:31:7C:B5
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       01967C0E4013E980DA1F7CA63D003904254E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0779
Signing time:             Mon 28 Apr 2025 11:00:30 +0000
Manifest this update:     Mon 28 Apr 2025 11:00:30 +0000
Manifest next update:     Tue 29 Apr 2025 11:00:30 +0000
Files and hashes:         1: 1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa (hash: gVkThpG7tc6UKYu6nfIrbCxYB1OnM75XNE9Zf3BxXSE=)
                          2: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=)
                          3: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=)
                          4: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=)
                          5: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=)
                          6: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=)
                          7: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: tUfP0nNJDUwHFz+BHKm/kTMQXysGfaI3SZ2zGPk3Ckk=)
                          8: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:0e:40:13:e9:80:da:1f:7c:a6:3d:00:39:04:25:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Apr 28 11:00:30 2025 GMT
            Not After : Apr 29 11:00:30 2025 GMT
        Subject: CN=e395e4b46301e1ea5ce2ff1a1e09e138fe317cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:e3:0c:4c:3f:ca:43:8a:86:81:60:ff:63:
                    bd:6a:65:74:13:8a:0a:6e:bb:1c:87:28:84:65:2b:
                    f0:4c:72:a7:9c:3c:db:07:6f:ba:47:32:bb:ce:2e:
                    48:53:6a:e5:a3:c7:eb:54:45:c8:78:b9:9b:dd:0a:
                    1e:2b:31:58:18:7d:0c:03:55:3d:b6:04:7f:d4:20:
                    74:26:f2:95:75:31:0f:5c:ae:66:7f:f2:4f:35:20:
                    b3:3e:43:6f:12:85:84:a8:b7:4f:30:76:97:f9:ce:
                    a1:d9:7b:62:a7:82:1f:62:92:3e:ab:26:2e:06:6e:
                    17:53:33:e3:48:e4:60:bb:79:1e:d4:88:18:ce:9f:
                    21:38:d7:2d:56:fd:fa:bf:29:e3:a9:36:11:3e:a7:
                    c3:3f:f3:fc:eb:3e:81:2d:33:45:f7:c7:46:31:ac:
                    a0:77:2e:98:a0:e0:b5:e1:40:7a:c3:c6:ce:ea:2e:
                    a2:23:39:24:65:5c:50:37:92:10:88:a6:5e:31:48:
                    da:2d:fa:67:54:1d:3f:e5:b7:b5:8e:9c:50:b3:00:
                    fa:8e:67:36:e6:0b:0f:77:8f:06:7e:1c:6c:5c:31:
                    15:14:be:dd:17:e5:86:ab:8d:d4:bd:f4:ad:65:fc:
                    46:9f:eb:af:af:f1:16:e3:07:09:e0:d5:d8:4d:2a:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:95:E4:B4:63:01:E1:EA:5C:E2:FF:1A:1E:09:E1:38:FE:31:7C:B5
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:1c:7c:d7:99:51:f0:98:c4:16:72:64:16:7e:84:58:d3:e5:
         3f:65:27:b8:0d:bb:96:67:ac:c0:1d:50:9f:fb:85:79:65:d0:
         84:64:49:2a:c2:c9:2f:ba:1c:35:77:ca:bc:7b:85:34:7c:05:
         9a:66:9e:65:99:90:1c:80:e5:1c:2c:0a:77:fa:f7:45:57:85:
         be:16:9b:8d:23:e5:68:15:53:54:a8:e8:b5:2e:4e:b3:41:12:
         56:cb:ee:57:e3:fe:c4:0e:14:56:2a:78:c8:c5:02:66:ce:59:
         e3:97:ef:c5:10:92:66:8e:79:1f:ca:e0:d4:a6:1c:eb:9a:43:
         b8:0f:23:7f:68:0f:f3:01:fa:a6:c9:f0:42:e6:0c:4f:f9:70:
         1a:37:1c:91:42:ef:bd:28:db:fb:29:55:70:a9:e2:a6:25:e5:
         58:ef:90:90:b9:20:b3:b3:11:ba:f0:65:22:1b:0e:13:0b:eb:
         c0:7f:8e:55:86:b7:5a:af:ef:e6:aa:b7:00:24:f3:84:1a:74:
         b3:73:c4:fc:bb:af:a1:8f:0e:94:30:39:4a:e4:de:53:0b:53:
         8c:f4:f9:b6:db:60:98:ad:7a:74:e3:1d:3c:0d:a3:40:85:28:
         6f:bf:63:48:af:8a:98:57:90:1b:9f:cf:73:3f:61:5f:e2:73:
         00:1b:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:43:07 2025 by rpki-client