Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File:                     ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier:          EFfSqFUa0iH0oQlCKAnIhYLcrpY5peV0AVH6S2k4wgs=
Subject key identifier:   E6:D9:BE:BA:DC:D3:B6:C0:3B:F8:0A:53:1B:13:8E:F3:3A:16:24:46
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer:       /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial:       01967A57646624952E4A9526D51FFA095305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number:          0831
Signing time:             Mon 28 Apr 2025 03:01:09 +0000
Manifest this update:     Mon 28 Apr 2025 03:01:09 +0000
Manifest next update:     Tue 29 Apr 2025 03:01:09 +0000
Files and hashes:         1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: kFsZ6ROAUObwPgHB4v6AP+pn0aR8uAL4vl+yF6fQMVA=)
                          2: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (hash: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=)
                          3: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (hash: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:57:64:66:24:95:2e:4a:95:26:d5:1f:fa:09:53:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
        Validity
            Not Before: Apr 28 03:01:09 2025 GMT
            Not After : Apr 29 03:01:09 2025 GMT
        Subject: CN=e6d9bebadcd3b6c03bf80a531b138ef33a162446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f7:53:79:2a:01:e1:c4:0a:22:2c:04:1f:f5:
                    4c:3a:df:fa:aa:f5:e5:b1:94:80:cc:23:53:3d:eb:
                    61:d6:af:a5:81:77:71:ec:03:33:c7:a2:5a:00:4a:
                    d4:dc:04:50:82:f7:eb:00:b2:84:ac:b5:60:d0:4b:
                    6c:92:c2:d4:4f:24:a9:0a:6b:ce:21:d6:4a:2f:ee:
                    7c:8d:ad:dc:16:c4:42:ef:ef:2e:b2:4c:80:63:28:
                    31:0a:bf:7b:35:d4:aa:ae:43:30:0f:c8:8d:c8:88:
                    bd:a5:1c:8e:14:a2:21:3a:e3:9c:a9:d7:56:1c:0f:
                    88:d7:90:5c:27:8c:f6:53:3d:98:59:26:7e:c6:cf:
                    4d:e2:5a:c5:ff:c4:5a:8c:7a:58:7d:6f:d2:17:dc:
                    db:8f:04:2c:2d:8c:d4:3e:80:a2:15:f1:97:1b:91:
                    b4:ee:bb:0a:86:c7:fd:d1:57:ab:ae:74:58:53:ac:
                    c4:2e:c0:59:f2:00:ef:10:62:eb:ce:f2:e2:d4:b1:
                    53:01:b3:d9:84:16:b7:a1:29:e5:48:95:62:bb:85:
                    96:a7:df:fe:05:8b:d7:88:89:fc:90:4d:4b:bf:98:
                    1e:e3:60:42:78:e1:44:64:7e:ec:37:d1:7d:a7:7c:
                    cc:c8:c5:e4:12:65:cb:d5:a4:d5:22:17:e3:d6:2b:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D9:BE:BA:DC:D3:B6:C0:3B:F8:0A:53:1B:13:8E:F3:3A:16:24:46
            X509v3 Authority Key Identifier:
                keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:74:56:d6:8c:12:d9:73:91:3f:ac:fb:81:6f:ee:8a:ab:
         dc:e1:91:3b:ee:98:d5:88:a1:e7:d8:03:65:70:a3:35:3b:78:
         fc:3f:cd:da:e4:9f:10:52:b3:67:7d:49:04:02:0a:dd:d0:ff:
         df:d0:9d:6f:dd:d7:89:3b:f2:98:19:74:a5:a3:77:1e:9d:05:
         b6:5f:a7:7b:bc:b8:d0:94:05:e2:2e:64:35:62:cc:46:56:36:
         cd:24:03:57:73:b8:9c:96:f9:73:29:ce:3d:36:ad:59:a7:a7:
         0a:24:81:6b:bd:92:f0:0c:33:a2:68:47:e4:22:a2:8b:a3:a5:
         3d:5d:ef:81:29:cf:c6:e9:b4:3a:f4:31:f5:c3:52:2d:8d:57:
         4a:c0:84:bd:0a:d0:7f:4a:39:22:f8:07:d6:e0:58:a4:66:f1:
         4f:8e:93:f3:b1:0b:1a:8f:bd:74:c8:cb:e1:1c:fc:55:12:fe:
         6b:79:81:51:54:aa:56:f4:7c:e7:cc:a8:20:fe:73:f2:67:c1:
         f3:4f:83:2f:b1:42:e6:32:9e:a0:23:b4:09:4d:6d:3b:38:1d:
         5e:a6:33:2f:3a:34:7f:a9:ec:15:38:9d:bf:b5:ee:fe:2e:b7:
         82:94:9f:ca:fd:6d:4e:6d:e6:94:15:7c:3d:73:e1:99:95:da:
         1b:15:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:51 2025 by rpki-client