Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          rhWLfqUEF8OIY7+bjMez+lz84bAGSG6OW1R/RSu6qOg=
Subject key identifier:   53:E1:D3:E5:0E:46:55:77:D5:2E:EA:76:3E:72:78:3E:CC:42:9D:8B
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       0196730B9677A3C1B17345CA6FCACA2DF3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          1510
Signing time:             Sat 26 Apr 2025 17:01:01 +0000
Manifest this update:     Sat 26 Apr 2025 17:01:01 +0000
Manifest next update:     Sun 27 Apr 2025 17:01:01 +0000
Files and hashes:         1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
                          2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
                          3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: QRlx+AqSVg88O+u2PzpNiLy4/DeXbaQZyLjY8hGyot0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:0b:96:77:a3:c1:b1:73:45:ca:6f:ca:ca:2d:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Apr 26 17:01:01 2025 GMT
            Not After : Apr 27 17:01:01 2025 GMT
        Subject: CN=53e1d3e50e465577d52eea763e72783ecc429d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:45:86:e2:db:db:bb:59:70:d3:3b:40:82:
                    6f:67:ce:f6:d4:47:11:03:29:a9:95:3f:70:95:df:
                    cc:1f:95:47:69:6b:fe:74:86:67:34:d3:37:7b:f9:
                    21:b9:d0:b2:16:51:7f:0f:b3:f7:8d:37:c8:40:c3:
                    b2:c0:13:4e:5c:43:fa:4e:b3:a1:07:2e:54:2d:c4:
                    89:27:0d:a4:dc:de:64:92:3a:91:6d:72:cc:ad:45:
                    94:4e:c7:3f:b1:f6:64:80:de:f9:92:65:01:ac:f5:
                    9c:5b:b3:dd:26:ee:4f:af:a2:bd:7d:b7:a0:d8:01:
                    5e:c6:37:b4:fb:39:76:3c:1e:d8:d7:fc:c9:e7:e1:
                    44:f7:3f:ad:89:dd:e7:45:04:46:d7:86:02:52:57:
                    04:37:ce:c6:b7:c1:a0:d7:fd:c5:40:6a:90:d7:dc:
                    93:88:6e:eb:49:d6:b4:e9:46:b4:b7:45:dc:c8:94:
                    b8:4f:92:d1:1e:05:db:2b:a4:e5:96:55:43:33:08:
                    aa:50:65:88:60:ae:82:38:24:94:a3:6c:8c:0b:08:
                    71:4c:38:03:55:d0:45:0e:49:68:54:ec:4a:4e:85:
                    01:0b:ab:54:24:55:78:81:4f:b8:ff:86:7d:20:18:
                    37:6c:fd:1e:79:35:69:17:14:f1:fc:4f:4a:ea:18:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:D3:E5:0E:46:55:77:D5:2E:EA:76:3E:72:78:3E:CC:42:9D:8B
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:b6:6f:ba:96:04:b9:77:6b:ff:27:f8:55:8e:2e:d7:25:
         28:cf:00:cb:12:1f:f0:68:a7:e1:e6:e2:70:c2:5b:18:5b:72:
         c9:d2:d2:23:f5:45:a2:4f:92:08:75:43:35:60:14:f0:ac:74:
         67:2d:d7:bd:1b:77:45:85:5a:06:b2:ef:63:91:8f:84:ab:29:
         5c:8f:7c:53:2c:20:64:50:98:28:6e:0a:8e:a1:90:18:f6:a0:
         c5:b1:89:8f:2b:8b:c6:a8:6e:15:82:d0:69:fa:c1:a0:a4:f4:
         8c:35:fd:5d:0e:c5:6b:db:ad:29:f8:56:2f:02:57:fb:35:f6:
         f2:c7:97:6f:b8:c3:c1:ff:ad:23:88:d2:0f:bc:44:5a:92:85:
         21:9c:f0:28:07:75:47:6b:61:33:77:9e:60:1b:17:8c:6c:7b:
         fa:f5:b7:11:9d:1c:33:7b:3f:6d:22:77:a2:be:2e:9b:b3:00:
         7c:32:08:62:e8:30:af:3b:79:39:d1:89:6b:a8:1b:18:7d:7d:
         eb:56:ef:f3:49:8f:65:7e:14:8f:6b:e0:96:ec:2c:9c:95:fe:
         b0:ca:4f:08:f9:e9:cd:95:2f:fd:5e:69:f2:35:dd:21:75:a3:
         c9:b9:7e:27:a6:0a:90:5d:a6:1d:fd:56:f9:db:74:ad:7e:31:
         66:3d:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:03:33 2025 by rpki-client