Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          9mG4eWYvMuXNhQTFHx+GbU1vyqecZdP1LhwXtXfaB1k=
Subject key identifier:   B9:C4:C9:40:A3:8D:43:DA:6E:CE:F4:01:D7:6A:A0:65:D3:41:2E:1D
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       0196952968218AA31C056D812819DB80C28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          1135
Signing time:             Sat 03 May 2025 08:00:40 +0000
Manifest this update:     Sat 03 May 2025 08:00:40 +0000
Manifest next update:     Sun 04 May 2025 08:00:40 +0000
Files and hashes:         1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
                          2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
                          3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
                          4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: /+5AqCBpVc/0pJP4o33iH73OrHFFJFKwmK/cOG+IfE8=)
                          5: qD6fI4alTG9ugXyMXRWWgJQzBs8.roa (hash: c9Mt3ffCyuUeM6KsYFDSRY2Fev1A0MkGSCIdLfu/44w=)
                          6: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
                          7: xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa (hash: ntcfKusbnH6G9LFWYHB/n9gMG8BQt0xnq4XPHB5frGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:29:68:21:8a:a3:1c:05:6d:81:28:19:db:80:c2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: May  3 08:00:40 2025 GMT
            Not After : May  4 08:00:40 2025 GMT
        Subject: CN=b9c4c940a38d43da6ecef401d76aa065d3412e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:dd:3e:b6:4a:8a:ef:84:fc:e7:5a:b6:be:
                    98:d0:96:77:60:b4:94:f9:55:bd:46:60:66:e3:34:
                    50:9b:06:38:c3:54:3d:fc:3a:fc:c0:d0:e3:ce:88:
                    47:f0:05:74:a8:e8:3d:ea:d7:be:fc:a1:38:41:99:
                    34:f6:59:73:1e:62:96:ec:01:00:4c:28:e5:e1:c7:
                    79:ce:d3:4f:9e:e7:f7:73:45:f7:b3:e5:e5:c9:a3:
                    e5:ec:b4:1d:45:47:cf:8a:e4:40:e9:0a:0b:ad:3e:
                    32:6a:d0:38:b5:00:a2:cc:8a:3e:3b:4b:7b:91:be:
                    e9:16:b5:06:44:00:a5:eb:dc:43:76:b9:45:5c:f8:
                    b9:55:03:93:d3:0c:63:1d:ce:bf:a9:88:5e:6f:e0:
                    ae:1a:57:a5:a2:9c:2e:7e:cb:eb:ff:bb:52:ff:f1:
                    95:58:0e:b8:6d:b9:f4:bc:db:5b:e4:51:f1:ba:c3:
                    a3:60:d8:97:94:25:c1:b3:1e:e1:82:8f:78:91:2a:
                    a2:44:40:20:f6:f8:27:3f:92:ca:94:f1:f3:6e:f4:
                    14:8f:9e:b0:39:3e:37:58:44:9a:25:f9:94:90:4e:
                    35:6f:4e:79:0f:11:89:4c:f3:a7:61:c8:6a:21:84:
                    16:91:85:2b:b9:52:18:54:d0:ac:8f:19:a3:33:f2:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C4:C9:40:A3:8D:43:DA:6E:CE:F4:01:D7:6A:A0:65:D3:41:2E:1D
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:81:92:b9:f5:01:b9:bb:05:a6:95:47:64:da:26:6a:47:93:
         96:47:eb:82:8a:d9:07:3d:68:25:55:b9:10:6f:7e:35:2f:38:
         25:63:b2:e6:78:24:37:4b:d7:ac:17:98:e7:ec:aa:ad:66:c6:
         9e:f3:f7:54:6f:91:05:f5:ab:ec:e4:5c:e5:3c:c1:4c:7b:10:
         27:44:96:a3:c4:04:6c:70:af:6a:bc:80:98:d1:cd:1a:24:c3:
         e6:e8:49:d9:c1:50:df:08:d4:09:17:1e:5e:c4:5b:4e:45:d1:
         2a:41:53:c3:99:f7:55:1c:3f:96:f0:93:3c:1d:68:0a:62:55:
         a0:4d:e5:26:b4:ab:17:d0:ac:dd:13:38:7d:8f:e2:74:36:7d:
         49:6c:2f:01:18:64:89:fb:aa:85:d9:fd:c1:cd:d2:31:20:80:
         94:da:7d:7b:49:a6:f2:19:1b:5a:3c:81:30:ea:74:1c:db:ba:
         b3:b6:d6:6f:3b:fe:c5:31:25:6f:61:cf:f1:31:a9:5d:54:d2:
         cf:a7:08:1a:8c:ad:df:1d:b6:96:76:72:05:80:dd:2a:cc:ca:
         0a:a5:c4:ab:1f:7e:7b:89:bf:4d:b2:3d:01:7d:0d:a2:15:23:
         91:93:78:4c:e3:74:33:27:78:69:b6:15:5a:10:1b:f8:c6:ea:
         12:10:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:43:29 2025 by rpki-client