Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          R+ewlg0qJnZzYmBO/HAsJPIjic1AHB7Mkd7elGI2R8M=
Subject key identifier:   B6:F3:3D:BD:CB:F2:6C:1E:77:BB:60:07:D6:A4:4E:AB:AE:96:BC:C0
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       01967FEB0D0A232D829CAA18EFB60BD8A337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          1519
Signing time:             Tue 29 Apr 2025 05:00:32 +0000
Manifest this update:     Tue 29 Apr 2025 05:00:32 +0000
Manifest next update:     Wed 30 Apr 2025 05:00:32 +0000
Files and hashes:         1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
                          2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
                          3: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
                          4: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
                          5: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: Kujht6DRuLhQ4WiT36S1tAX3ZQ4aLVxorcJCtpK3bPY=)
                          6: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:eb:0d:0a:23:2d:82:9c:aa:18:ef:b6:0b:d8:a3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Apr 29 05:00:32 2025 GMT
            Not After : Apr 30 05:00:32 2025 GMT
        Subject: CN=b6f33dbdcbf26c1e77bb6007d6a44eabae96bcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:40:29:2c:64:98:73:77:4e:31:12:d2:17:
                    62:f1:86:19:42:57:ba:43:dc:8b:6e:91:88:8f:5e:
                    b8:67:7c:9d:41:06:8d:52:f5:dd:d1:0d:d7:d4:72:
                    87:b6:aa:e9:c1:48:15:07:2f:6a:dc:c7:3b:5b:21:
                    da:90:59:f9:3b:68:a5:ba:0e:d7:40:15:66:a7:7b:
                    32:d5:8c:71:be:16:c2:30:31:e2:0e:1b:d1:4a:44:
                    c8:ac:83:e4:c7:0f:8a:15:e0:1f:d4:8f:db:df:af:
                    a3:3b:61:30:46:19:d1:8f:d2:1b:27:c4:44:11:b6:
                    63:41:60:33:46:db:60:7b:ab:7d:80:11:e9:c9:b1:
                    d8:3e:eb:cc:53:58:c1:d4:83:69:de:e8:db:71:58:
                    74:51:8c:05:1b:f9:62:e4:d4:b3:f0:ca:33:3e:32:
                    21:44:2d:45:7c:2b:07:9f:19:33:84:a1:54:dc:07:
                    c6:68:c6:23:25:b0:d6:5c:45:f6:81:42:d2:54:83:
                    ec:22:99:e2:8d:8e:2f:2d:91:ed:e1:04:77:21:11:
                    b5:07:41:db:ff:1b:3d:0a:05:68:4a:d1:05:59:01:
                    04:01:8d:69:7c:87:62:8b:d9:8a:fd:35:10:c9:3a:
                    e3:f1:1c:7a:63:25:35:63:29:5b:0f:9f:e7:d5:72:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F3:3D:BD:CB:F2:6C:1E:77:BB:60:07:D6:A4:4E:AB:AE:96:BC:C0
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:58:a3:58:c3:98:09:63:4e:6f:17:5d:66:f3:05:35:db:
         72:49:80:85:6f:82:1a:0a:11:b9:aa:08:a6:be:36:5e:22:02:
         21:3f:2c:0a:a4:c3:db:08:9a:ed:63:ea:26:ef:2a:db:ad:b3:
         6c:ab:11:99:cc:63:88:5e:80:8c:25:6c:cf:ba:55:51:d6:a6:
         58:4d:89:a1:59:8e:4b:80:ef:f0:4a:cf:78:1f:af:9c:33:8b:
         21:28:39:c7:97:cd:73:47:d1:4c:e3:58:3f:05:a4:fe:a8:21:
         22:2f:17:cf:6d:2a:54:3b:70:bb:6f:5a:8c:89:f4:d4:28:62:
         ce:84:d1:17:48:38:c8:c5:0b:80:d8:0f:88:bf:7f:4d:a8:d2:
         6e:04:21:32:27:72:d9:ba:6c:d9:b9:3b:6e:5a:c0:9d:84:f5:
         b9:3e:1b:3b:d5:a2:ec:2c:ee:c8:8f:63:ac:40:33:02:2e:f0:
         a4:cc:a4:98:f8:64:85:16:e0:31:99:96:9d:c6:07:82:77:c7:
         61:20:d2:12:ae:67:69:46:de:a1:70:6e:ca:0b:08:bc:8d:4e:
         8b:28:8a:28:74:3f:45:cd:43:d7:a9:93:af:f7:d8:9a:0c:e4:
         49:02:1b:fc:6d:3c:29:7b:f3:33:0d:b7:a9:d7:6f:0b:a2:41:
         b2:56:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:42:31 2025 by rpki-client