Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File:                     d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier:          7ZdcaujOqDKP/d47cE9KxHAJDcjNJMuUl+RECNSPAVk=
Subject key identifier:   A5:BD:60:80:FF:1F:58:B4:AA:CE:CF:DC:27:FA:69:8A:7F:9D:84:5A
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       019673792835BDA4C7BAEE9D7B9DBB297FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number:          0CE6
Signing time:             Sat 26 Apr 2025 19:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:42 +0000
Files and hashes:         1: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
                          2: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
                          3: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
                          4: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
                          5: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
                          6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: Vpd4MayLpnHyRVEYDLheVFSQ6DJFtdMRys1Qsz2q88o=)
                          7: e9K3ROTtQGAIvma-lxNEnMwJC2A.roa (hash: FZXtwNH18f+yarE1SlyyM2bCUezbZToQsOy/EnG3HSs=)
                          8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
                          9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:28:35:bd:a4:c7:ba:ee:9d:7b:9d:bb:29:7f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: Apr 26 19:00:42 2025 GMT
            Not After : Apr 27 19:00:42 2025 GMT
        Subject: CN=a5bd6080ff1f58b4aacecfdc27fa698a7f9d845a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:09:9a:9e:53:95:8e:a4:67:f0:38:40:55:
                    e9:2b:2e:d1:e9:05:34:c8:d3:2c:d9:13:92:4a:f1:
                    c4:3b:ba:6a:ef:ec:4e:c9:7e:fb:9c:90:d7:4f:ba:
                    f8:95:1d:fd:19:5b:6f:d5:8d:2b:db:3b:78:53:06:
                    45:b9:92:0a:c0:aa:03:a9:c1:3b:1a:dd:e9:d5:8c:
                    51:ce:4d:ba:dd:e0:93:9b:38:a6:66:f9:9c:75:25:
                    43:6a:f9:ad:70:41:ab:6d:a3:e1:e7:62:b9:dc:dd:
                    d0:37:77:96:ae:4a:e3:8b:34:2d:99:3b:97:5b:59:
                    b0:14:2a:ef:47:d9:2d:a4:35:01:d1:ad:6d:2e:e6:
                    cf:cb:2f:57:0d:26:50:e9:19:0a:04:f6:6f:1e:00:
                    a1:33:90:3c:30:b7:83:38:f0:db:2f:e6:34:57:79:
                    c3:a0:d7:36:77:2e:26:b1:09:11:a6:2a:5c:a3:3a:
                    b9:41:f2:54:ba:f7:23:41:d5:2f:2f:9a:65:1c:77:
                    20:7d:ef:50:fc:8a:09:32:76:75:82:32:95:29:5a:
                    3d:92:7b:30:8b:66:e0:5f:c9:b3:ec:d2:92:e0:42:
                    1e:c2:fb:da:12:ed:ca:29:2c:c9:00:25:9e:f0:54:
                    10:06:f1:b0:95:cf:84:60:24:b1:0b:6a:71:bc:e4:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BD:60:80:FF:1F:58:B4:AA:CE:CF:DC:27:FA:69:8A:7F:9D:84:5A
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e6:49:04:e5:94:fc:cf:a5:43:92:0a:e9:63:34:f5:b7:2e:
         11:b2:eb:be:a4:cd:2c:26:14:68:dc:af:53:61:74:36:13:6c:
         73:3d:8e:9b:5a:3d:cb:88:84:69:96:a2:bd:af:12:43:8f:df:
         c0:79:f7:d8:36:02:99:33:13:11:52:c0:14:a0:85:e6:ca:d1:
         bb:3c:44:d3:e2:62:b2:94:bd:36:2d:6b:0f:d9:79:b7:7b:82:
         23:d9:99:06:63:f3:94:54:cc:76:4d:69:7f:82:39:d2:84:62:
         5e:1f:b1:50:d0:6f:75:84:a1:e0:fd:f5:23:09:11:e7:50:aa:
         51:79:38:9d:24:c3:b9:fa:ad:67:cb:5b:7e:8f:71:13:59:00:
         a9:7a:f7:1e:d4:e1:7a:93:12:ee:b7:6e:ff:ca:b7:16:0b:04:
         5f:de:95:c2:99:8b:4e:89:fd:de:2a:df:85:8a:b7:57:63:ce:
         a1:e3:cd:32:47:c2:7a:8c:02:80:a3:90:e0:ad:76:75:b4:00:
         c8:c3:28:61:47:0e:69:0e:f2:cf:5b:fb:60:ee:cf:0f:7b:dd:
         d4:73:ef:15:9a:93:80:d9:39:a4:3f:2f:31:55:3c:02:e8:09:
         ed:41:19:98:ec:85:df:0d:05:31:3c:07:f8:a5:fd:24:c5:ea:
         b7:a2:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:29 2025 by rpki-client