Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          LvHv39Q6CEKUYBhrc/HIkR+3HxgQHFVGp9ulY37xihY=
Subject key identifier:   3B:EB:63:96:6E:AC:97:33:A0:98:C1:F1:47:77:1C:84:F0:89:47:97
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019675306CDADFA9C4AF5F31720418FD8342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          08D8
Signing time:             Sun 27 Apr 2025 03:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:29 +0000
Files and hashes:         1: L7vo6n9BgY3fZANo6epe7vbZHts.roa (hash: Gmx0MV98HD7oOh/xtyqe1DV4s1De/YW1VHipqzOKk8c=)
                          2: Yb9tsCfpQgyQVhV8fqh-Sp_yitA.roa (hash: 2hs56XjZJhM4FFxn6rpMfJzmdBVo5/6HusR5cW2LXtA=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: DQYxim9VLQ0sYBhQI2XR6U8xFfxit8KWBod+jAv6dCA=)
                          4: fVp3g-s19I4wph98MiqmHy9dJ8Q.roa (hash: 1ttOZ6t4S7bYciANzsJmcpLu3G2yq0AKNa7bw1gtrgY=)
                          5: shu5QB5GjPMBcKGZl2o9EhVlwLE.roa (hash: l2v228GgEP09+0vIbdur06C/ah0an7DTOFEqlZLFixU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:6c:da:df:a9:c4:af:5f:31:72:04:18:fd:83:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Apr 27 03:00:29 2025 GMT
            Not After : Apr 28 03:00:29 2025 GMT
        Subject: CN=3beb63966eac9733a098c1f147771c84f0894797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:a9:42:c0:52:ad:10:3e:0b:b5:c4:1d:12:
                    83:e0:0f:e6:75:e0:f7:18:90:46:da:ce:46:a8:7e:
                    53:50:4b:03:8c:73:b2:c2:0d:18:90:d1:5d:fa:93:
                    3f:3a:2c:86:4d:6e:fc:e6:f3:0f:7c:4e:c7:73:89:
                    e7:47:1c:a8:51:ff:eb:fd:c5:d5:40:ef:3d:4b:25:
                    27:f0:78:8b:6a:74:29:57:54:d1:ec:b6:d4:74:0e:
                    08:ef:b7:b9:6f:25:b0:25:3b:a5:07:e6:1b:21:7f:
                    f5:79:ca:b6:51:19:da:09:bd:72:c8:b4:eb:f5:57:
                    b4:25:f8:63:98:06:68:73:e5:cc:61:c8:e1:3c:b9:
                    9f:1b:ca:d5:6b:d2:7f:37:3e:b2:7b:b7:81:5c:e7:
                    9d:88:0e:5b:05:77:d9:9f:cc:f9:4a:4d:d1:bb:da:
                    4e:11:51:34:57:ec:ae:15:c1:16:70:4a:78:dd:18:
                    af:72:8d:28:11:c2:52:ef:92:b9:96:74:1a:42:59:
                    9b:a9:47:ee:73:1f:dd:52:22:5c:a5:90:75:03:1a:
                    dd:66:f2:54:a7:51:6e:68:75:9d:ce:9a:56:40:05:
                    1d:90:b2:a0:02:2e:bd:bc:5a:6e:20:6b:c7:95:28:
                    d7:28:30:41:05:6c:2b:47:68:5f:19:e4:59:17:63:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EB:63:96:6E:AC:97:33:A0:98:C1:F1:47:77:1C:84:F0:89:47:97
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ed:4d:58:d7:00:c3:97:f5:f8:ff:62:2f:40:ad:64:b9:ef:
         5d:df:97:ec:d6:6a:0b:41:8d:f7:5e:ec:93:a8:d1:52:15:00:
         b0:57:06:5e:b1:d8:01:3a:11:ca:20:4f:05:ca:56:54:3f:97:
         85:16:0d:84:b3:86:0c:b6:a7:f2:aa:5c:be:94:39:de:d5:f8:
         3b:51:76:c0:96:e5:1a:90:7a:a5:b3:7a:fd:7b:e7:aa:cf:5a:
         9e:79:17:43:e8:27:f6:7a:15:5e:56:dc:b6:4c:31:36:40:f0:
         77:7f:ba:1c:1e:ba:e1:d2:32:46:b9:ef:9a:a8:57:e1:20:cd:
         79:d0:3c:9f:44:65:66:d7:39:e3:0e:44:b5:1c:9e:9b:c9:ec:
         54:c6:f2:00:bd:09:31:08:d0:0e:e5:5a:a2:2b:67:6d:a2:c4:
         b1:43:00:c4:a4:9d:b9:9b:35:83:c3:9f:79:66:10:bc:b0:0f:
         00:b6:ec:f2:ec:5e:b4:d8:b3:07:ca:06:4f:63:8c:fd:b1:31:
         40:c4:d2:87:81:f3:aa:5a:1f:c5:ff:0d:15:2d:73:a9:c7:bc:
         1d:cb:5b:f6:ac:68:3c:a1:50:42:a5:3f:f1:21:b2:0c:ec:7c:
         5c:45:9f:7e:69:8f:86:da:0f:82:86:dd:98:1c:ff:19:ef:4f:
         8b:cb:52:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:59 2025 by rpki-client