Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          ky9Lhc6MJFR82Z3QSER2ZuaEZyAyZufZVjlelBDXp5w=
Subject key identifier:   11:17:83:68:68:A1:E0:2F:EA:56:7C:B4:9F:83:CA:B9:AC:23:5C:6C
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019686FFE432F42C7D9F7F47A18D9975730C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          1524
Signing time:             Wed 30 Apr 2025 14:00:39 +0000
Manifest this update:     Wed 30 Apr 2025 14:00:39 +0000
Manifest next update:     Thu 01 May 2025 14:00:39 +0000
Files and hashes:         1: 2IV1bBm-jP-2jVh24cTBD-F_aCY.roa (hash: LoxyFwAORqX/gMob6dkhVaBmKh5ZSU1hWQKi2nkbQgw=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: 93v2+YC4eccQD+TtOqnBI7gdsdyIQEWeMoMq9e+Zc2E=)
                          3: _kjDn_DDtqJjlLfr15JCrlUsBs4.roa (hash: jybSc3mz+ll60aex4A0Ja+eXAtAJqeCFAGm8sC/emcE=)
                          4: hJ65MMDojFDsHhCTcDOo1v7Rf3A.roa (hash: dQwJBW4cKzk1hx9pc72XUta4ephdfERO34h+ezvshhM=)
                          5: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:ff:e4:32:f4:2c:7d:9f:7f:47:a1:8d:99:75:73:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Apr 30 14:00:39 2025 GMT
            Not After : May  1 14:00:39 2025 GMT
        Subject: CN=1117836868a1e02fea567cb49f83cab9ac235c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8f:65:2d:0b:41:bb:50:69:aa:b1:b4:22:ca:
                    de:4b:49:64:e9:a3:af:30:5f:f4:90:70:2d:50:6b:
                    b8:b7:bd:f6:17:30:78:58:45:98:aa:56:8c:73:c4:
                    65:8f:c4:72:1c:48:da:62:9e:85:42:8e:69:63:c9:
                    d0:23:57:16:aa:eb:2b:66:a9:52:16:57:d0:94:1c:
                    93:36:67:c5:35:7b:e1:40:0c:92:b1:f8:62:1b:ad:
                    59:9e:7d:da:62:47:d9:e0:e4:c0:81:f2:a0:f7:d4:
                    18:e6:20:4b:bd:08:a5:8d:a5:a9:5b:75:dc:b4:20:
                    1d:e8:b8:ec:d4:eb:9e:c6:2a:a4:5b:3e:bb:f0:65:
                    fa:07:a9:2d:22:a4:c5:db:41:e9:33:62:97:fd:5d:
                    4e:e6:f1:8c:f0:a8:3a:94:3d:4b:07:54:65:16:9e:
                    cb:14:d3:15:0f:83:82:4e:16:1e:fc:f7:a8:b4:da:
                    63:fd:cb:a4:f4:46:2c:05:c6:77:37:1e:24:e6:04:
                    3f:04:85:4a:c5:f2:b8:b4:c8:00:eb:31:af:70:be:
                    39:6d:17:3e:9e:ca:dc:2f:2d:c2:e6:91:ba:06:96:
                    ff:d8:82:8d:31:00:dc:67:36:14:2b:3c:b2:a2:8b:
                    1a:54:db:d3:55:d9:f4:ad:88:99:ce:28:92:74:0d:
                    94:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:83:68:68:A1:E0:2F:EA:56:7C:B4:9F:83:CA:B9:AC:23:5C:6C
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:ac:f9:43:c3:4b:5b:b7:55:c0:a1:80:ad:27:0f:7c:30:
         48:b5:eb:d8:d0:29:ea:84:48:cc:b6:59:ae:2b:d4:18:10:17:
         bf:5e:d4:4d:2c:ae:56:ff:f9:19:13:e2:5d:48:17:69:a6:8a:
         8d:ae:b3:2f:38:57:c7:75:6a:4b:c6:dc:00:67:9b:7d:39:02:
         87:e6:e9:43:b7:fe:65:46:1e:64:47:e4:c7:97:7e:2d:64:25:
         88:e4:65:6e:f5:86:bc:c8:56:33:20:cb:85:d6:b2:af:1a:94:
         04:e6:76:a1:c2:60:b8:85:82:64:54:b6:25:92:ca:bb:97:01:
         d5:16:ad:e7:93:e1:6d:8e:2a:4d:b2:55:3c:b6:40:90:3b:b6:
         f4:be:07:7d:a3:eb:ce:07:a5:75:8b:4b:26:a1:77:aa:40:40:
         fc:3b:d6:94:b1:d8:d9:ad:a7:c3:0f:e3:ce:1d:20:79:2a:13:
         26:2b:85:60:28:90:e2:08:55:35:d3:c3:d0:81:04:67:81:b9:
         73:c7:9f:79:71:bc:be:10:28:b0:b5:ef:35:54:b4:92:b2:8d:
         7f:29:6d:f9:9d:28:e4:55:e5:6f:e8:db:1f:2d:e0:e7:6e:3c:
         1b:42:10:a2:c5:c7:7b:14:f3:3f:f3:a2:be:fc:b8:cd:a7:f7:
         b2:28:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:01:15 2025 by rpki-client