Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File:                     advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier:          nh+nKXhUC0i9kZAajj5ONeU04JEmFGhF1p3tFcwax6A=
Subject key identifier:   04:27:46:2F:E0:A8:03:F7:27:06:E0:DB:42:F8:8F:C4:05:91:5F:FE
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer:       /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial:       019671F87E4DDFA114DD635AF8A59B9AB364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number:          02A4
Signing time:             Sat 26 Apr 2025 12:00:32 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:32 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:32 +0000
Files and hashes:         1: 0PY44eNhRhwBAlEI8CW_7e75Yh4.roa (hash: DGCK7O0NcOT707/3o5K5VhDn6NVZN3M0FrdHm/a2UuU=)
                          2: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=)
                          3: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=)
                          4: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=)
                          5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=)
                          6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=)
                          7: GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa (hash: p6a7klkfw04BCewW69YXx9rhT4r3ImOgOYr/lCdS37U=)
                          8: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=)
                          9: Phfb_gnhQv7aqXoov8JmsWGw0EY.roa (hash: U1Pxa1/MZcW8goQMz7uquhFJGWgsb2RIb59/F1UwU4s=)
                          10: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=)
                          11: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=)
                          12: SZniDvbA3xGyko4uBw0wSK1iTzI.roa (hash: kzzWmCXEeVZh12Lzyl4Un0cqdmZrru/ISSndxfTEtCc=)
                          13: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=)
                          14: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: b9kOuyrGxtCf3kTj/Tlao9hjtg8Uv1iJ70IXKCXTdcs=)
                          15: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=)
                          16: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=)
                          17: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=)
                          18: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=)
                          19: qtSFhSVXD3loe4iYCp27H6WqPO8.roa (hash: dM5n2vL+0Slh2GrDt9ahN7jhYGcuB7d0O5MXI/IkDvE=)
                          20: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=)
                          21: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:7e:4d:df:a1:14:dd:63:5a:f8:a5:9b:9a:b3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
        Validity
            Not Before: Apr 26 12:00:32 2025 GMT
            Not After : Apr 27 12:00:32 2025 GMT
        Subject: CN=0427462fe0a803f72706e0db42f88fc405915ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:6e:f4:a2:67:24:3e:a7:c4:bc:80:50:d8:
                    ac:af:da:db:43:c7:8f:6b:4d:4a:94:22:da:7b:d0:
                    15:14:23:95:52:8e:04:1c:18:66:a5:60:cd:44:5d:
                    c6:6a:64:26:16:b0:6a:5b:98:de:50:73:00:57:d8:
                    84:74:16:f4:d9:52:90:a0:10:67:d4:24:31:4c:c0:
                    ee:78:9e:4c:12:ef:93:f6:8f:15:49:fa:d8:45:b4:
                    2e:dd:c0:44:e4:ef:71:28:3b:ed:8b:29:51:0f:1c:
                    e9:8c:b0:d6:8c:22:3b:70:b9:70:31:c6:82:e9:e0:
                    f7:48:73:74:60:75:7f:7f:19:f4:63:cd:cf:57:6a:
                    3d:2c:70:ec:3f:88:01:35:af:c6:45:d7:99:bf:5d:
                    34:05:2f:ab:0e:e5:3c:9e:80:b4:eb:36:d0:ec:48:
                    45:29:a8:68:47:e0:ff:94:37:99:40:b6:c0:7e:1b:
                    99:26:91:1c:71:8c:7f:07:22:d8:1d:81:af:47:a8:
                    d9:d3:b7:20:20:f8:6f:71:11:89:40:89:94:ee:57:
                    ec:70:2e:7e:fe:1a:17:aa:69:fb:30:40:e3:ce:5b:
                    f8:5a:4c:e0:2d:d8:04:ec:73:bf:ec:7a:14:77:7f:
                    4f:ce:15:39:a9:b3:27:6d:08:11:2c:f2:16:ac:10:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:27:46:2F:E0:A8:03:F7:27:06:E0:DB:42:F8:8F:C4:05:91:5F:FE
            X509v3 Authority Key Identifier:
                keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:52:5d:bf:6c:ec:11:21:98:b5:6b:f6:c1:f2:40:d9:92:
         3e:a0:e6:68:81:5f:bb:b2:a1:72:24:65:5b:ec:d0:f4:d4:84:
         c1:26:3b:a0:53:5a:2a:07:ea:06:b0:94:6c:a4:15:8e:4e:eb:
         13:a6:ef:b7:52:86:06:74:fb:fd:2f:82:cf:e7:88:23:fc:33:
         c5:0e:b5:98:6b:17:39:08:8a:54:4a:c4:d3:ee:09:ae:e7:31:
         f9:17:f6:98:d7:fb:53:5e:23:24:38:c3:e0:fd:fb:59:02:d9:
         98:27:d9:fe:c3:b9:e2:e5:b2:aa:1e:81:9e:77:84:ec:12:83:
         d9:3a:ea:20:89:0e:70:3d:d8:71:ed:86:d4:2e:dd:a7:8b:30:
         fa:f6:a9:4c:a7:69:0f:a5:24:09:c4:cd:b7:fa:f6:26:48:4a:
         2a:67:b1:8b:a7:03:6a:dd:8e:d9:30:2d:67:81:a8:ad:5e:06:
         d5:7f:34:90:d1:7c:14:12:c3:92:7b:4f:51:9d:8f:88:16:2c:
         e0:c9:5e:57:10:db:de:38:93:cf:51:3f:79:b9:1d:10:bc:23:
         d2:27:82:08:dd:ec:ff:80:e6:4f:34:c5:2a:a2:c5:46:22:0d:
         9a:a4:d0:2b:40:8c:1c:3a:e2:a4:fb:e0:6a:28:29:8c:af:76:
         2d:2f:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:14:03 2025 by rpki-client