Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          9M/IbLrEJ+1r4d3UBEpqs6f5eO+H7ISkT6zs6yUPsWc=
Subject key identifier:   0D:42:1B:E7:B8:53:37:C2:D3:CF:31:2D:22:9D:62:ED:BC:E8:9B:3E
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       0196734205A4D08DDCDA9C91D452137BC2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          1029
Signing time:             Sat 26 Apr 2025 18:00:28 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:28 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:28 +0000
Files and hashes:         1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
                          2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
                          3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: mJVIDWFvJH98oFVmqms3VH+ukyOS3Zrn0cjmYaUO8Mg=)
                          4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:42:05:a4:d0:8d:dc:da:9c:91:d4:52:13:7b:c2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Apr 26 18:00:28 2025 GMT
            Not After : Apr 27 18:00:28 2025 GMT
        Subject: CN=0d421be7b85337c2d3cf312d229d62edbce89b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:1c:e5:29:8c:5e:c6:18:8f:d2:1e:f2:f0:
                    b2:36:4c:e2:9a:4e:fd:6e:36:1c:23:df:eb:3b:a6:
                    b2:93:a4:ef:57:57:cf:df:38:ef:eb:76:b3:76:d4:
                    b2:d4:78:c0:70:5a:b3:62:c5:12:79:dc:82:ac:df:
                    a5:0a:70:7a:21:80:cd:e3:ba:de:45:68:82:d0:8e:
                    40:f8:c8:e1:f0:86:5a:b9:cf:d5:42:db:b4:40:45:
                    22:5c:3d:7a:84:82:68:2d:eb:8f:08:7f:58:bd:81:
                    5c:5e:19:a6:d5:1f:fb:c8:2c:21:da:f4:42:65:55:
                    be:48:a4:f9:39:13:61:fe:3d:3d:c6:30:64:4d:ca:
                    13:6c:53:72:14:c6:85:dd:c1:e0:17:cd:1f:d7:d6:
                    e8:d5:cb:20:7d:9d:ee:b0:a0:75:79:6e:21:3a:8d:
                    15:fe:42:52:d0:3d:76:a9:a2:c5:5e:2b:0b:3c:54:
                    08:29:6c:4b:89:2e:c1:22:9d:6a:fc:4b:d2:65:e7:
                    98:4a:a3:c4:46:1b:12:dc:1f:7c:22:c3:ef:9b:9f:
                    6d:8a:d3:4d:4a:26:58:2f:22:1d:ba:35:83:db:a7:
                    a0:88:5f:93:d5:12:a3:0e:12:bf:fe:64:8a:6e:bf:
                    b8:f1:0c:13:13:da:b6:9c:ab:3e:a9:af:79:8a:9d:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:42:1B:E7:B8:53:37:C2:D3:CF:31:2D:22:9D:62:ED:BC:E8:9B:3E
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f5:3c:d9:a8:40:24:f0:bc:dd:36:99:31:8f:26:5e:ab:3f:
         17:13:d6:4d:e3:c2:16:d0:58:61:ec:40:60:30:d8:d6:4d:20:
         3e:fa:01:73:cd:87:54:c9:9e:fe:ab:ae:54:8d:32:a6:d1:4d:
         77:68:51:0c:d1:39:30:e0:a0:c4:86:fc:54:4f:f6:ca:45:b5:
         3e:21:de:0b:9f:b7:5e:23:8b:a4:96:8d:1c:66:a7:b0:18:c2:
         ea:1d:a1:16:92:43:b9:1f:0c:ab:73:23:cc:bc:b5:20:3d:f3:
         95:ef:9a:93:16:07:d0:73:27:b7:ff:34:bd:6b:9a:dc:7c:ee:
         ec:40:0b:8c:2c:ad:cf:0e:3e:e4:2a:06:84:c8:d0:8c:cf:8f:
         9f:b0:e3:a2:5b:50:42:c9:fe:58:73:53:dc:04:71:58:87:1e:
         bf:f4:08:8f:98:20:e7:dc:00:57:0a:1c:df:f9:24:15:17:88:
         b5:8a:7a:75:34:7f:37:a5:87:a3:e1:05:a2:b0:0e:d9:03:25:
         a7:5d:17:a2:aa:2a:74:f5:0d:21:6e:3e:65:c6:91:f6:45:24:
         c3:d8:a5:7a:59:26:b3:dd:b2:86:10:8e:2a:cf:49:2c:e8:53:
         d6:35:7f:88:0e:19:6f:75:1c:82:18:c4:c1:dd:3b:69:3d:11:
         f0:cd:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:58 2025 by rpki-client