Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          HbEVom76OgeM4njCZX9qxyn6DvA+tgbin+cLYKGV4Ao=
Subject key identifier:   A0:FB:0C:9D:AD:10:9C:D0:CB:DC:11:B3:3A:5C:50:13:2B:B2:FC:1C
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       0196808FA05B5E54FBC1B9CAE1927663E2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          147B
Signing time:             Tue 29 Apr 2025 08:00:18 +0000
Manifest this update:     Tue 29 Apr 2025 08:00:18 +0000
Manifest next update:     Wed 30 Apr 2025 08:00:18 +0000
Files and hashes:         1: 0W8nkJLPOtwLXBXYQYvqsqJv0P0.roa (hash: VE1CmVXCh6nFsIzINtN+7cbMnpKw/coprnM0Z6DgP9w=)
                          2: T4IdyPOyJT-vcpUTevdsnNRpr2k.roa (hash: bowIRN0pzHA89i7IutwyoquoF4lwEHsh3PvwCnZ1E/Q=)
                          3: VkjC6ZXUIZzj8tvL6K7MhcJCkQY.roa (hash: 3XlfyZJkOhAphIjfT5R1eRXgrv3AJ140+2q4XOEf3nY=)
                          4: _1MbS75neK0OfHH5cQfHLledObA.roa (hash: n/m9uDKG5XGN2Lix9tsCCz30GU/UuRy/chtj19TvQOw=)
                          5: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: ry2z50mWwY+L49PseHofHQjiv7kxYdv03XGSBr2X/xY=)
                          6: xWICqvpq-aio997r-Jl_e84mBzs.roa (hash: VzAED4IrYDOzI6JIjXM468jZwannD/UKmDolCUU8kg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:8f:a0:5b:5e:54:fb:c1:b9:ca:e1:92:76:63:e2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Apr 29 08:00:18 2025 GMT
            Not After : Apr 30 08:00:18 2025 GMT
        Subject: CN=a0fb0c9dad109cd0cbdc11b33a5c50132bb2fc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:20:ae:d0:38:e4:98:9e:88:f9:ae:e1:4d:b8:
                    a0:00:5b:16:c2:ea:b7:81:88:99:a9:40:1d:d7:d3:
                    a5:a3:07:e4:5c:d4:9f:3d:c3:b0:54:c8:1e:f8:38:
                    2f:4d:27:4b:ab:27:38:b4:45:24:19:b5:5d:ae:7c:
                    b3:5c:b3:9c:5e:f3:4a:e3:8c:33:49:1a:64:51:28:
                    45:76:9e:25:e0:ff:b1:29:80:23:67:b2:7a:f1:af:
                    1b:d3:6b:b3:09:0c:d6:2d:fc:0c:08:53:38:05:99:
                    29:e5:22:71:a5:47:75:21:e8:91:0e:cc:ac:fe:72:
                    35:09:4f:42:ac:44:41:be:07:bc:b9:c6:1d:c8:f1:
                    cc:ad:f6:b4:93:76:99:c0:6b:bc:94:bf:b2:a6:7d:
                    cd:5c:46:fe:3d:a1:7c:46:ba:7f:d6:20:b2:d4:86:
                    a6:fd:44:47:5a:03:78:1d:03:77:9f:f3:6d:8e:29:
                    79:dc:ef:24:d1:50:06:08:2a:17:26:a6:69:3c:0f:
                    63:6a:e4:83:9d:0f:b0:0d:ed:4f:73:43:f3:a7:bb:
                    f8:47:d7:5f:9c:e1:92:f2:ed:e7:31:17:39:e0:78:
                    f3:cd:27:2c:db:22:35:c9:06:80:65:2b:3f:8c:2a:
                    44:5f:d7:b1:2b:b2:93:ad:0c:42:79:ff:95:e8:2b:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:0C:9D:AD:10:9C:D0:CB:DC:11:B3:3A:5C:50:13:2B:B2:FC:1C
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f3:5d:27:c1:e7:94:72:e4:96:cb:a6:6c:f2:2d:e3:97:a6:
         86:73:f3:fe:a3:f3:62:10:55:91:ae:a8:7a:e8:98:91:a3:67:
         2c:a4:5b:23:dd:47:8d:1b:c2:74:ca:af:e4:fb:c8:6d:a0:65:
         9c:52:10:7a:5b:cc:cd:47:ba:7b:62:2e:ae:30:78:d1:06:5f:
         6e:99:bd:b8:20:f0:99:59:fa:c7:a8:40:10:85:73:41:40:f1:
         dc:9e:e7:3a:d2:35:95:7c:5c:80:ec:b9:5a:ef:6d:9a:d0:e4:
         58:90:0d:fc:2e:f8:87:49:b2:e9:87:09:fd:92:42:5c:c7:2e:
         4b:ba:b2:2a:6c:65:7a:ae:f8:bc:ee:5d:1c:3d:41:b5:dd:21:
         85:05:e0:39:75:c2:30:f3:4b:5f:34:cc:2c:79:3a:c0:70:b5:
         9e:9c:81:f6:a9:dc:62:2e:a5:39:ae:5b:36:4a:9c:5c:07:25:
         c2:91:11:85:7d:c7:01:f9:50:42:a1:9b:4a:84:32:26:19:a0:
         5b:bc:29:9d:f0:1f:28:ee:8f:6f:2f:e6:86:a3:3d:22:ca:4f:
         39:3b:2e:55:ef:b4:83:8c:fc:44:8e:e1:f7:c1:5e:dc:0c:ce:
         45:d0:e4:9d:82:e2:04:ff:9b:db:ca:5d:f6:80:d5:ea:11:3f:
         5a:de:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:45:13 2025 by rpki-client