Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File:                     A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier:          xOLWWls/dJY0HxLj9PLMzErnXwDuCdXc7I7/Qn6qSk0=
Subject key identifier:   DA:38:6B:5F:C5:4C:6C:F0:DF:8E:3E:AD:17:83:7A:80:CF:80:29:6F
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer:       /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial:       01967AC4C1E1619CD1FF6D5682CE16FD9FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number:          0C4A
Signing time:             Mon 28 Apr 2025 05:00:37 +0000
Manifest this update:     Mon 28 Apr 2025 05:00:37 +0000
Manifest next update:     Tue 29 Apr 2025 05:00:37 +0000
Files and hashes:         1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: 6l8kd2VIQmMl6wKeAwakA/isRwTPaJlDao0rfNdmVPg=)
                          2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:c4:c1:e1:61:9c:d1:ff:6d:56:82:ce:16:fd:9f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
        Validity
            Not Before: Apr 28 05:00:37 2025 GMT
            Not After : Apr 29 05:00:37 2025 GMT
        Subject: CN=da386b5fc54c6cf0df8e3ead17837a80cf80296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:34:51:3f:4b:47:cc:06:94:b9:8c:a5:fd:4f:
                    81:5b:42:8e:f1:a9:0f:91:9d:e0:10:ef:4a:db:ea:
                    60:5d:b9:ef:36:d4:54:00:c1:7b:b3:5d:d9:36:a5:
                    ba:1c:be:54:f2:a7:18:5d:51:d1:38:c8:4e:63:4d:
                    cf:97:cb:1c:50:af:0a:2b:0e:e1:2c:b5:21:8c:d7:
                    9b:71:ae:94:90:28:0b:cc:dc:23:f2:10:97:b3:1a:
                    c7:65:b3:1e:8a:43:70:f6:dc:b5:38:54:47:c1:dd:
                    75:b4:e7:ed:81:f5:ef:cb:35:ae:66:7f:15:af:03:
                    6a:5b:a1:ae:55:c3:98:1e:0d:4a:87:16:3d:f6:f5:
                    be:cd:e5:10:8f:cf:b6:13:36:dc:2b:c0:72:5c:55:
                    ba:82:69:d0:b3:8c:ab:12:8c:bd:b8:4f:c6:68:dd:
                    8b:fc:1f:e4:1f:e1:14:d3:87:28:1f:2b:43:31:db:
                    ea:2a:3e:c6:1f:7e:9b:af:59:cc:5c:89:c7:28:3f:
                    ee:9b:62:12:57:00:49:3a:de:c1:10:4d:84:ff:25:
                    b4:ff:22:49:93:db:03:59:e2:f0:ff:85:5d:09:c0:
                    03:a0:0b:5d:00:22:48:90:42:1b:94:2c:39:b1:04:
                    ea:e4:30:ee:9b:14:5c:b1:d8:a0:06:db:f3:3c:44:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:38:6B:5F:C5:4C:6C:F0:DF:8E:3E:AD:17:83:7A:80:CF:80:29:6F
            X509v3 Authority Key Identifier:
                keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3d:c1:32:6b:5e:a8:c9:04:55:bd:09:45:14:c5:e1:a2:eb:
         e0:1c:2a:47:1a:96:82:a8:af:a9:78:97:72:db:00:0c:b3:9f:
         05:c2:d8:66:4f:c2:40:8c:71:75:5e:3a:50:7a:f2:d1:7f:e9:
         8f:e3:51:68:ef:96:54:71:42:78:12:52:af:52:99:e8:e3:22:
         d6:e1:6b:d0:4b:b8:29:16:ec:13:08:d0:95:42:64:3a:26:f7:
         15:eb:71:8e:c1:5b:b6:8c:91:83:5d:20:e9:70:11:0e:a9:2c:
         8d:22:66:87:df:54:9a:2f:c3:46:17:d4:e8:bc:6c:e4:7a:f0:
         e3:e4:6a:60:d5:59:60:c7:31:75:f4:d1:bb:96:0f:04:0d:8d:
         76:6a:3b:fe:66:a6:74:6b:07:e1:80:4b:57:60:ec:2f:dc:e7:
         18:59:76:78:49:55:34:f5:a2:c9:b5:ac:45:a1:e9:f0:76:9d:
         02:35:e1:3a:b4:1c:d1:36:0d:1d:50:bc:1c:9c:dc:67:65:70:
         72:ec:4b:53:7c:b1:b9:06:ea:90:22:89:ec:d5:8b:bf:0a:c0:
         f0:1f:8a:71:44:ac:90:9b:1d:c6:7c:cc:9b:3e:c3:d1:d3:4e:
         b1:e3:68:20:f2:bc:fd:50:b5:ca:c1:37:ad:f3:f3:33:5d:7f:
         b2:cf:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:14 2025 by rpki-client