Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
File:                     MBYKH8YoL1eCp6in6g7SBrlEQSM.mft (raw, json)
Hash identifier:          aDl8ZnYVZ/ew4rsa/KltKaMl42MelivXqpOxPLwTyZA=
Subject key identifier:   C4:7B:C5:6B:B4:86:31:E4:76:19:C1:ED:C3:AD:31:69:FA:74:9B:EB
Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23
Certificate issuer:       /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
Certificate serial:       0196729D92B9D4F631FFB813162BCF431B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
Manifest number:          045D
Signing time:             Sat 26 Apr 2025 15:00:51 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:51 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:51 +0000
Files and hashes:         1: HB4IhdwJTMbxhpvjbt56qq4pRj4.roa (hash: 9DEHc5XR7sLsTAJDe4PK9ikNGkjNKZGV2LC/PP63QHo=)
                          2: LyL-vHk5nmQH5BUFL_MLxK_-CMg.roa (hash: x/LQ85Ba6X1diSN88n/xPeBpJxAdwtrVHussR4Eyk+s=)
                          3: MBYKH8YoL1eCp6in6g7SBrlEQSM.crl (hash: UhLJkTgQX6PjtKuR6ob8fgRLaTtLw97TAziy1CGAaTk=)
                          4: VAFUCoUK_BVxyNjCRQWaoFAcB9M.roa (hash: vDTV3bo0aODJvLN0QwS2mzTjLvwXVgvjezjkUwqmkNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:92:b9:d4:f6:31:ff:b8:13:16:2b:cf:43:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123
        Validity
            Not Before: Apr 26 15:00:51 2025 GMT
            Not After : Apr 27 15:00:51 2025 GMT
        Subject: CN=c47bc56bb48631e47619c1edc3ad3169fa749beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:e7:16:10:6c:e1:29:b4:e8:b0:e4:7e:ec:
                    28:38:dd:33:8b:11:7b:5f:3f:26:41:00:d0:0c:bd:
                    62:5d:df:b3:92:33:4e:74:61:a2:a7:29:15:fd:60:
                    6a:01:fa:a0:6d:6b:ce:dd:82:dc:9d:9e:8f:e6:c9:
                    c9:b2:fe:41:64:b4:00:6d:e2:f9:e3:63:4a:d4:34:
                    c5:38:f3:54:47:86:66:47:70:e4:fc:6f:4c:14:13:
                    60:ac:ad:b7:af:23:d5:23:0b:44:a9:db:b7:46:5d:
                    97:4d:be:a6:71:9d:71:9e:a7:9f:34:4d:c4:3d:86:
                    bf:a0:69:a0:02:5e:31:b9:20:87:e6:46:22:57:c6:
                    d3:bb:52:89:b1:b6:4d:f8:10:8a:a9:9c:5e:60:c9:
                    35:42:2d:0d:15:5d:1b:58:19:eb:1a:c1:ef:56:11:
                    53:6a:0b:6d:89:10:09:73:96:5c:79:61:fb:e4:04:
                    e1:0f:49:c0:29:65:97:c9:e9:20:b0:ed:12:f6:e3:
                    70:ec:69:81:7e:98:a2:97:f6:c8:6f:c4:49:d7:68:
                    6f:aa:41:45:56:34:41:d3:dd:19:62:6a:da:bd:c5:
                    73:09:f2:1d:43:da:d2:08:22:f4:3e:38:95:23:e6:
                    0b:ba:d2:6a:7f:2b:90:07:aa:c0:f3:11:ca:2f:65:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7B:C5:6B:B4:86:31:E4:76:19:C1:ED:C3:AD:31:69:FA:74:9B:EB
            X509v3 Authority Key Identifier:
                keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:05:e9:bf:41:a1:98:d9:8d:e4:fb:41:a5:82:62:f5:d9:03:
         07:51:cc:82:e4:b7:eb:11:ff:e2:a4:32:e7:5f:48:bf:20:34:
         c8:2c:53:6e:86:94:97:6e:a0:bf:74:a9:ce:eb:fc:21:ac:20:
         70:2b:ad:b7:75:07:0a:06:0c:cb:1f:29:70:a0:84:4b:25:b6:
         b7:b7:10:f9:f1:8c:95:be:5b:33:c1:34:f3:b8:64:ad:d3:5c:
         ad:04:ae:b3:b4:5d:c9:8a:35:61:15:f4:5b:8b:90:7a:d8:10:
         5c:4a:3d:68:ff:79:38:eb:78:40:3f:68:ec:24:56:35:0c:aa:
         68:3e:e6:44:5b:c9:ad:d3:bb:05:b2:a6:f0:97:77:26:e2:7b:
         42:d7:85:af:bf:13:c7:34:ee:dd:e8:1b:f6:b9:85:47:ff:6c:
         ea:fd:27:95:56:d0:2a:5a:3e:55:45:7e:fb:3c:64:45:bf:eb:
         c0:1c:cc:8a:02:5e:41:f6:95:23:14:a9:e0:82:dd:1d:3d:20:
         f5:74:56:68:06:67:99:ff:5d:4f:bd:f2:aa:64:b3:2d:c3:8b:
         0a:b2:91:54:a1:55:07:c1:60:d6:40:bc:64:4b:09:39:df:dd:
         54:97:ff:cc:bf:8a:09:4f:11:dc:f5:ba:ff:f9:6b:87:cf:be:
         4d:5e:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:02:46 2025 by rpki-client