Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File:                     sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier:          4OGL5gK9WjZGCjhsb36b2qAlv1Qy+rxvL/RM9OTv1vk=
Subject key identifier:   62:13:02:74:A1:B0:B6:BA:FD:8C:50:AC:A4:B6:76:E3:F4:57:46:49
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer:       /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial:       019678D69D13F769488CABA293DF2F25C0CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number:          1512
Signing time:             Sun 27 Apr 2025 20:00:52 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:52 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:52 +0000
Files and hashes:         1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
                          2: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: nkBdecVRSdyHOoRe2MI8DWF7AVva85i5x8UQUTNwt+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:9d:13:f7:69:48:8c:ab:a2:93:df:2f:25:c0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
        Validity
            Not Before: Apr 27 20:00:52 2025 GMT
            Not After : Apr 28 20:00:52 2025 GMT
        Subject: CN=62130274a1b0b6bafd8c50aca4b676e3f4574649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:52:f3:3b:3a:27:15:fc:4f:28:21:d0:6a:
                    5d:25:6f:78:3a:01:bc:8a:f6:fa:f1:bf:90:12:59:
                    1f:6d:fb:ca:4f:99:ae:c8:68:f4:7e:56:d0:64:e4:
                    03:70:6d:a2:31:22:71:3b:85:1d:58:f5:25:21:0a:
                    1e:13:7a:9e:fe:62:c9:44:bd:e8:39:68:a5:84:72:
                    58:67:b5:c2:52:18:0a:98:1d:a9:3b:95:38:93:fd:
                    ff:91:57:7a:24:58:88:ce:22:db:87:30:9a:47:f5:
                    53:db:d9:68:8d:5a:80:f6:11:e4:97:3e:52:5a:a5:
                    5b:3e:3e:56:01:17:58:22:73:5c:4d:3a:df:f9:21:
                    96:75:3d:62:38:8a:3f:b1:f6:19:48:0f:de:28:99:
                    3c:64:e7:a0:09:73:15:1e:75:cb:74:c4:d7:ae:7a:
                    0f:77:74:c8:5f:8c:a1:66:db:74:62:d0:40:e6:72:
                    5b:ef:ea:6a:b2:b1:17:fd:c0:ad:47:d8:fb:b2:d7:
                    90:69:29:3a:d0:1f:b8:9f:88:61:41:74:37:57:d1:
                    85:3e:3f:4a:55:1a:03:ed:2c:e0:26:49:fd:c4:33:
                    75:88:3f:76:85:c3:7b:ba:6d:fd:72:ee:83:bb:82:
                    c8:fb:1f:d8:98:a4:5b:69:12:58:3f:d4:89:c1:f2:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:02:74:A1:B0:B6:BA:FD:8C:50:AC:A4:B6:76:E3:F4:57:46:49
            X509v3 Authority Key Identifier:
                keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9b:69:72:b6:73:b1:bc:f4:54:04:6f:95:3f:0c:83:13:4c:
         55:e1:e3:85:98:8f:51:a5:59:6e:48:a0:5c:5d:4b:2d:19:a3:
         df:19:cd:c3:56:b8:16:69:70:23:1a:9d:74:50:e8:78:60:e1:
         6d:c8:9c:19:9b:9a:e8:c9:5e:3d:bd:04:7b:3c:cd:b3:a9:f6:
         c6:9b:98:ea:c6:ed:8a:60:43:01:f3:15:fe:7f:1c:b3:7f:2c:
         11:23:83:1c:62:28:56:bb:95:9b:d7:73:2e:c8:79:ef:33:c4:
         50:27:8c:98:1d:bd:53:80:be:8e:fb:b9:d7:d8:8f:ec:11:04:
         66:5a:4b:43:8f:09:f4:b1:58:37:b9:70:cf:15:90:3e:97:be:
         6d:cd:fd:a0:47:b5:56:3b:01:00:0a:f0:72:28:b0:ce:2e:13:
         d1:d8:83:0c:1c:a9:c8:3f:f1:ae:8e:d0:b5:25:ff:e2:95:29:
         22:4d:3f:fc:5c:fb:81:af:c0:e0:f5:3e:da:21:37:c7:d1:0e:
         8c:c1:74:4f:e2:a1:e3:ad:5e:3f:ad:2d:6e:3a:9e:54:78:92:
         ea:2d:46:df:05:77:f7:22:a4:ea:65:da:d5:19:80:4a:d4:75:
         4a:64:58:77:26:6a:a7:df:e5:d3:42:6e:b0:74:20:53:da:a9:
         73:eb:5f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:21 2025 by rpki-client