Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          Ey5GD5rKunUuxRqPBsiXQTBtqYaNsqzW8byL4PpuJ3c=
Subject key identifier:   7C:B8:0A:0B:C4:7A:FB:6D:77:37:CE:B6:6D:AA:D2:F9:7A:C7:7D:08
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       019689CA931726901544BECF011BB3254FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          151D
Signing time:             Thu 01 May 2025 03:01:16 +0000
Manifest this update:     Thu 01 May 2025 03:01:16 +0000
Manifest next update:     Fri 02 May 2025 03:01:16 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: FgD4JMTCmYCJ+PabVgyXMq2TqfiJtQtRGc+4JH3fejQ=)
                          2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=)
                          3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=)
                          4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:ca:93:17:26:90:15:44:be:cf:01:1b:b3:25:4f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: May  1 03:01:16 2025 GMT
            Not After : May  2 03:01:16 2025 GMT
        Subject: CN=7cb80a0bc47afb6d7737ceb66daad2f97ac77d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:f0:a6:99:df:15:45:f0:c7:6c:97:e5:60:
                    5a:0f:ee:a1:a6:19:8d:e8:8b:b1:a6:a0:31:14:3c:
                    5f:1c:c8:21:59:94:68:4e:d0:70:04:0e:3e:d8:f7:
                    42:77:8f:d9:66:21:5a:0f:ce:b1:56:08:68:23:1a:
                    1d:ce:55:4a:cc:52:ca:2d:4d:ae:f1:68:a7:39:7a:
                    68:6a:e1:14:3f:2d:dc:95:28:c8:b5:15:94:1a:8a:
                    d1:82:d2:59:de:83:79:6d:22:39:17:2d:a3:91:ee:
                    f3:a7:76:00:4e:14:ac:33:ed:70:b0:53:39:0e:6f:
                    88:20:c2:9b:a2:20:97:20:57:64:86:7e:cb:6b:e7:
                    25:bd:10:c8:7b:d3:4b:f9:79:9d:d2:59:5e:1c:04:
                    1e:f7:98:3a:8c:f1:05:89:5f:d0:74:b0:24:f0:74:
                    1d:31:2f:66:de:e5:01:d9:28:6a:d8:71:9c:15:ec:
                    39:dc:84:5b:08:6f:39:5d:b9:48:92:27:e6:1d:43:
                    97:37:6c:99:67:68:78:03:7f:0a:6f:b8:41:7a:f7:
                    f1:97:fd:94:f2:20:53:99:c7:fa:07:c2:50:cc:48:
                    4f:43:50:9f:95:a8:8a:d8:28:c1:68:9c:b5:25:30:
                    21:ea:2d:e6:14:0b:15:54:dc:0b:4f:e1:48:52:d9:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B8:0A:0B:C4:7A:FB:6D:77:37:CE:B6:6D:AA:D2:F9:7A:C7:7D:08
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:4f:03:4f:48:1b:58:e1:bd:a0:27:60:a5:29:1b:a6:c3:
         06:27:5d:76:db:8b:ea:e1:68:19:a7:6f:8c:73:44:ee:4f:9b:
         87:9f:ff:69:b9:45:38:e6:88:55:16:25:bf:e8:22:51:a8:e2:
         ee:24:f1:79:2b:84:9e:3a:b5:bb:5f:8b:a3:fc:8f:9c:87:a9:
         ab:68:c2:9d:64:f0:f9:c1:69:7d:58:9d:c7:bd:1d:4d:9b:ae:
         24:e0:9e:54:92:38:17:13:db:63:ad:b8:1d:51:0d:9a:6b:27:
         75:0a:af:3d:1d:41:a1:98:8a:5c:2a:1c:19:14:04:1c:58:78:
         9a:4f:f8:37:4b:27:d4:77:d3:35:0f:3c:8c:59:f4:59:a4:f9:
         86:ba:79:4c:7e:73:15:73:82:02:76:1d:c1:fa:ee:8b:37:06:
         07:e3:e0:e8:97:5c:a2:cc:0c:35:18:cf:83:aa:89:92:92:1f:
         46:c0:d6:ae:ba:31:8f:30:03:9a:09:92:42:f4:44:86:57:96:
         f1:45:54:4b:43:5b:a6:6a:c6:b3:9c:ae:85:4f:43:e5:1d:c7:
         18:84:ea:73:17:13:7a:51:92:b6:53:d4:f8:59:cc:f8:fe:0e:
         b5:74:4b:24:56:94:8b:47:d9:0e:71:a6:a1:7d:65:9e:e8:ae:
         c3:2e:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:41:10 2025 by rpki-client