Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File:                     k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier:          F/XYRb/9XoVKqy7BGhCBcwXDYOlEcMLBNSmPYs4SumU=
Subject key identifier:   64:65:EB:E7:80:58:04:EF:84:C3:0B:5A:D2:58:D5:51:E2:F0:B1:B0
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer:       /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial:       0196895CF2D792EDDC15F2D705E97B901399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number:          0678
Signing time:             Thu 01 May 2025 01:01:32 +0000
Manifest this update:     Thu 01 May 2025 01:01:32 +0000
Manifest next update:     Fri 02 May 2025 01:01:32 +0000
Files and hashes:         1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
                          2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: nsVFEtwSLe4czOChjDnCTla629s+BNdehUOGdE11USU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5c:f2:d7:92:ed:dc:15:f2:d7:05:e9:7b:90:13:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
        Validity
            Not Before: May  1 01:01:32 2025 GMT
            Not After : May  2 01:01:32 2025 GMT
        Subject: CN=6465ebe7805804ef84c30b5ad258d551e2f0b1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:d5:f6:3f:4f:0c:0a:a5:3f:86:a2:6c:c1:
                    55:f0:43:57:da:cc:4a:90:fd:c2:ea:3e:5e:28:43:
                    ac:b4:69:cd:11:92:1e:66:ac:e9:6d:ca:d6:9b:65:
                    93:0a:cb:2d:a9:61:71:d5:93:70:0e:57:32:81:aa:
                    8f:b0:69:6a:df:83:f9:eb:e5:94:75:fc:fd:85:2c:
                    52:cd:c7:7c:d1:f4:84:f5:a5:58:8a:4c:c8:68:21:
                    ff:52:f5:06:5c:12:f3:ac:b9:94:8b:7d:8f:fe:94:
                    cc:10:46:d6:1a:0e:19:55:7e:d6:b9:82:98:a9:44:
                    2b:50:67:49:87:82:6d:b4:bc:88:76:d3:c8:dc:b7:
                    01:55:ed:0a:f1:ef:a3:02:9a:9c:73:62:f1:56:3c:
                    94:d5:4d:fb:4f:32:7e:47:30:fe:ef:2e:27:99:63:
                    ef:6f:19:b7:59:1f:07:8e:eb:0c:d9:f0:61:2e:07:
                    51:22:9c:3e:6a:b2:54:a4:21:f7:8c:a1:90:6a:f4:
                    f3:80:ce:f7:91:c2:0b:62:f0:17:33:bf:04:29:e3:
                    4d:f3:80:e9:ea:db:f5:48:76:04:0b:5a:e8:64:c3:
                    f2:31:6b:16:cd:a9:c7:6d:b7:c3:25:af:61:4f:e5:
                    20:4c:4b:63:63:f3:9e:31:01:7f:24:16:52:c2:7c:
                    6e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:EB:E7:80:58:04:EF:84:C3:0B:5A:D2:58:D5:51:E2:F0:B1:B0
            X509v3 Authority Key Identifier:
                keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:65:64:62:3b:55:9d:ab:aa:f6:29:92:87:66:89:13:96:
         69:20:5a:e2:6a:c6:b0:08:e9:f6:c7:61:89:a4:79:eb:67:42:
         c7:85:b8:1e:d8:ef:32:f3:78:5a:82:87:f2:b0:a4:66:1e:d3:
         43:80:70:ef:83:ba:01:fb:08:0b:3f:c5:a4:45:39:bf:a3:18:
         30:48:fa:57:72:f3:e5:6b:33:d6:27:c1:f8:4d:34:91:cd:6e:
         9c:af:6d:5e:0d:72:0c:12:2f:5e:78:e8:6b:82:39:07:0c:0c:
         fa:7b:98:d1:97:30:ba:71:45:20:a0:9f:a9:3c:d0:e1:e5:ae:
         29:51:e4:72:9f:cd:78:e6:d1:4d:fb:3c:c0:d3:5e:44:94:a6:
         8f:5b:09:dd:b0:8e:ef:af:2f:b9:40:ad:3a:97:2a:7d:84:4c:
         00:73:ac:21:5b:d8:c0:87:55:40:9e:d3:30:8a:46:dd:68:cb:
         9a:56:35:45:32:94:fb:51:8f:f3:c7:26:02:e6:5b:d1:4f:c3:
         ee:d2:ad:f9:44:b8:c4:41:2e:b2:69:ab:6f:41:00:4b:32:01:
         b4:b6:2f:a8:fa:38:d5:61:bf:a2:7f:f8:82:b6:78:17:8b:f1:
         6d:71:bf:ed:d4:77:80:a8:95:c3:bb:3b:02:37:a1:9d:86:16:
         82:2c:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:17:49 2025 by rpki-client