Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File:                     U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier:          fldRgWtalbROK/erPkJFbTugo11BuySWbRvIsrzxUsk=
Subject key identifier:   8D:C6:B5:88:7A:DF:2C:04:30:46:F2:07:E4:80:33:59:1D:98:18:C0
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer:       /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial:       01969ED1337FFCC96DEF4698816A95E0FDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number:          0769
Signing time:             Mon 05 May 2025 05:00:32 +0000
Manifest this update:     Mon 05 May 2025 05:00:32 +0000
Manifest next update:     Tue 06 May 2025 05:00:32 +0000
Files and hashes:         1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=)
                          2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: 1corHiid13WBF9RuhMm+zJdeohC2pNo5ydWsG+AfRC4=)
                          3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=)
                          4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:d1:33:7f:fc:c9:6d:ef:46:98:81:6a:95:e0:fd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
        Validity
            Not Before: May  5 05:00:32 2025 GMT
            Not After : May  6 05:00:32 2025 GMT
        Subject: CN=8dc6b5887adf2c043046f207e48033591d9818c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:b1:46:8c:10:e9:5e:93:ad:54:00:38:c5:
                    0f:43:c4:ca:56:4c:d7:e2:ef:34:fc:d1:85:d6:71:
                    b2:89:e6:3f:56:1a:ce:55:de:87:8e:47:5c:5b:5c:
                    33:d8:a6:0a:8c:61:c4:d4:c4:4c:4d:ce:7b:ca:76:
                    af:fa:9b:8b:1a:c2:50:0e:f6:22:79:30:de:0a:60:
                    b4:3f:a8:ef:fe:2b:2e:bf:90:b8:2d:43:6e:c7:98:
                    49:76:62:60:ac:6f:f3:c2:83:7d:46:f3:bd:98:a8:
                    7b:59:d8:4d:4b:81:67:b6:fa:cd:ce:57:8a:28:ad:
                    33:39:2f:2b:53:8e:d2:ad:fd:cb:3a:07:0f:55:5a:
                    35:70:ae:f3:00:18:51:3d:19:9f:51:a0:99:6c:e4:
                    43:f0:2a:ab:2b:43:06:d3:aa:d7:6c:19:19:4f:66:
                    ee:2c:07:09:05:e4:30:1d:43:d1:73:6a:0a:50:19:
                    f0:47:7d:2b:66:34:67:82:a7:c5:8e:7a:62:5b:de:
                    3f:82:91:a8:61:a7:95:3d:f4:f8:b0:d6:ed:78:60:
                    74:42:ed:6e:9d:db:31:bb:63:ee:62:97:15:71:5b:
                    71:bb:d8:00:b9:fc:bf:a0:d2:d2:0f:cf:99:7a:41:
                    c6:9c:2e:4a:ff:00:66:55:76:6e:7d:51:0e:f6:48:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:B5:88:7A:DF:2C:04:30:46:F2:07:E4:80:33:59:1D:98:18:C0
            X509v3 Authority Key Identifier:
                keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:90:3f:15:36:7b:6c:99:38:13:7d:76:6c:95:22:08:b4:0e:
         4e:c9:92:28:2b:ed:c7:49:a5:b9:cb:55:92:da:be:8b:bc:7a:
         2a:15:ba:d1:a6:b9:05:f4:88:4d:53:46:99:c2:44:f4:9d:88:
         40:17:28:fc:a9:75:dd:89:90:88:96:7f:82:1f:66:43:e9:68:
         b4:df:45:bb:90:80:a5:f2:4a:7e:9e:5a:7e:c0:b4:1e:9d:91:
         e7:84:5b:25:83:ce:f0:52:6b:8f:3f:8d:59:0a:e5:13:8b:70:
         94:06:cb:49:39:5c:0b:f3:a8:83:f5:e2:a7:d7:b6:7b:a6:80:
         45:b4:0c:28:34:33:18:51:67:14:1b:e1:42:a8:a4:01:68:98:
         fc:0a:38:dd:7e:06:53:e9:be:63:00:bb:69:42:44:ec:8a:fc:
         21:2e:fe:23:b3:0c:82:f3:16:e4:dc:fd:35:84:79:b2:82:d8:
         c2:30:a3:aa:ca:39:2b:17:8a:54:d5:d2:16:3c:e5:8e:1c:30:
         b9:b2:e8:27:78:a8:74:e7:af:5c:de:bd:24:9b:0c:9f:df:e2:
         5b:cf:44:24:56:50:4d:d2:32:46:9a:31:61:b1:53:86:ca:fe:
         92:12:5e:2b:60:d0:ec:f3:80:94:4d:72:d8:5a:c8:28:97:c6:
         6d:eb:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:20:11 2025 by rpki-client