Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File:                     t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier:          B69lh7xFAzxv5+ehQEI3wE5WIBUTR3Rsw6Gws4+HBm4=
Subject key identifier:   B3:69:FC:A8:2B:36:D7:A4:1A:22:26:99:86:2F:C1:75:38:4B:29:E3
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       019685487D472B0B9BFC301A756F22AB4581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number:          0493
Signing time:             Wed 30 Apr 2025 06:00:42 +0000
Manifest this update:     Wed 30 Apr 2025 06:00:42 +0000
Manifest next update:     Thu 01 May 2025 06:00:42 +0000
Files and hashes:         1: P0UPsrwwEpdQwdedOlBN_0JW76s.roa (hash: XTTIfgwtO/hFYhC4hGvqLqbBL3XWX9y/VAMeHabMSVo=)
                          2: Pw9RBJHk-6VJkZDkzezuuvzuMDc.roa (hash: KTrqAB2f6AG6ZEjHFsNbuwHsaF5ZAPbnL9PTp9QHu7g=)
                          3: f-KSc4wFUzfvZQxAvj3mfcCpucM.roa (hash: jxojV7c/UkeXwjtEc1twZKEIj7PGNnhxGiRkNs0JqvY=)
                          4: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: tmN/GmlOKF+zCj7vZSSIPRmq0OiNDY105wABEx4IrTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:48:7d:47:2b:0b:9b:fc:30:1a:75:6f:22:ab:45:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Apr 30 06:00:42 2025 GMT
            Not After : May  1 06:00:42 2025 GMT
        Subject: CN=b369fca82b36d7a41a222699862fc175384b29e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:c4:3d:46:01:86:17:5f:81:a8:62:8b:89:
                    88:c0:07:13:ea:3b:3f:2e:c0:c7:da:be:58:81:06:
                    ca:6b:7b:50:f9:a0:cd:c8:ab:f0:a0:08:2e:0d:39:
                    28:c0:94:91:c4:af:a2:69:7b:01:8f:18:f1:99:03:
                    dc:6c:a2:3b:3d:28:0e:52:2b:60:62:1d:cb:d7:56:
                    68:23:98:2c:7b:26:21:ce:30:e4:2e:6c:49:32:02:
                    27:01:c7:79:22:aa:e8:4b:e4:0d:8a:6a:56:c2:14:
                    b2:95:8a:4b:17:f5:51:36:99:a7:5a:d5:52:e7:f2:
                    b3:52:cb:9d:e0:15:10:64:27:e4:13:1c:52:11:65:
                    c3:87:03:42:68:e0:ba:89:a6:73:6f:55:d2:38:46:
                    89:03:ff:3a:0c:14:39:ce:af:71:67:54:d0:6a:55:
                    e4:ba:53:11:21:f5:39:e6:f7:09:29:b2:d9:bb:8a:
                    9b:75:1d:5e:d4:b4:2a:f7:45:d6:74:ab:5f:41:40:
                    d7:d0:99:57:00:4a:37:1a:51:18:c8:e6:25:0d:5d:
                    a7:80:db:84:ca:f8:fd:bf:72:6f:f0:b1:11:84:5e:
                    2e:3a:47:64:1a:97:77:e7:b2:89:7a:26:38:46:ee:
                    9e:48:b2:46:24:10:a0:09:11:16:ec:f8:6b:5d:0a:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:69:FC:A8:2B:36:D7:A4:1A:22:26:99:86:2F:C1:75:38:4B:29:E3
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:c9:1f:06:27:6e:8b:0d:81:4d:27:60:ca:39:06:4f:ac:
         06:51:a6:63:f9:d2:0d:e4:e7:f0:26:fb:77:b2:16:44:d0:47:
         d8:a0:d7:7a:1a:f4:d9:4f:ea:cb:68:9d:86:30:ba:02:17:35:
         f3:39:0a:e0:08:9b:09:52:c3:86:2d:04:b4:8b:a1:b9:58:a3:
         70:d2:2a:8d:38:53:98:76:42:8f:8f:2c:02:0c:09:7a:67:88:
         08:f5:d4:2d:98:ac:66:db:10:14:c3:21:0d:68:91:b8:79:c8:
         a8:13:83:25:f5:1b:05:8e:e8:af:a5:58:fa:6a:3f:47:53:26:
         1a:a9:51:a6:54:a0:6b:bb:25:78:23:c1:ab:29:83:20:85:a6:
         b8:b0:f1:ab:3d:76:5a:4a:57:54:cc:23:25:66:bd:17:86:bc:
         ae:c1:c6:60:a0:b9:09:9d:ef:1d:5a:61:76:db:89:9b:b3:7e:
         43:9c:2f:34:e8:56:7f:ed:74:3f:5f:a7:f7:9d:f0:75:74:87:
         65:42:e5:05:55:8c:a4:a0:a4:d3:fd:60:fb:23:63:1f:ef:cb:
         3e:b9:ec:a8:cd:4a:8a:ba:a8:3a:6e:93:7d:be:1d:af:be:19:
         8a:75:15:ca:b8:cf:d2:6a:0c:21:84:5b:c6:64:cd:31:1c:be:
         12:e2:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:16 2025 by rpki-client