Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
File:                     s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft (raw, json)
Hash identifier:          38GzkqilRVHXkMOHugI9x4m9Kex8FowHQkn/BecN2rY=
Subject key identifier:   7D:C5:B0:A7:F8:A2:A8:34:75:3A:86:D4:DE:65:93:71:13:FC:71:82
Authority key identifier: B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
Certificate issuer:       /CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Certificate serial:       019699AB014EA127E06EE2430BACEC3BC31C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
Manifest number:          092E
Signing time:             Sun 04 May 2025 05:00:43 +0000
Manifest this update:     Sun 04 May 2025 05:00:43 +0000
Manifest next update:     Mon 05 May 2025 05:00:43 +0000
Files and hashes:         1: MIW8OPxvmMYCyg8uVd5d1waRYaw.roa (hash: wVmZOjUw0dfWDKll8B0zY8od3oDZ40RulCQ3hTtaIiA=)
                          2: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl (hash: rFjTOD+OclKtIMBR9O88z0UwxYmSwyx40iBIqG5bsFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:99:ab:01:4e:a1:27:e0:6e:e2:43:0b:ac:ec:3b:c3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ba47605cf367626263e57f16d0d87916ceddc8
        Validity
            Not Before: May  4 05:00:43 2025 GMT
            Not After : May  5 05:00:43 2025 GMT
        Subject: CN=7dc5b0a7f8a2a834753a86d4de65937113fc7182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:3b:86:ab:c8:3b:35:1c:d8:ac:d4:28:06:
                    f7:b2:68:1b:01:f8:bc:92:b8:1a:f6:b5:d7:79:58:
                    91:9a:c4:dc:98:a3:cd:6b:50:df:b5:f9:51:be:32:
                    85:3c:56:35:02:6c:a6:31:ca:65:a3:a9:95:13:4e:
                    20:4c:c0:b8:1f:49:a9:55:e0:d1:ca:9b:f0:e2:14:
                    e1:c7:b7:3a:7c:5a:d8:a4:70:f9:c5:f3:31:7b:f7:
                    35:ac:97:38:7b:9c:1d:6a:65:0c:53:7b:de:a5:f3:
                    9f:bf:2b:35:57:92:5d:46:dd:b8:a9:15:63:9d:55:
                    0c:25:ee:31:db:2a:9d:0d:e2:5b:c3:3c:52:8c:de:
                    d1:a4:ed:af:91:71:0f:a1:14:77:c5:f5:67:88:be:
                    f5:ac:fb:dd:8f:12:77:bc:96:f8:38:68:22:50:f7:
                    21:1a:61:05:e3:30:ee:8e:09:5c:2e:54:46:84:37:
                    3a:82:ab:30:01:b2:d1:f0:e8:64:b2:2f:2b:60:67:
                    e7:c5:b9:dc:0c:a5:49:c2:e3:fb:c7:76:21:a2:80:
                    ac:74:67:8d:ac:bc:c0:6d:f2:09:c0:a0:34:0b:90:
                    68:95:d5:0a:f9:bb:b5:f0:8a:3d:9b:73:9d:60:3a:
                    15:93:91:02:be:3a:24:51:a0:12:ff:5f:00:3b:bb:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:B0:A7:F8:A2:A8:34:75:3A:86:D4:DE:65:93:71:13:FC:71:82
            X509v3 Authority Key Identifier:
                keyid:B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:fb:7b:aa:43:dd:d1:84:e8:67:f4:a0:35:09:97:b6:21:
         8d:c9:d6:36:c4:05:85:2d:2d:c0:d2:e2:82:dc:3e:8e:fe:f5:
         af:70:d3:fb:01:f2:c3:35:a5:64:4e:f1:f5:08:25:01:51:d9:
         e3:b7:d3:75:60:75:2a:7f:09:2a:fd:d2:fa:bf:b7:10:0c:40:
         06:8b:fd:29:92:af:46:29:71:9d:75:3a:54:8e:e3:c2:a1:ba:
         57:d1:98:26:0c:0a:a9:76:90:03:16:4f:6b:ac:1b:ab:d4:63:
         a5:91:a6:d2:8f:88:26:49:14:5f:69:61:e3:54:79:bf:68:0e:
         2b:cd:7c:e6:fb:d7:88:10:f9:4d:31:57:42:c2:81:d6:d7:39:
         6b:15:60:f2:7a:66:23:96:48:1a:bd:4e:88:e4:92:8e:d3:4b:
         1d:7c:4c:74:aa:b6:83:df:e4:0e:c2:03:11:50:42:7f:cf:82:
         d5:cf:08:50:e2:4a:59:3e:6c:68:60:51:27:d2:bc:97:76:5a:
         56:0b:02:42:98:1f:7c:32:0e:aa:89:cc:54:2a:d8:dc:f1:eb:
         8a:0a:c8:b7:43:7b:96:14:16:51:46:d4:08:a7:46:57:9e:91:
         56:0e:bd:4d:95:57:53:de:c3:cd:06:ee:dd:e4:fc:87:80:a6:
         73:ce:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:00:55 2025 by rpki-client