Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          3Q9j2qHizpYiMjOdn6v/Kgcp7NMlERz1x52hzpPzzKw=
Subject key identifier:   17:F6:00:45:1D:A8:9C:BB:04:B6:95:06:A0:CE:BB:D5:CB:EB:69:91
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       01968210BD933077D424F657238C099B7604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          0758
Signing time:             Tue 29 Apr 2025 15:00:57 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:57 +0000
Manifest next update:     Wed 30 Apr 2025 15:00:57 +0000
Files and hashes:         1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: w+wIqtz0eRYkENLsJJImlNRcDjoFpk3vzMVleq4bI/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:bd:93:30:77:d4:24:f6:57:23:8c:09:9b:76:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Apr 29 15:00:57 2025 GMT
            Not After : Apr 30 15:00:57 2025 GMT
        Subject: CN=17f600451da89cbb04b69506a0cebbd5cbeb6991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:9f:9e:74:39:6a:a9:12:40:9c:6d:7a:ee:
                    af:24:e8:f8:98:12:01:bb:88:ce:67:56:0e:46:e3:
                    cb:f4:f8:fe:34:87:4d:3c:40:41:fe:d4:06:63:b5:
                    82:ff:78:aa:c0:64:25:05:56:a7:5d:b6:7c:e7:c3:
                    57:e5:d4:60:24:ee:36:0a:6f:0a:44:5f:46:58:55:
                    00:be:96:f7:4c:d9:85:79:3c:2b:d8:db:a6:8c:08:
                    2d:46:d0:70:4c:dd:4c:6f:5d:90:2c:f3:72:34:36:
                    51:49:7c:ee:76:1c:73:b6:e7:54:80:78:a0:ce:9a:
                    ff:8c:20:bd:6b:e9:1c:06:39:52:af:71:40:8d:7d:
                    b0:31:d0:7b:6c:c8:2a:38:a8:ba:52:14:23:41:97:
                    dd:ed:b7:07:b9:35:65:83:0f:c3:d1:bc:ab:16:9e:
                    98:bc:e2:d9:18:3b:16:7b:c8:ee:65:ea:13:c9:63:
                    d0:d8:6b:df:0c:0d:c8:08:0b:ed:e1:2f:3e:78:71:
                    ba:87:5a:27:f4:da:80:3d:46:47:5c:a2:f9:a7:15:
                    ce:8d:5f:bd:99:6f:70:bc:7a:68:8d:8e:8e:0d:b4:
                    6a:0a:34:b0:9a:e7:e9:d1:47:bb:b6:64:0f:f3:c7:
                    f9:72:fb:69:5b:54:e4:65:bf:88:02:10:ff:47:5d:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F6:00:45:1D:A8:9C:BB:04:B6:95:06:A0:CE:BB:D5:CB:EB:69:91
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:87:29:d9:ab:5d:17:b6:12:23:21:52:d8:5a:38:d1:2b:dc:
         80:db:f0:53:03:3c:0a:e2:4f:3e:0f:1c:f6:05:d4:85:5c:6a:
         cc:19:f1:7c:c8:93:95:88:51:9d:f6:4f:d5:1f:3d:ca:ca:87:
         fc:7c:86:65:12:d6:4b:ce:0c:a7:7d:b6:dc:f3:07:3c:c0:e3:
         ab:1b:69:fe:1e:8a:c0:a5:35:dd:5f:ed:b3:d4:f2:39:9f:f3:
         ec:cf:5b:d6:2b:0f:35:fa:8f:9b:a5:7e:d9:2f:2d:15:b4:d8:
         ca:26:5e:2d:7c:0d:77:2e:db:95:c7:31:43:6f:96:3d:5e:cb:
         71:5a:f3:0e:cb:7e:bd:7b:ac:5f:0c:a6:64:0e:f1:c5:fc:d4:
         19:1a:a7:24:bc:15:2f:c6:f7:0e:0f:ea:65:c3:3a:5a:23:71:
         b1:92:ec:f7:b9:00:23:ee:b6:51:5e:af:9b:bc:cc:a7:eb:92:
         2f:93:e6:00:54:06:d7:db:0e:b7:e8:6f:9c:ce:e2:62:9a:0e:
         5d:bd:77:e9:19:76:a3:1f:e5:32:d2:a9:c1:2b:b3:73:71:05:
         45:1d:54:07:c8:ea:80:58:a2:69:05:92:02:7c:0e:a5:dd:ff:
         f2:ab:be:cf:c3:ad:ab:51:7b:4b:4d:c6:64:08:e6:6a:74:f7:
         d7:ba:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:07:53 2025 by rpki-client