Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
File:                     MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json)
Hash identifier:          RVQ55yZTZENoWjbZxg5lZZE2pNuIsIfMoH9XTx0ylM4=
Subject key identifier:   F9:E9:EB:11:56:26:C1:96:CD:A4:41:0D:48:15:6B:6B:47:57:B3:21
Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69
Certificate issuer:       /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
Certificate serial:       019686240D4D485CADAB40B5E37C56F67221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
Manifest number:          0184
Signing time:             Wed 30 Apr 2025 10:00:31 +0000
Manifest this update:     Wed 30 Apr 2025 10:00:31 +0000
Manifest next update:     Thu 01 May 2025 10:00:31 +0000
Files and hashes:         1: JyQJbELaexgQ6fqiGT_WU8kf0iA.roa (hash: k3GN2/34cdpJMDa/U2bzg9E3dU3QeePwWvyheMjQ+5o=)
                          2: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: Fjts03ICsSRE3Em1kQXtjFNKVdTJ+DXaz1N1Iu0D9dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:24:0d:4d:48:5c:ad:ab:40:b5:e3:7c:56:f6:72:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69
        Validity
            Not Before: Apr 30 10:00:31 2025 GMT
            Not After : May  1 10:00:31 2025 GMT
        Subject: CN=f9e9eb115626c196cda4410d48156b6b4757b321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:16:12:4b:7b:11:09:bb:19:bc:30:70:13:
                    9c:d7:6e:53:b7:45:a9:ba:dc:d7:e5:54:1b:9e:44:
                    92:b8:bf:12:42:57:bb:34:07:56:31:e3:a7:00:5b:
                    4a:15:e2:1f:4c:64:7d:b9:6f:01:01:57:92:50:cc:
                    5d:15:7a:2e:7d:f8:38:67:af:36:04:1d:fe:8d:d9:
                    22:b9:51:b4:d2:6e:09:e6:1d:08:32:2c:b5:0e:60:
                    dd:3b:5d:e0:8e:90:10:5a:0f:d2:88:84:96:b9:db:
                    ae:75:12:f7:28:04:82:26:01:dd:7c:aa:85:72:7a:
                    f9:14:93:ef:e0:ce:a8:f0:61:8d:59:ce:b3:71:67:
                    fb:60:db:0a:62:5d:84:3d:24:07:68:59:e9:b6:38:
                    5f:d1:dd:37:95:7f:fd:28:09:95:a6:f0:02:7f:a7:
                    db:87:ba:90:35:07:20:75:49:d7:21:83:9e:ed:16:
                    a9:ed:a8:80:f8:8c:d0:85:b3:4c:4e:c8:0c:6c:f1:
                    67:77:3b:fb:48:18:7e:a3:d4:63:d1:de:8b:0f:18:
                    ad:4c:c5:cc:a4:87:cb:ec:99:c6:1d:44:4f:f0:ba:
                    d7:17:e0:09:ee:ed:a6:43:8d:74:58:cf:57:6e:1c:
                    ef:7f:a5:53:07:ed:d8:7f:6a:aa:a6:55:7c:25:2b:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:EB:11:56:26:C1:96:CD:A4:41:0D:48:15:6B:6B:47:57:B3:21
            X509v3 Authority Key Identifier:
                keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:98:ec:cd:8a:6d:0e:b2:72:1e:7d:c8:e7:81:4b:55:d3:
         96:83:dc:11:b9:d4:51:93:98:a0:fe:ae:7c:ca:1e:db:d5:b3:
         b5:f4:9d:bd:95:ad:ac:92:0e:ca:1e:19:4c:a7:25:c6:c6:cb:
         52:b6:3d:22:5a:20:7e:16:03:26:99:f5:bd:f5:4f:5e:e8:11:
         51:7f:c8:be:41:d6:b6:79:51:6c:95:7d:8a:64:10:0d:eb:2f:
         24:32:03:d1:94:12:d0:71:65:3d:24:79:3d:52:82:d5:b8:85:
         07:8a:a7:e2:5c:ae:04:ac:14:84:63:a5:b3:bb:3b:18:56:49:
         49:1c:a5:a5:73:31:db:d4:ca:23:1e:2c:3d:d5:81:9a:9f:60:
         15:d7:e5:c7:a5:af:f9:71:e1:49:f6:26:84:a9:58:71:36:3f:
         71:2a:2e:d2:5d:c4:70:20:7f:12:d6:3e:c3:ba:47:e5:cc:42:
         96:cc:db:ed:e3:20:93:be:81:cd:f9:15:1a:ff:1e:f6:62:30:
         ee:40:4e:76:e1:d8:51:18:e9:6d:a9:74:dc:01:f0:f9:72:0c:
         27:a3:68:1e:a5:d2:af:36:0e:f2:59:2e:6d:99:58:cd:93:cb:
         80:30:5b:e0:9a:85:cb:f7:68:1d:b4:04:8d:16:c6:be:5f:b4:
         ca:e4:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:14 2025 by rpki-client