Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File:                     35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier:          HNKPx7T/JO9Qmaf/iNnPxLM9trDJlf1J9xhLkmTvRC4=
Subject key identifier:   96:EB:44:C1:0C:72:35:63:FB:57:6F:5B:CA:B8:CF:56:12:8E:0C:86
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer:       /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial:       0196729DD5C3A8C793F2882DF4BB125EC8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number:          0E3E
Signing time:             Sat 26 Apr 2025 15:01:08 +0000
Manifest this update:     Sat 26 Apr 2025 15:01:08 +0000
Manifest next update:     Sun 27 Apr 2025 15:01:08 +0000
Files and hashes:         1: 1KCeM_saj2EHwCtmvYUyod5fQVk.roa (hash: Pv9o3ZWxmDIYTSHQUpAENmb1SekUnxD3+SSuHyFLNIk=)
                          2: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: uOKtHQ137oPUd7gEwXkhPKx2cdYD6tOnB2qLyP4lUKg=)
                          3: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=)
                          4: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=)
                          5: s67wfBYN4Keq-XcZ3aP-wu5Usu8.roa (hash: iepRGsTeT7EybANIxB57/7dp/YbwlG1MHY+mia+/CQ8=)
                          6: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:d5:c3:a8:c7:93:f2:88:2d:f4:bb:12:5e:c8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
        Validity
            Not Before: Apr 26 15:01:08 2025 GMT
            Not After : Apr 27 15:01:08 2025 GMT
        Subject: CN=96eb44c10c723563fb576f5bcab8cf56128e0c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:a0:5f:1d:0a:78:10:d5:21:6b:c1:5a:ef:
                    fc:a1:ea:2b:e7:d1:f3:e9:f5:52:4d:c1:65:44:49:
                    18:9a:d5:87:d6:55:43:d3:23:14:f0:08:78:e7:73:
                    19:12:65:0e:fb:28:d9:9a:a3:b7:be:a9:58:a4:7c:
                    a0:40:f6:ce:65:a6:6e:ea:e2:eb:c7:e5:c3:1d:cc:
                    13:a3:07:45:19:10:69:20:d4:56:00:67:27:7c:a5:
                    4f:a9:ae:02:49:26:7b:43:50:7f:9e:b9:9a:69:3a:
                    c5:70:b1:fd:bb:ce:81:a4:8e:e6:fd:eb:b9:35:8e:
                    9e:89:13:f6:e5:22:09:89:b6:49:53:c9:1d:18:b2:
                    25:25:d9:d9:fe:47:dd:a0:d9:d1:f3:87:1a:42:d2:
                    db:9b:52:17:ab:65:fd:29:cc:36:15:db:3f:05:d4:
                    a2:3e:b4:a4:e7:39:96:7d:be:3a:19:84:c8:5f:96:
                    f3:58:b5:b8:0f:a6:44:0f:b1:7c:cf:65:34:04:eb:
                    36:bc:79:31:8d:eb:57:14:d2:d0:11:c3:3b:e8:d6:
                    bd:db:1a:73:94:b1:19:89:cd:fd:68:1e:fd:7f:21:
                    fc:fa:f5:1f:0d:30:96:8e:d8:96:a7:8c:fd:dc:83:
                    ae:0a:77:95:e0:73:d7:15:56:0a:89:3f:6b:c4:e0:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EB:44:C1:0C:72:35:63:FB:57:6F:5B:CA:B8:CF:56:12:8E:0C:86
            X509v3 Authority Key Identifier:
                keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:06:24:0f:09:f4:cb:70:50:43:62:85:b4:03:35:ee:54:e1:
         c6:4b:14:07:f6:36:f5:ec:32:0b:ac:d0:e2:c6:ce:39:8e:16:
         60:7f:bb:e0:9b:48:d0:1d:f6:66:a2:66:1a:a1:6a:9b:af:65:
         b1:4c:50:85:0c:12:b2:a1:27:25:2c:c0:72:46:ee:3e:6b:0c:
         27:3a:8c:a6:d5:1a:d0:83:f9:21:8c:7a:8d:95:23:a2:4f:99:
         ce:62:3a:ec:dd:bd:78:86:17:1d:a4:b2:6a:d7:45:b7:d0:fe:
         da:9b:5c:a0:f7:89:dc:78:85:ca:98:f4:14:d4:59:7d:df:43:
         0d:d1:9b:66:82:38:72:6a:f7:ab:b7:3a:d1:ea:c3:5b:fe:f0:
         1e:52:fb:17:48:cc:bb:5e:32:47:f4:82:88:dc:8b:1b:be:a2:
         2d:6f:d0:c2:29:99:ad:88:ef:41:a5:87:68:22:6b:28:56:1f:
         40:0e:a2:73:cb:b4:e7:8e:e1:3e:7f:68:fb:c8:60:54:1a:94:
         e8:3b:66:72:b6:b9:21:0e:3a:0c:ab:11:f4:9a:f9:0f:86:a0:
         ee:46:aa:23:a9:f6:c9:f2:be:e4:50:a6:59:dd:3a:2e:81:e3:
         de:67:d8:8f:d1:d5:d2:f3:4c:87:1c:31:82:2d:1b:4b:b2:56:
         0d:c2:74:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:52 2025 by rpki-client