Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File:                     1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier:          qa1V9rXQHhxHDEsNkHowGScqsGlNH9AC5LVfoJjEpI8=
Subject key identifier:   03:B4:A0:4F:BD:AB:2F:66:CC:10:D7:1C:44:28:FF:0C:E1:A9:4E:CA
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer:       /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial:       0196824738B18854E659AD2B4386343FA163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number:          1514
Signing time:             Tue 29 Apr 2025 16:00:27 +0000
Manifest this update:     Tue 29 Apr 2025 16:00:27 +0000
Manifest next update:     Wed 30 Apr 2025 16:00:27 +0000
Files and hashes:         1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: WBbEupXZAofoM9UzVEjkvA9VI/tYW0GO92MYjSkki/c=)
                          2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:47:38:b1:88:54:e6:59:ad:2b:43:86:34:3f:a1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
        Validity
            Not Before: Apr 29 16:00:27 2025 GMT
            Not After : Apr 30 16:00:27 2025 GMT
        Subject: CN=03b4a04fbdab2f66cc10d71c4428ff0ce1a94eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:1a:86:51:65:c5:41:fa:8f:92:76:1f:35:
                    55:10:c4:7a:0b:18:25:c8:8b:d8:7b:08:5c:12:8f:
                    b9:ce:f4:47:af:d7:17:87:e9:dc:1a:1c:11:b5:d8:
                    10:44:09:e9:f8:c2:4f:a1:f1:29:4d:fb:b7:f9:45:
                    5c:63:34:d6:90:92:99:39:10:b6:d5:cf:89:6e:d3:
                    f3:8e:92:bf:ea:40:66:60:cc:80:e4:2f:3f:c9:89:
                    07:f1:84:d5:55:c8:ef:4b:2c:89:22:4e:ac:28:17:
                    ee:57:c8:b4:ee:ca:be:ed:88:81:61:f6:98:12:c5:
                    7f:20:00:84:81:b4:c1:77:eb:79:cb:58:3f:25:ec:
                    32:a1:ee:a1:cd:91:f0:f8:21:fa:eb:1c:39:75:59:
                    50:42:41:02:a1:8a:1d:e7:2d:15:56:a9:10:1d:47:
                    d1:e6:3f:c9:6a:ff:b1:24:45:bd:dc:1e:67:5a:be:
                    a3:2c:2b:cd:ca:7a:fd:a5:17:94:9e:4d:75:60:b4:
                    88:66:6b:f4:07:f4:9b:44:14:ae:d6:71:66:eb:26:
                    3b:b0:e5:a8:70:59:12:f8:17:e5:98:61:00:25:fa:
                    fe:b2:d2:3d:0d:05:43:9b:c7:31:25:06:00:11:5c:
                    4b:61:d8:f1:6b:4e:6c:0c:1d:47:22:2f:08:fe:a9:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B4:A0:4F:BD:AB:2F:66:CC:10:D7:1C:44:28:FF:0C:E1:A9:4E:CA
            X509v3 Authority Key Identifier:
                keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3b:19:25:7b:e6:e6:3d:ef:79:6c:43:2e:a8:d0:2f:85:8e:
         e2:a1:71:e9:7f:f3:68:03:cf:9e:29:b1:94:bc:2c:7c:1c:1a:
         74:86:21:50:bd:b9:0f:ae:72:bf:5e:33:a5:63:45:86:40:c5:
         d9:85:08:b8:45:8c:77:95:bf:fe:7f:e9:61:03:6a:22:4c:d0:
         f1:7e:b2:2e:b0:fd:2b:9c:4c:5e:30:df:75:fd:77:c1:17:ec:
         77:43:b6:28:ac:77:e2:f5:06:06:88:69:95:64:c1:e7:f3:49:
         2f:f5:7f:6e:ef:ac:74:dd:f6:94:f8:85:04:91:55:d2:0c:7b:
         f8:dd:40:b2:a8:95:21:00:82:69:1b:1c:7b:4b:0f:76:3c:20:
         2f:f0:99:0e:3e:aa:d8:09:53:83:82:75:21:3b:3e:6a:87:08:
         e1:32:17:ba:32:bb:5f:99:8c:ac:e8:b2:86:92:f9:9b:4b:6b:
         c9:3c:07:7d:c0:94:c7:26:a3:51:44:7e:0f:ac:30:d4:ba:4a:
         40:0d:77:6e:42:a5:bc:b0:2a:15:c9:41:98:30:86:a1:9a:17:
         a3:05:ee:76:cf:ec:05:1b:41:a6:69:28:c8:7d:d6:5e:46:7b:
         01:d2:22:7f:a8:b4:e2:83:76:8a:ef:4d:f6:bc:6d:11:d6:32:
         04:8b:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:40 2025 by rpki-client