Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File:                     lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier:          uf079iiT6lZqjQWJbKxK1Vvs4ahc1xM5umBmPiogFqk=
Subject key identifier:   97:E6:C4:2E:BF:83:FD:2C:B8:4D:6A:5D:AF:28:ED:E7:CA:C9:58:62
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer:       /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial:       019671C1DF6423BC1A05C9DCA38C14E79F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number:          1512
Signing time:             Sat 26 Apr 2025 11:00:53 +0000
Manifest this update:     Sat 26 Apr 2025 11:00:53 +0000
Manifest next update:     Sun 27 Apr 2025 11:00:53 +0000
Files and hashes:         1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
                          2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
                          3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
                          4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: ges5Z4rpXTb5e0EAFcZVMgjh9CZ8nEkG0kyL0myJAwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c1:df:64:23:bc:1a:05:c9:dc:a3:8c:14:e7:9f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
        Validity
            Not Before: Apr 26 11:00:53 2025 GMT
            Not After : Apr 27 11:00:53 2025 GMT
        Subject: CN=97e6c42ebf83fd2cb84d6a5daf28ede7cac95862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:87:d0:c3:2d:58:dc:70:b5:20:50:af:9f:
                    0a:4c:1f:dd:9d:1f:b0:21:7b:83:7a:a9:6f:0b:bf:
                    1e:a6:47:04:29:05:ce:ce:7a:bc:06:fd:0b:98:c7:
                    bc:78:9c:ff:40:10:71:dc:6f:91:ca:f0:1b:41:82:
                    99:9c:3a:be:a7:cc:eb:49:30:fc:49:66:e9:99:6a:
                    cf:a2:fc:f5:23:24:56:99:b2:88:7e:00:1b:3d:d5:
                    de:3e:bc:db:85:7c:29:87:a8:29:ac:8c:d5:45:75:
                    28:90:fc:14:b7:4f:15:da:22:f3:86:b2:95:68:e7:
                    7a:ab:2a:a5:fe:4c:1d:dd:33:c8:fd:1c:bd:02:3a:
                    2b:dd:5e:0b:20:98:59:f9:cb:3d:51:a3:91:92:08:
                    28:b0:ce:ee:06:97:c4:dd:e5:6f:b9:78:80:22:b7:
                    97:74:98:44:5a:0a:77:b4:1d:83:83:75:3d:1d:65:
                    e9:8d:5b:2f:f5:1d:a8:5f:86:9b:35:db:1d:cf:3b:
                    31:24:5a:ec:e6:75:6c:c8:0d:15:b9:2d:a3:cc:97:
                    d3:95:05:68:5e:30:a2:db:a9:46:2f:13:07:6e:9c:
                    2d:bf:81:6d:a9:55:12:30:ad:a8:a6:44:f1:09:c0:
                    0b:40:d7:98:94:44:7e:17:3e:53:e7:fc:48:d0:59:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:C4:2E:BF:83:FD:2C:B8:4D:6A:5D:AF:28:ED:E7:CA:C9:58:62
            X509v3 Authority Key Identifier:
                keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ff:8c:2d:34:5b:af:30:62:06:68:5e:ff:b1:44:e2:dd:62:
         a0:bb:9e:86:c1:62:a9:73:7a:2f:84:e9:a6:d0:68:ce:4e:75:
         46:1a:77:7d:91:15:0b:87:6b:80:28:c4:e9:4f:7b:ca:7c:7f:
         8b:f2:b9:3a:2c:ac:ba:90:33:a5:c8:b4:72:19:bf:ad:c3:ce:
         7a:61:79:33:58:68:f6:9c:36:5e:bb:b8:15:90:36:31:26:30:
         df:20:9c:98:2f:c2:9e:2e:ca:2a:70:18:fb:82:13:3f:ad:08:
         73:17:34:88:79:d9:47:6a:3f:a7:5e:d8:3c:2c:e5:b1:17:1e:
         4d:4e:ea:32:f1:1c:d0:37:c2:df:3e:68:43:f6:84:1f:0a:d2:
         cc:3a:cc:98:40:c4:d1:17:31:d1:2e:b4:d0:6c:1b:42:32:07:
         c2:00:7b:70:42:d6:66:50:82:2b:e1:fc:06:f5:98:96:a9:b9:
         56:d9:19:92:3b:d3:90:a1:1e:53:be:7b:24:2f:1a:95:59:bf:
         d4:98:69:27:36:1b:36:6f:6d:89:ff:9f:03:e4:57:45:ed:15:
         39:b0:19:1f:ee:fb:ca:57:d1:d7:e8:78:7e:a6:51:a3:90:4d:
         40:a9:60:33:c0:c0:6b:64:43:6c:b3:52:d3:75:f0:df:87:84:
         6e:fb:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:27:14 2025 by rpki-client