Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File:                     r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier:          /aonmp8yQZv3FelY3g/nRxvBnb8SekrMxVi04jO4ESM=
Subject key identifier:   76:0F:47:EE:AC:C5:BE:9A:C2:0F:AB:AF:42:95:08:C0:ED:35:94:04
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer:       /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial:       019675D54973DACF18475021A234FADBF4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number:          0933
Signing time:             Sun 27 Apr 2025 06:00:34 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:34 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:34 +0000
Files and hashes:         1: 1-QcSYLdpveuStLYqlBunMp4JJ5g.roa (hash: NQizYlwEjERl0X/bxZE2nkkRnRTSix4QkB1fVvIKAMg=)
                          2: N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa (hash: kLrijD9G/R0cMvtLz3nwtkgshfFFxhgBoeVfEmhz0ZI=)
                          3: ayI-UL4oibibFX4cW3YWUk6xSTs.roa (hash: N1Uh/40VgHWlkmnSe6ILZ6Uts2Fhgd/GOVLIcEzqLXQ=)
                          4: gnkHs-huFz_Mv1gh2f--oMoTlbI.roa (hash: cAkEhiie/5ypOg0o3pr7TFLqNT0IK1/cxJALcW2pMbg=)
                          5: njDEZbySu24l3-7pqiEP7cKTkYk.roa (hash: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=)
                          6: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: 4M0ubwjuKERbYiHCx6/dkA2GGn9cj316bq8gnsOT5gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:49:73:da:cf:18:47:50:21:a2:34:fa:db:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
        Validity
            Not Before: Apr 27 06:00:34 2025 GMT
            Not After : Apr 28 06:00:34 2025 GMT
        Subject: CN=760f47eeacc5be9ac20fabaf429508c0ed359404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:bd:24:93:57:8a:38:7d:48:d0:0e:8a:16:
                    46:ad:00:64:97:b9:6a:ab:fe:a0:28:e9:ad:20:d4:
                    2c:52:2a:4b:e4:9e:61:92:5f:19:3a:26:57:a3:be:
                    44:f9:14:be:e4:22:af:d7:eb:74:7a:a3:8e:0f:c6:
                    aa:ed:81:04:15:d4:bf:c5:56:64:d0:97:b6:31:6c:
                    1c:2b:45:3c:e5:8f:ae:6b:13:31:22:3a:ca:91:fd:
                    f1:9a:a4:47:5e:4c:e8:bd:df:0a:8e:41:0d:21:71:
                    fc:a7:48:8e:73:a4:ff:81:b4:16:89:6e:a4:d3:69:
                    07:03:1f:51:69:9d:9e:20:b7:7c:07:03:fd:82:c7:
                    af:ab:65:40:25:63:ef:98:e8:ed:89:03:75:94:df:
                    67:a2:41:f0:00:4b:2c:f9:32:35:49:a8:a8:4b:3a:
                    c0:c8:db:df:48:75:d8:93:75:40:4e:1a:a3:dd:03:
                    75:6a:d7:e3:d6:e2:a5:2a:08:45:5a:27:89:dd:21:
                    0c:f0:8e:c1:51:d8:36:64:de:3f:13:bd:96:ae:9e:
                    d0:36:f8:59:61:2b:74:64:19:ec:c0:88:07:38:1d:
                    a8:f9:26:8a:13:19:ba:7c:3a:6d:4c:33:71:ce:31:
                    16:f6:dd:87:93:52:1f:3e:35:79:69:94:54:d5:59:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0F:47:EE:AC:C5:BE:9A:C2:0F:AB:AF:42:95:08:C0:ED:35:94:04
            X509v3 Authority Key Identifier:
                keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:c4:0c:63:1d:e0:af:64:78:68:bb:aa:f5:8f:fe:45:fa:
         90:25:e8:12:76:9c:f9:99:6a:3a:c5:7e:c2:d7:d7:18:77:f0:
         b8:d2:35:4c:ed:75:d3:8c:5f:da:f4:ba:30:8a:ab:bd:4a:82:
         d3:c2:72:bf:51:29:07:e5:86:d4:4e:ed:f0:22:d3:7a:db:d4:
         08:af:76:71:13:37:ad:a2:cd:db:28:f0:fd:24:cb:6b:22:db:
         45:90:a0:d6:b5:d8:d1:12:0b:85:22:1e:0e:5d:e3:eb:65:71:
         11:16:25:a7:c3:7a:37:41:66:89:6a:fc:40:74:13:0e:1f:b0:
         05:46:8f:8e:17:52:41:c9:f2:67:1c:4d:d1:61:13:9f:86:7e:
         89:c1:80:36:2d:8e:ae:22:ea:68:b4:b4:e8:4f:3f:ab:f5:d1:
         db:a2:cf:d3:42:9f:5f:96:41:11:ea:90:28:56:68:51:b6:d7:
         6d:a2:ae:60:e9:5f:1c:e2:97:b8:e0:83:80:fd:ee:2d:f5:0b:
         c9:82:31:69:d8:1d:21:dc:36:2e:21:59:15:47:a8:d2:9f:65:
         b9:e4:3c:3c:9e:5b:96:cd:10:9c:c9:15:65:f5:f3:2a:65:23:
         b7:ff:b3:6d:85:9e:43:e9:65:54:d7:f2:55:a4:04:1c:02:bb:
         e2:59:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:47 2025 by rpki-client