Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File:                     E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier:          xSAXE5FD0kY6fzYMhPgZdhSB0LRId+w+Pf4Z0nVYRqY=
Subject key identifier:   F5:FF:AC:AF:BC:21:C2:4C:7F:E9:5A:34:DB:B0:B2:25:4D:75:DC:7E
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer:       /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial:       0196545C2DC015D17A3603293D16A817BA15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number:          ED
Signing time:             Sun 20 Apr 2025 18:00:49 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:49 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:49 +0000
Files and hashes:         1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
                          2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: S9uIruVuM9rfTtSiFXsRX5cbfu4AeFWnBL7ZutGkEUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:2d:c0:15:d1:7a:36:03:29:3d:16:a8:17:ba:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
        Validity
            Not Before: Apr 20 18:00:49 2025 GMT
            Not After : Apr 21 18:00:49 2025 GMT
        Subject: CN=f5ffacafbc21c24c7fe95a34dbb0b2254d75dc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:74:04:38:11:30:71:59:4b:44:8f:fd:23:
                    2f:ac:1f:0c:7d:b1:03:69:00:5c:15:a1:4d:0b:c6:
                    07:0c:e7:76:e5:61:ef:0f:6a:09:b5:b3:0e:75:e4:
                    0a:7d:03:32:f2:7f:80:78:20:c6:b9:b9:50:29:78:
                    22:cd:1a:70:62:4f:30:3d:55:1e:6c:e8:69:1c:5c:
                    4c:8a:29:93:e8:a7:d0:a8:af:3d:e6:87:df:b9:f8:
                    f3:1a:02:ee:f5:59:26:10:00:7f:57:52:91:7c:83:
                    92:3a:11:1c:1e:4f:82:4d:c0:7a:c6:d5:68:16:9c:
                    c9:91:3e:80:0d:29:03:a3:33:da:62:6b:ab:79:78:
                    4e:f5:8f:7e:e8:06:f2:b6:2e:48:69:d8:53:97:fa:
                    39:dc:b4:98:53:ea:09:c1:30:c3:25:4f:ab:93:2d:
                    1c:c2:11:92:87:42:47:2e:a0:44:fb:57:1c:9b:cc:
                    d6:09:fb:4b:6a:ee:1b:10:9b:fb:6b:6c:48:81:8e:
                    2f:10:56:4f:1c:96:da:d7:d3:00:e1:19:5c:3a:50:
                    44:b9:77:46:39:f4:92:86:ac:b4:39:f4:48:8b:3c:
                    80:a5:1b:6c:a8:33:d6:f2:ba:21:59:ca:88:fd:e1:
                    b2:03:dc:19:f2:03:bf:f8:6a:54:19:c3:6f:54:5c:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FF:AC:AF:BC:21:C2:4C:7F:E9:5A:34:DB:B0:B2:25:4D:75:DC:7E
            X509v3 Authority Key Identifier:
                keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:60:70:ba:18:cc:91:5a:48:e0:03:33:4c:4b:ee:a4:7d:d8:
         be:78:aa:14:3f:d5:44:0b:00:a2:ec:f6:a3:95:05:c6:f8:57:
         db:e9:cd:ed:d6:69:fc:54:07:75:90:ae:a0:dc:ab:fd:c7:d1:
         5e:03:66:1d:78:6b:a4:6b:24:a7:33:53:51:6d:b0:e8:87:33:
         8a:00:45:ae:fb:c5:35:d4:01:ca:49:95:49:36:fc:0c:d6:66:
         bd:9e:79:32:ea:96:ac:5e:02:25:e1:eb:c2:02:56:ac:3d:bd:
         34:d8:80:23:b7:fd:7b:6d:07:23:35:28:fc:9b:e6:d8:54:c3:
         07:9b:a7:48:83:f0:d4:e3:6a:65:c4:31:00:9b:fa:53:ac:b8:
         5e:4b:20:44:a3:18:72:e7:ff:2c:f5:c3:3d:42:80:16:18:63:
         90:5d:f0:7f:0a:f1:7a:f0:1f:a0:bd:03:e7:88:64:99:b6:b2:
         8c:57:f3:f1:17:8e:8d:a4:11:36:3c:5a:6d:5f:9f:62:92:24:
         8c:82:41:7e:e3:23:ca:15:c6:49:44:63:49:66:46:89:c3:e5:
         02:aa:ee:fd:cc:b9:78:aa:81:33:c4:00:f4:40:33:06:ee:25:
         15:d1:15:90:71:ab:e7:d2:02:89:e5:95:14:ed:18:a1:6a:69:
         6e:17:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:42:41 2025 by rpki-client