Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          k1X8QoZLRjpLlVIxFva5rZlQcKDaZhLX4db9LO5C7JM=
Subject key identifier:   3C:5A:FC:65:7C:8A:F0:38:31:C9:D0:1E:1D:E1:D7:4C:8B:12:E0:21
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       0196428CA20ACCA668C9AA6B6E7E116E1BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          0CB0
Signing time:             Thu 17 Apr 2025 07:00:34 +0000
Manifest this update:     Thu 17 Apr 2025 07:00:34 +0000
Manifest next update:     Fri 18 Apr 2025 07:00:34 +0000
Files and hashes:         1: 7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa (hash: +YzcMttJR4cOnsIWs0CBLy1v8W7l7gh7eA5Qk1ZfF+0=)
                          2: E-owwaRkGBOgTW0gbT6t0z8jYpA.roa (hash: MzJgxXYLXxOfkRd2uBOOGYCYN+rSmPW8si+rCfGvcKY=)
                          3: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: j9DXbzrpFeFiojXm8SGZ6xc+br8wHkIR7UTEBHHYmyo=)
                          4: JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa (hash: Hw2s88epzhilOmADkh2atAnnbAnZEDzpVgH8yNCsz2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:8c:a2:0a:cc:a6:68:c9:aa:6b:6e:7e:11:6e:1b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: Apr 17 07:00:34 2025 GMT
            Not After : Apr 18 07:00:34 2025 GMT
        Subject: CN=3c5afc657c8af03831c9d01e1de1d74c8b12e021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:bb:d0:c0:33:a3:36:1b:86:b5:cb:45:3f:
                    a9:d0:0d:36:19:ed:ba:74:94:20:f7:90:57:52:8a:
                    7b:77:13:9a:d4:d0:9c:c3:8b:c0:46:4e:0d:1d:ac:
                    e4:ad:b1:9f:b6:63:28:be:2d:03:d9:d6:9e:9f:d5:
                    a7:d3:02:ea:ee:e8:05:2a:25:ff:92:4e:32:0a:5d:
                    ab:90:55:c9:aa:cb:3d:02:6d:0e:e8:9d:5e:91:5e:
                    66:a3:72:ba:10:ce:6e:52:3d:05:4c:18:c0:74:1d:
                    58:c5:36:d8:b3:80:d4:6c:5c:d3:68:86:78:c2:b0:
                    6e:f8:80:95:00:6b:c2:90:68:73:db:88:52:3b:e6:
                    2b:3b:af:45:60:95:23:4c:db:ea:24:19:b2:28:fe:
                    be:77:8d:32:bd:9b:02:d7:a2:7a:d4:2b:2a:82:c9:
                    a8:e8:bb:cd:0d:59:78:5e:d4:e4:3a:78:e6:d3:99:
                    ce:02:95:db:d0:31:c5:93:82:71:af:41:1c:94:72:
                    51:73:ab:75:0a:a6:97:3a:f8:77:98:2f:2e:ff:9c:
                    d1:9b:26:a5:36:6a:0d:52:93:c4:1b:c4:9b:4f:c3:
                    f1:af:7a:e9:f0:d5:ea:56:e5:c4:3b:30:6a:37:e6:
                    a2:a2:77:99:83:29:c0:aa:ba:65:ca:36:4c:60:e5:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5A:FC:65:7C:8A:F0:38:31:C9:D0:1E:1D:E1:D7:4C:8B:12:E0:21
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:47:72:70:44:d8:70:2c:60:a6:75:98:0f:ac:11:1b:3f:b9:
         94:11:4d:49:97:10:b5:74:c7:f9:f7:fc:67:2c:fb:ea:4c:07:
         3b:37:c0:50:69:a2:ef:01:a8:37:1a:81:47:fc:88:6a:ad:8d:
         8c:84:c9:73:a9:ba:71:37:6a:f4:bf:e8:0e:03:a0:92:af:e5:
         ce:e8:fa:c1:71:b4:41:11:48:ee:ac:4d:78:a7:3f:df:54:85:
         bd:e4:44:74:99:d6:a4:36:4c:60:71:47:a5:2c:e6:51:0d:82:
         17:61:29:73:dd:72:22:e1:91:8c:b8:06:f1:09:72:5c:8c:1f:
         22:76:56:2e:64:55:16:e0:e4:0b:78:bd:0f:83:14:8f:37:2d:
         7e:ee:bf:61:8f:cd:7c:f8:b3:87:96:63:24:b1:1e:7f:28:04:
         1c:86:f7:44:ad:bf:40:18:71:74:dc:48:d4:26:a0:7e:58:e4:
         e1:05:c3:f8:0e:47:e9:2a:68:6a:dd:7c:15:55:9f:72:8b:d4:
         ee:a9:36:9b:d0:67:d0:8a:e0:c2:37:2c:2d:23:15:bb:6c:d5:
         ef:5b:84:f5:09:d1:52:64:1d:01:f6:fa:19:5e:0e:ac:4a:75:
         ce:84:ff:9c:c5:a6:af:51:4d:0f:99:16:92:3c:13:80:3a:f1:
         c1:51:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:19:47 2025 by rpki-client