Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File:                     E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier:          G2Qti48DYiJnpBDNqV3DtQXF1rNmp1pB1NeUbdZfaSs=
Subject key identifier:   E2:2A:D2:BC:71:E5:41:4B:FE:A2:C4:9C:75:F7:BA:17:E7:5F:67:FB
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer:       /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial:       01965D967EBF37DEE2256B2D81F8D2F91A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number:          012B
Signing time:             Tue 22 Apr 2025 13:01:05 +0000
Manifest this update:     Tue 22 Apr 2025 13:01:05 +0000
Manifest next update:     Wed 23 Apr 2025 13:01:05 +0000
Files and hashes:         1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=)
                          2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: 4CKmZD7VmiE1iR6i1aEF2hWpjgMNEVFHtbeMaLUKKl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5d:96:7e:bf:37:de:e2:25:6b:2d:81:f8:d2:f9:1a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
        Validity
            Not Before: Apr 22 13:01:05 2025 GMT
            Not After : Apr 23 13:01:05 2025 GMT
        Subject: CN=e22ad2bc71e5414bfea2c49c75f7ba17e75f67fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:b2:95:36:be:66:0a:db:f3:a6:e7:7f:64:
                    26:c3:be:a7:f4:5b:14:81:ec:23:9c:17:16:9b:80:
                    93:90:5a:e0:c8:76:4f:49:8c:30:52:a9:03:41:92:
                    e7:23:68:43:ef:fc:ac:ae:c0:fd:e9:e6:5e:50:e0:
                    bd:67:2e:17:f8:a0:2e:3c:b6:8e:8d:ef:0f:c6:8e:
                    12:7f:96:c4:14:54:96:87:38:9f:e7:5b:ce:d4:c8:
                    88:96:ea:1f:86:b7:8a:1b:39:25:d8:0f:af:d1:28:
                    0b:b7:0e:db:a3:12:02:5f:81:58:2c:06:83:4b:b3:
                    6c:7d:ed:16:f5:c5:ac:38:3b:3b:e9:d3:c5:0d:03:
                    3c:bb:35:2f:50:26:56:dc:f9:24:7d:22:41:18:f6:
                    3e:a3:67:0c:23:38:31:9d:73:30:81:60:26:5b:0d:
                    5e:40:c2:30:1b:bb:16:22:75:78:0d:ee:2a:7b:8e:
                    6c:98:eb:0d:c7:78:f9:17:78:cb:7d:71:15:c0:07:
                    4b:f3:fc:4a:e3:0b:ac:36:87:c1:07:c5:11:8f:32:
                    d5:7a:70:29:47:cd:46:7c:e0:33:86:4d:e1:5d:27:
                    e5:cb:41:42:e9:d6:6a:99:ec:7e:1a:39:6c:63:42:
                    2d:6c:40:35:4e:22:c7:77:14:dd:c2:36:94:58:0b:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:D2:BC:71:E5:41:4B:FE:A2:C4:9C:75:F7:BA:17:E7:5F:67:FB
            X509v3 Authority Key Identifier:
                keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:ef:b9:fe:d6:db:8d:93:0f:b5:d5:17:31:20:93:92:06:
         ca:42:d7:1c:bd:a4:06:98:f2:d3:c1:6b:ba:6a:89:81:5c:ae:
         05:99:47:f5:e4:93:8c:63:d7:b1:37:fc:0f:98:d9:cb:8f:04:
         3c:1f:55:29:2b:80:7e:cb:c7:dd:2a:0c:b7:dd:e8:da:36:f2:
         2c:25:dc:fe:c8:46:d3:d4:2d:8b:17:e0:0a:f4:92:9e:3c:96:
         bf:5f:59:72:83:d9:c9:55:cd:3c:79:92:af:ef:f9:b7:09:55:
         a7:df:c2:27:25:1f:96:dc:57:02:d4:d9:25:dd:79:91:00:d0:
         3b:fe:7b:45:1f:31:09:93:01:90:91:a2:bb:62:7b:8b:82:be:
         ec:1f:b5:35:93:ec:0a:f0:3f:59:6c:67:db:58:0e:5e:ef:b5:
         b1:f4:6b:2f:e2:b1:50:73:df:af:a6:bf:e5:59:50:a0:ac:85:
         fc:50:59:52:83:c9:2b:f2:b9:fa:93:64:96:92:9a:c0:56:3e:
         1c:6f:c1:f8:8f:f2:b8:66:76:ef:bb:57:28:54:4e:ee:57:33:
         cd:7f:6c:89:ac:ba:49:4e:a0:87:63:1e:b0:ac:c2:bc:95:01:
         25:ab:05:d8:c5:f3:eb:2b:d2:8b:50:3c:e6:56:2c:a5:ae:56:
         b7:04:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:47:48 2025 by rpki-client