Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
File:                     eBmwlu34dg6OUA-UFpvAA3iulHU.mft (raw, json)
Hash identifier:          2fvHrLuFlcds3MVw4Iqtg5j9Fns7J5haMiae+edVxII=
Subject key identifier:   6C:96:37:8B:CF:20:D5:6F:5E:F4:8B:92:F3:2C:4D:DA:44:3B:AC:7C
Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
Certificate issuer:       /CN=7819b096edf8760e8e500f94169bc00378ae9475
Certificate serial:       01964DB540F1A7D418D3465CB391A75C9E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
Manifest number:          103B
Signing time:             Sat 19 Apr 2025 11:00:46 +0000
Manifest this update:     Sat 19 Apr 2025 11:00:46 +0000
Manifest next update:     Sun 20 Apr 2025 11:00:46 +0000
Files and hashes:         1: eBmwlu34dg6OUA-UFpvAA3iulHU.crl (hash: hOvFDXiMeg2BEynFCO3U5ydh8o0ziIICv8fqjtOFT9A=)
                          2: kvpjW1OQ3nnqnZospDXyTTjms3c.roa (hash: jdHb9YcJtduSRgTK6EOa2Lgs5rNOzEsJ93AqGYpkqHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:b5:40:f1:a7:d4:18:d3:46:5c:b3:91:a7:5c:9e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475
        Validity
            Not Before: Apr 19 11:00:46 2025 GMT
            Not After : Apr 20 11:00:46 2025 GMT
        Subject: CN=6c96378bcf20d56f5ef48b92f32c4dda443bac7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:61:93:f8:1e:3c:37:01:be:b5:ae:2a:c2:
                    42:9b:62:bd:fc:b8:9c:ca:c2:6b:ad:d5:71:95:88:
                    58:74:e4:21:0f:89:e0:97:47:e5:1c:b7:fa:4f:14:
                    e5:97:17:5d:26:06:9e:0a:9d:83:cc:a9:f3:52:e7:
                    c8:0e:86:9b:bd:83:29:0b:6b:c8:38:53:06:49:ff:
                    82:b7:03:83:c9:e4:ae:16:a7:b2:e1:8c:da:77:b2:
                    49:79:d2:12:a6:f4:63:fb:8f:b6:fb:52:98:1e:e5:
                    7b:4d:73:11:6c:0b:38:6c:f3:94:8b:81:39:85:61:
                    1c:fb:f6:93:bd:30:76:b8:0b:87:ae:37:64:20:4b:
                    1e:1d:4b:4c:db:30:da:60:88:9a:6e:36:4e:71:cc:
                    30:4a:04:bc:42:54:30:da:e1:a9:bd:55:8c:7f:96:
                    e3:a9:9a:e3:08:c7:3f:0e:88:8c:e0:39:4a:91:73:
                    55:97:43:1b:6e:f4:41:bf:18:69:7f:7f:de:33:c9:
                    18:d4:5c:a0:fa:99:e9:14:bc:eb:85:24:a4:49:f0:
                    72:a4:9b:58:39:37:db:fe:c5:4c:16:93:c8:24:8b:
                    fe:1c:d8:0f:72:0b:b4:85:80:9b:85:66:a6:dc:61:
                    07:c3:d8:64:62:11:24:29:fd:5c:9d:d2:6f:cf:4f:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:96:37:8B:CF:20:D5:6F:5E:F4:8B:92:F3:2C:4D:DA:44:3B:AC:7C
            X509v3 Authority Key Identifier:
                keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8e:6f:8d:55:6f:ba:2b:33:ec:f9:fe:c5:4e:72:84:cf:a9:
         e1:9f:8f:3a:b8:02:f0:76:b6:dc:a6:25:a4:03:cd:a1:46:98:
         69:44:fb:a7:a9:ff:fd:19:90:39:76:e9:42:9d:f5:67:30:c2:
         61:ae:a4:0c:14:4f:07:97:b5:dc:60:fa:a9:e5:27:da:76:bf:
         d2:35:a8:79:ff:16:fc:e3:81:5b:f1:0c:72:44:3f:6a:36:08:
         0c:ab:9f:07:19:05:e0:45:33:6c:31:12:1b:b8:76:e4:0f:89:
         53:78:20:f9:d4:bd:8e:51:0a:8b:9b:98:2b:06:7c:f8:d7:5b:
         47:69:d1:8c:18:5e:8a:4d:bc:38:81:56:11:39:e5:1e:e9:13:
         07:3e:19:43:c7:f3:51:27:58:83:fa:87:b5:2f:4e:43:94:99:
         7d:6c:6a:df:a9:09:81:10:7f:41:cc:c2:c9:b7:56:c8:f5:26:
         e8:f8:ce:b5:9d:54:15:4b:ab:d1:bc:1b:fa:1f:2e:0f:d5:00:
         c4:a8:90:e2:42:88:33:0f:85:6b:f9:57:30:1f:50:c6:ca:45:
         70:5d:a4:c5:42:f5:8f:4a:ea:64:5e:ab:49:a0:5a:03:1a:8a:
         39:26:f1:16:52:6c:2a:a8:e9:83:22:29:18:27:f7:6f:f2:02:
         1a:83:4d:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtUDxp9QY00Zcs5GnXJ4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTliMDk2ZWRmODc2MGU4ZTUwMGY5NDE2OWJjMDAzNzhh
ZTk0NzUwHhcNMjUwNDE5MTEwMDQ2WhcNMjUwNDIwMTEwMDQ2WjAzMTEwLwYDVQQD
Eyg2Yzk2Mzc4YmNmMjBkNTZmNWVmNDhiOTJmMzJjNGRkYTQ0M2JhYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm9hk/gePDcBvrWuKsJCm2K9/Lic
ysJrrdVxlYhYdOQhD4ngl0flHLf6TxTllxddJgaeCp2DzKnzUufIDoabvYMpC2vI
OFMGSf+CtwODyeSuFqey4Yzad7JJedISpvRj+4+2+1KYHuV7TXMRbAs4bPOUi4E5
hWEc+/aTvTB2uAuHrjdkIEseHUtM2zDaYIiabjZOccwwSgS8QlQw2uGpvVWMf5bj
qZrjCMc/DoiM4DlKkXNVl0MbbvRBvxhpf3/eM8kY1Fyg+pnpFLzrhSSkSfBypJtY
OTfb/sVMFpPIJIv+HNgPcgu0hYCbhWam3GEHw9hkYhEkKf1cndJvz08P+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyWN4vPINVvXvSLkvMsTdpEO6x8MB8GA1UdIwQY
MBaAFHgZsJbt+HYOjlAPlBabwAN4rpR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xYmNhNmEtNTExZS00MTUwLTljZmEt
YzUyYzZjMGUzYThhLzEvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xYmNhNmEtNTExZS00MTUwLTljZmEtYzUyYzZjMGUzYThh
LzEvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArI5vjVVv
uisz7Pn+xU5yhM+p4Z+POrgC8Ha23KYlpAPNoUaYaUT7p6n//RmQOXbpQp31ZzDC
Ya6kDBRPB5e13GD6qeUn2na/0jWoef8W/OOBW/EMckQ/ajYIDKufBxkF4EUzbDES
G7h25A+JU3gg+dS9jlEKi5uYKwZ8+NdbR2nRjBheik28OIFWETnlHukTBz4ZQ8fz
USdYg/qHtS9OQ5SZfWxq36kJgRB/QczCybdWyPUm6PjOtZ1UFUur0bwb+h8uD9UA
xKiQ4kKIMw+Fa/lXMB9QxspFcF2kxUL1j0rqZF6rSaBaAxqKOSbxFlJsKqjpgyIp
GCf3b/ICGoNN/g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:18 2025 by rpki-client