Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File:                     eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier:          DyV4pTTC9FAN3Eu33Hk/y9tqBT3gvejmS2yC4F2FcHw=
Subject key identifier:   18:97:DB:B8:46:19:FF:61:2B:1F:5A:7D:A8:BB:92:9C:C1:5F:C4:FC
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer:       /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial:       01962CAB39A01C6025105733010CB7CB1F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 01:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 01:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 01:02:20 +0000
Files and hashes:         1: GrkcftVthMbuFOuUmrwl5HnX76A.roa (hash: vQYdY8EKtEz2Hu89OKKocq2BRdvKpSXmSdv2pqjq+sg=)
                          2: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (hash: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=)
                          3: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (hash: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=)
                          4: aTmEQc7rZSqiS9xlo8D5J910hiA.roa (hash: gp8EnuKJWDEH/vTaQx7oV8ya6rcqLHa/Gr9Zkh0GUXA=)
                          5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: XSU8Rq0hqaogMvADInLswv8TPMZNfJOkr5MeZZi66C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:ab:39:a0:1c:60:25:10:57:33:01:0c:b7:cb:1f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
        Validity
            Not Before: Apr 13 01:02:20 2025 GMT
            Not After : Apr 14 01:02:20 2025 GMT
        Subject: CN=1897dbb84619ff612b1f5a7da8bb929cc15fc4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:62:ad:83:32:7e:a2:3e:77:73:79:2d:c2:
                    cb:6e:17:5a:17:13:28:1f:55:3d:18:69:d9:c6:3f:
                    d7:14:ab:bd:2a:f7:10:ae:c6:34:92:fe:85:3d:3e:
                    15:99:a7:41:2b:4b:a1:7e:e8:66:02:6d:73:eb:2c:
                    e0:e2:8b:cf:5a:b5:1f:9d:85:9c:4b:40:df:f2:d3:
                    e2:de:cd:de:8c:8d:da:63:4f:c6:b0:44:1a:3f:9b:
                    3b:7c:88:c2:5b:1f:c8:ff:25:fc:3b:c4:95:76:81:
                    a2:4b:60:be:bf:7a:27:61:f3:8b:70:eb:6d:81:94:
                    44:86:75:b8:72:4d:95:6d:ab:d2:88:8b:7d:19:07:
                    47:8a:56:00:58:26:6a:40:f0:4c:3b:f8:96:19:e8:
                    ed:64:9b:86:87:19:8f:7f:19:17:db:9d:8a:67:be:
                    9f:5f:ce:c0:8a:cb:c6:57:23:62:07:2b:4a:2a:7a:
                    ff:72:79:be:fc:23:aa:8f:00:c7:8d:e8:ee:dd:c1:
                    09:61:01:30:be:db:86:f2:49:af:47:be:be:5e:42:
                    6c:7e:ba:b5:77:95:f2:c7:7f:be:86:f8:ed:9c:93:
                    fa:af:c0:dd:e4:a5:97:22:5c:e5:48:f0:2c:5d:15:
                    17:c6:e7:c8:61:29:86:de:d1:c7:f4:be:61:52:b8:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:DB:B8:46:19:FF:61:2B:1F:5A:7D:A8:BB:92:9C:C1:5F:C4:FC
            X509v3 Authority Key Identifier:
                keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:cd:a1:cf:95:9a:1c:e4:21:58:79:4a:7b:06:46:9b:a5:a0:
         0a:fa:ef:40:87:af:51:d6:bc:7a:78:5b:5e:ac:f2:97:f8:02:
         ce:18:e2:a1:ec:8b:5e:d0:e8:dd:6d:97:be:8f:48:8e:a8:7f:
         22:fe:cf:06:e4:60:69:f4:ad:06:cb:c4:6e:6d:bc:d5:a3:6b:
         e4:bd:07:3a:9b:2c:6f:33:6c:14:64:49:22:e8:3e:7d:fa:aa:
         07:d2:64:55:56:67:2d:63:53:c5:aa:59:bb:e1:9a:36:9e:c2:
         5b:d2:29:98:92:2d:a5:2f:1c:7c:d4:1b:8b:d9:1e:0c:ed:a5:
         5b:45:8f:07:9e:9f:2d:f1:bb:a1:9b:c0:81:87:58:c9:d5:96:
         1e:8e:98:3d:2a:56:45:1a:0b:a9:48:e5:39:dd:ac:b7:ac:4e:
         6b:b4:35:e8:22:88:64:aa:ab:8d:d4:da:b8:79:7e:79:5a:50:
         2d:21:9e:03:d6:a1:c4:4e:22:43:a3:8c:68:d2:79:75:6e:b4:
         92:e0:02:47:e5:5f:f3:52:a9:0c:1a:2d:1e:f0:ad:b1:ac:b3:
         a8:c4:14:1e:eb:e4:e9:dc:19:ab:26:1d:ac:30:1d:61:53:29:
         ce:6e:09:6a:b2:7d:98:40:26:d5:1c:bc:30:2b:64:b4:6c:d4:
         da:89:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:58:33 2025 by rpki-client