Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File:                     eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier:          B1CeeBN3JzH8fgRPF8YUmDExUyDa2eN7PAo4NGAckpU=
Subject key identifier:   C0:7C:E6:CB:5C:A0:85:13:90:0F:6F:57:F1:1F:FC:05:0F:65:7E:C4
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer:       /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial:       019650B6AF84B146B4EB8181F6B3898413A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number:          0E24
Signing time:             Sun 20 Apr 2025 01:01:11 +0000
Manifest this update:     Sun 20 Apr 2025 01:01:11 +0000
Manifest next update:     Mon 21 Apr 2025 01:01:11 +0000
Files and hashes:         1: IDffwXSXahN5-5PWuJ4XE3BnZeo.roa (hash: 1+Z8cC/8+v/4brLtfip5esLm8Gxo3GEZJmCR2m2xqjM=)
                          2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: QI8bxulBs2NWDTEg/7s5q4zlr93C83hGmY94oqthKQc=)
                          3: ltph-6gi_L0tRRLCXMre4piqZuw.roa (hash: MFmQ6yYiN75fl1Cazo0nbfBN0O2fPbQZ0vfcLROz7mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:af:84:b1:46:b4:eb:81:81:f6:b3:89:84:13:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795013346c8d8f23e0128d306997980237db2374
        Validity
            Not Before: Apr 20 01:01:11 2025 GMT
            Not After : Apr 21 01:01:11 2025 GMT
        Subject: CN=c07ce6cb5ca08513900f6f57f11ffc050f657ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:9d:ab:50:31:7e:35:52:37:1a:ae:fe:7c:
                    58:93:12:48:59:31:2a:bf:6b:43:cc:5f:13:ef:4c:
                    51:10:17:30:fe:8b:2e:b2:8c:20:32:7d:c3:de:5a:
                    a0:2c:06:9d:86:04:f3:d6:24:1a:0c:56:3b:5f:b7:
                    d1:6b:b6:9e:d3:e8:c6:05:16:9c:3f:17:60:24:11:
                    38:d5:3a:f7:57:ab:77:17:6b:c0:e7:47:f7:04:38:
                    ea:91:ce:ba:8e:cd:79:18:85:bb:46:d9:cc:25:f8:
                    f6:ff:02:c2:98:07:88:fa:a4:af:a0:7b:f3:36:aa:
                    85:24:39:59:37:4d:ef:0f:da:b5:3b:af:de:32:73:
                    3b:dd:c3:b5:c1:91:b2:f4:a1:ce:86:85:63:50:67:
                    2b:51:cc:f8:e8:44:07:da:f0:83:1b:e1:7d:10:1f:
                    f3:6c:85:66:70:e8:c7:7b:ff:e0:50:18:8c:f5:d8:
                    6d:de:22:00:8d:f9:e8:7f:98:e2:be:62:d4:74:f0:
                    f1:95:b5:4e:a2:aa:51:d6:1b:72:13:a9:13:b3:4f:
                    91:7b:c2:e8:2a:a0:bc:93:89:bc:40:74:4f:be:77:
                    fc:3c:4b:9e:d0:5b:7c:d5:e8:db:b6:fa:cf:40:53:
                    45:07:fe:be:9b:0b:27:d1:db:4f:a9:89:2b:20:82:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7C:E6:CB:5C:A0:85:13:90:0F:6F:57:F1:1F:FC:05:0F:65:7E:C4
            X509v3 Authority Key Identifier:
                keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:8c:e6:34:76:73:e7:1e:94:89:92:f3:9d:ef:2e:94:12:
         9f:26:45:b0:10:2d:cb:ca:e2:7e:0b:f6:4b:96:68:8a:ce:09:
         89:4b:94:0f:51:9f:ca:83:04:24:7d:d5:67:59:38:80:f1:c0:
         bd:03:19:cd:7a:a7:69:cb:91:ea:00:75:d2:ae:56:6f:38:3a:
         e0:e6:6c:90:1f:54:ae:45:6f:f0:05:ee:6e:d4:74:b5:2d:63:
         2e:93:ac:da:c6:4c:ef:3e:26:d6:09:e8:08:69:78:17:b3:d7:
         48:9a:e2:5d:b1:94:15:14:4e:78:37:2d:04:8c:58:14:ee:d6:
         55:52:d5:33:df:c9:ee:15:8c:92:8a:71:f3:c1:eb:69:d2:85:
         b3:13:81:21:8e:45:86:e5:18:dd:fc:db:1e:30:43:42:01:a5:
         8e:40:7b:2c:9e:87:1b:6c:95:8c:ca:28:12:e7:ff:f1:83:4f:
         9b:82:33:da:e9:13:fc:74:2c:d5:1a:6e:52:f7:79:21:62:c7:
         f1:1c:56:fc:65:a2:8e:16:d6:63:66:63:d6:27:7a:1e:86:12:
         47:34:e9:b0:83:4f:d9:18:3a:26:43:d8:a8:f4:37:43:3d:f6:
         4f:97:8d:a8:5e:21:f5:aa:d0:21:ca:b6:8b:f3:fe:29:5b:77:
         1d:01:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:25 2025 by rpki-client