Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File:                     ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier:          tp/PcuWadReviOHqKLR84XoUSAFGwUOBUBLk4fwcpQo=
Subject key identifier:   78:25:64:2E:0B:2E:93:69:C5:D5:1A:BF:35:15:22:71:5C:71:F5:16
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer:       /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial:       019643D5F59D45BD341117919C44F599665F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number:          14F8
Signing time:             Thu 17 Apr 2025 13:00:17 +0000
Manifest this update:     Thu 17 Apr 2025 13:00:17 +0000
Manifest next update:     Fri 18 Apr 2025 13:00:17 +0000
Files and hashes:         1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=)
                          2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: 0Nj1BUgnZdljFKjhBZtPYmwomUezqNbHlQx9SSTG9Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d5:f5:9d:45:bd:34:11:17:91:9c:44:f5:99:66:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
        Validity
            Not Before: Apr 17 13:00:17 2025 GMT
            Not After : Apr 18 13:00:17 2025 GMT
        Subject: CN=7825642e0b2e9369c5d51abf351522715c71f516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:86:e7:f9:f4:2d:c2:e2:d6:a0:4a:b3:2b:b0:
                    83:c3:6b:71:cb:21:e3:5b:05:c4:db:e1:a4:ef:13:
                    10:f6:d1:f8:8d:8e:aa:82:e5:5a:d0:b3:46:0f:e6:
                    d7:fd:3f:58:3b:4b:6b:b8:50:01:28:de:b6:6c:73:
                    d4:67:0b:25:cc:95:e6:66:0d:83:4e:72:b1:9f:65:
                    91:b4:be:ce:de:66:de:d9:46:21:a3:8a:0b:8e:1f:
                    10:9c:b8:f5:b5:83:1a:98:8c:51:c6:30:c4:59:db:
                    54:63:13:f6:1c:3f:96:b3:10:0b:f2:6c:23:11:6e:
                    b6:1a:65:72:c6:16:8f:47:0d:69:cb:1c:30:85:17:
                    48:d1:49:30:82:2d:ee:dd:0e:fc:21:14:af:a4:fb:
                    12:6a:4c:44:da:67:ce:58:56:f9:50:fc:46:9a:4a:
                    1b:62:a6:14:df:d3:ea:7e:87:21:63:58:22:8f:b8:
                    48:c8:49:20:c6:08:c2:6f:c9:9b:11:a9:f5:ec:e9:
                    3c:99:4b:73:b2:eb:4c:af:3b:24:31:5c:39:c8:73:
                    59:ef:3d:f2:be:16:65:57:89:50:91:23:d5:d8:35:
                    ef:09:68:98:e6:4f:56:1f:27:ae:1b:7e:89:35:3e:
                    51:93:85:e5:d9:d8:23:6d:2a:97:0a:28:e0:5c:0e:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:64:2E:0B:2E:93:69:C5:D5:1A:BF:35:15:22:71:5C:71:F5:16
            X509v3 Authority Key Identifier:
                keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:96:73:f4:bc:d6:de:12:4b:a3:40:39:78:0d:e8:bf:73:9a:
         1b:07:99:99:96:7b:8b:68:ec:ac:10:4f:a4:cf:8e:a3:39:b2:
         11:ca:cd:59:b7:99:5c:8e:3b:ce:a3:2f:ab:08:f6:5b:4c:13:
         7a:d9:dc:59:f4:11:27:b1:cf:80:ec:db:67:83:ad:06:4a:d9:
         67:a1:d7:b5:36:50:8f:7e:0e:9a:a7:08:89:5e:71:71:22:d4:
         f9:52:7b:40:23:40:ba:f6:2e:97:48:2d:5e:dd:b7:70:5d:30:
         77:c4:78:64:cd:15:0b:86:52:2e:83:62:4b:37:7a:db:83:fc:
         73:76:39:d3:ce:7e:a1:57:ec:47:d0:c7:84:52:33:69:48:01:
         ae:ff:76:7a:a6:42:65:7f:53:d6:42:d8:45:c0:40:04:d8:96:
         22:40:82:75:71:33:4f:f9:81:81:64:d4:58:47:b0:f5:cf:25:
         9a:bd:52:ec:4e:37:fa:f3:e7:f6:4e:c0:a9:b4:1a:30:61:55:
         a3:0b:6c:a5:50:a9:dd:ae:6a:d9:a8:b2:48:2c:eb:a5:21:8d:
         b6:40:8d:69:2b:b1:1d:99:91:b1:51:c4:f9:f8:3d:bf:ed:92:
         26:57:96:f4:84:9d:7c:b2:01:29:4c:b0:8c:0e:0d:b6:f7:25:
         69:1a:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:18 2025 by rpki-client