Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
File:                     7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft (raw, json)
Hash identifier:          9QA//3zo/d76ommiQETqM6SQRLswMs5WPXPiAdV1eak=
Subject key identifier:   A3:9C:A4:3D:EF:80:E0:E4:C4:57:66:D4:9E:C6:04:92:36:C1:5F:7B
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Certificate issuer:       /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial:       0196488E8CBC6D234FA3B8BD47ED067BE15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
Manifest number:          0512
Signing time:             Fri 18 Apr 2025 11:00:23 +0000
Manifest this update:     Fri 18 Apr 2025 11:00:23 +0000
Manifest next update:     Sat 19 Apr 2025 11:00:23 +0000
Files and hashes:         1: 5klL4oJYCAWVCtSt4Aa3ZqfkGO4.roa (hash: qBVepds6Syb8DaPWB6RynfxxSA3Sp6OU8dF9D31HEW4=)
                          2: 7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl (hash: R2vNDjPvT5gJLUdkiUs5jMIlgHlDszWvlApBTDgIb5w=)
                          3: 8WMbOpSCq-43yrjp-Gue986sGls.roa (hash: lSFJ6DNUnrryZBRZ4iwSdCLZNyBNPcmv/tCrUVWgz2s=)
                          4: E6SsxrL0YU9sVh9I8GUbKrOvT1M.roa (hash: YCaqr7sid2K9NSVR3DjQ0cVKpB+Nv1AlUmt5Gzw4TLs=)
                          5: G40JELkFkjinZ7Bg4-gGMDe46ac.roa (hash: DxEJ7/YxUtp6mDjGz6vAkm+fJcRrhUMEE1ib29ZnNNg=)
                          6: dqHEZ0oARNoaVvG3IlOzVbCxw8E.roa (hash: Lu4R8BGvmtKvcPKaLg2jGVkmpU76/ij/EjZ+FuotBOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:8e:8c:bc:6d:23:4f:a3:b8:bd:47:ed:06:7b:e1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
        Validity
            Not Before: Apr 18 11:00:23 2025 GMT
            Not After : Apr 19 11:00:23 2025 GMT
        Subject: CN=a39ca43def80e0e4c45766d49ec6049236c15f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:84:50:af:48:78:85:c2:08:41:e7:6d:7a:
                    1b:3d:51:3d:f4:18:6e:84:3f:2d:7c:03:31:9d:e4:
                    82:86:d6:5b:b7:88:0e:59:97:db:9c:10:b2:cb:10:
                    4e:46:48:4f:37:87:af:68:36:39:c7:68:2b:50:88:
                    f7:35:ad:1e:36:fc:a4:4c:fb:70:2c:46:a1:22:9f:
                    7a:5b:e1:74:78:d2:73:ce:fc:da:ed:35:fe:5b:94:
                    f7:e2:ca:a5:38:69:a4:4c:ba:41:86:2d:0f:ec:2f:
                    53:78:10:3a:ed:ac:b6:bc:ec:bd:f9:1b:2e:70:46:
                    3f:2d:34:6c:f9:82:af:c1:4e:ea:56:49:35:07:ed:
                    04:7b:f9:67:60:c6:6c:f0:7d:33:a8:6b:fb:27:b4:
                    1a:71:9a:63:2b:51:b4:2e:46:98:24:51:67:23:fe:
                    93:0a:a4:b2:33:81:e9:82:da:6d:ac:b3:a3:07:2b:
                    e7:a9:e3:00:d1:fe:dc:f3:f2:96:69:93:9b:73:6d:
                    f7:b5:4a:5e:9e:9f:66:62:6c:1e:8c:ea:4f:33:8c:
                    78:14:a4:f4:80:c7:82:c4:89:c9:97:62:51:52:18:
                    a1:58:49:96:7f:cb:e6:1e:35:12:d9:3e:ae:af:30:
                    a2:ed:38:5c:99:01:10:55:7b:6e:ea:24:9d:66:f7:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9C:A4:3D:EF:80:E0:E4:C4:57:66:D4:9E:C6:04:92:36:C1:5F:7B
            X509v3 Authority Key Identifier:
                keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:56:ee:cf:91:d4:c4:d4:78:75:97:cf:46:95:8c:36:9f:
         70:4a:d6:10:51:1c:75:20:af:9d:5d:ac:07:4f:13:6c:08:86:
         b6:76:79:5e:38:a7:5e:52:31:f8:31:63:b1:51:00:fa:87:a3:
         0a:55:c8:93:80:df:18:45:2e:e6:df:6f:a6:0f:65:06:c5:af:
         d7:7d:f0:3f:28:59:95:2c:d7:57:00:a1:36:c0:0b:b8:14:98:
         74:3c:85:26:66:40:27:b2:89:f1:12:7a:b0:c6:34:ec:28:54:
         87:fa:cc:5b:d2:c2:73:71:96:66:4b:d0:50:64:9b:7c:f8:23:
         a6:fa:d4:32:c3:5d:2e:ee:b5:6b:c7:1f:7c:e2:b7:f5:9e:98:
         a0:28:55:cc:8d:e4:64:44:40:d1:2d:6b:c6:9d:d2:56:94:06:
         56:74:2f:2c:f9:50:3f:7d:84:e6:33:5f:bf:e8:b5:bc:24:d7:
         3f:9a:9d:b6:cf:10:ed:ca:84:2b:97:b7:a6:30:42:2a:c8:68:
         3a:03:64:4b:6e:4a:68:5c:fd:3e:26:54:8e:8c:c8:b2:b8:bf:
         44:98:74:31:49:30:48:0a:a1:1f:cb:07:4e:41:fa:9e:f8:22:
         12:46:fc:82:75:00:62:7c:b0:48:56:d6:93:42:21:16:b4:43:
         5c:b5:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:12:06 2025 by rpki-client