Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File:                     _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier:          UEcHw/6Om14Gg+3xdeF5BBZHrDFTqXMffmOJka0Lujg=
Subject key identifier:   62:FE:42:18:75:1F:1A:28:27:F0:A4:C2:63:E2:0D:6B:CC:A7:CB:FF
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer:       /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial:       01963FF9C409AE9DCCE77F8F970933B4439A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number:          0B1D
Signing time:             Wed 16 Apr 2025 19:00:55 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:55 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:55 +0000
Files and hashes:         1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: 5w5Em3Bog2SVH7obLrhn9Q8Tp7LhvdLUmGnDs6p8QGg=)
                          2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:c4:09:ae:9d:cc:e7:7f:8f:97:09:33:b4:43:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
        Validity
            Not Before: Apr 16 19:00:55 2025 GMT
            Not After : Apr 17 19:00:55 2025 GMT
        Subject: CN=62fe4218751f1a2827f0a4c263e20d6bcca7cbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:43:8c:0b:f1:9c:91:d9:7f:62:da:45:11:
                    29:46:b6:35:f7:f8:c3:fe:12:36:c3:a1:37:d0:13:
                    ef:d2:35:30:21:20:52:01:3f:a0:fb:fb:4e:89:25:
                    44:4e:88:02:43:44:7b:00:66:96:b9:f1:a5:82:b4:
                    90:45:a9:bb:ff:30:35:1c:9f:95:16:ac:d8:14:f7:
                    42:2b:a6:9c:9f:0d:8f:fb:6c:e5:6e:7d:9f:5c:9a:
                    02:f8:e8:57:be:bf:c1:ac:23:da:c9:95:cb:03:8b:
                    92:cc:56:07:3e:19:6b:69:7e:40:93:63:c0:88:d3:
                    8a:94:e4:15:b1:d6:f3:e4:35:8a:ba:8f:d4:a1:f4:
                    af:af:92:3e:a2:ac:55:43:c1:aa:6d:9b:a4:df:c0:
                    ce:57:43:84:9c:f1:fe:69:b9:76:2e:c5:d6:61:14:
                    f4:d9:e1:16:b1:4e:f4:28:8e:4a:54:bc:36:4e:40:
                    45:16:51:ec:51:c2:03:ab:fd:ab:14:d9:e9:48:8d:
                    13:40:7b:33:87:38:51:de:ec:9a:4f:0f:18:2e:50:
                    d1:ef:78:ba:c5:7c:2f:74:87:29:cc:67:13:31:9d:
                    40:a7:23:18:ac:22:11:ef:a8:28:5f:d3:71:20:6d:
                    17:3b:ee:44:a3:6d:a5:46:b3:91:2c:e4:6c:73:eb:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FE:42:18:75:1F:1A:28:27:F0:A4:C2:63:E2:0D:6B:CC:A7:CB:FF
            X509v3 Authority Key Identifier:
                keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bf:98:41:11:f9:f2:97:e9:15:95:d4:fd:1e:37:8d:fe:d7:
         79:3a:c8:3f:29:f4:f5:9b:9d:92:0a:d0:27:29:2d:07:f9:e6:
         11:9e:bb:06:d7:80:c8:72:74:26:2e:ec:73:c7:fd:a8:f0:32:
         78:6c:25:37:ff:49:a7:08:81:6c:72:ca:f6:a1:30:73:77:7a:
         41:ce:bb:2a:83:19:45:5d:79:6d:02:59:76:59:d5:97:a1:46:
         80:9a:a9:45:fe:7f:47:6e:23:74:f9:52:27:db:b5:ed:da:d0:
         a0:ab:a0:45:77:63:c8:de:4b:0e:be:47:97:68:39:72:66:95:
         83:38:32:c3:68:70:12:f6:cc:c8:e1:df:d3:ea:c5:78:7e:8f:
         03:0e:6e:a7:90:41:6b:da:d8:c0:62:a4:bb:92:cc:50:a4:10:
         63:43:15:88:22:92:03:d1:0d:14:54:32:d5:9a:5b:08:b6:2c:
         0f:21:2f:15:f0:6f:b4:a7:64:9c:de:3d:e6:06:da:43:5b:c3:
         66:c7:a2:06:84:d2:3d:ad:56:f1:b9:bd:9c:d1:4f:2d:06:00:
         06:b2:32:9d:2f:0c:62:83:55:99:56:04:9c:93:6e:6f:43:ab:
         6b:e3:8c:d5:13:fb:ec:9f:47:97:d4:71:ed:e6:9a:8d:5c:fb:
         43:b8:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:59:20 2025 by rpki-client