Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
File:                     ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft (raw, json)
Hash identifier:          2Grd22RPH5jgdWhqQNV0Ur3jZcB1JeMkhW5MlkaY0F4=
Subject key identifier:   EB:59:D9:EF:36:82:2B:0F:78:AB:BF:F8:1A:41:30:8A:6E:AA:98:B3
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Certificate issuer:       /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial:       01962B97BC6FBD8193941F02313A9CF29ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
Manifest number:          14EA
Signing time:             Sat 12 Apr 2025 20:01:26 +0000
Manifest this update:     Sat 12 Apr 2025 20:01:26 +0000
Manifest next update:     Sun 13 Apr 2025 20:01:26 +0000
Files and hashes:         1: CmtSe5W47sEvu4dqUbsE8AFHRfo.roa (hash: IMShtZENk7lbdDo/N1aCJsixVqWpjgjzDkLqSHXXRLg=)
                          2: ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl (hash: A+SQv9Blgtg5NrTIzy6p9rQMcNhb+tIRKO1aWoWVku4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:97:bc:6f:bd:81:93:94:1f:02:31:3a:9c:f2:9e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
        Validity
            Not Before: Apr 12 20:01:26 2025 GMT
            Not After : Apr 13 20:01:26 2025 GMT
        Subject: CN=eb59d9ef36822b0f78abbff81a41308a6eaa98b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:da:8d:6f:cb:b7:ce:a9:fc:d9:05:2f:c3:
                    c8:fa:b3:2d:ae:08:60:20:03:55:9f:4b:80:b7:3f:
                    3a:1a:64:5b:8f:1c:06:c5:18:ce:f7:71:35:da:04:
                    87:be:8c:73:fc:d6:fa:d5:5a:69:ff:24:ee:05:3f:
                    d1:63:6b:53:9b:2c:29:d9:91:32:4c:c4:ae:1f:c6:
                    76:6b:18:27:4a:f9:f8:b8:d9:08:97:14:6c:81:59:
                    19:7c:8e:46:5d:d5:17:bd:db:66:d4:d6:31:73:34:
                    59:d9:86:15:10:7b:e1:f4:18:fc:ff:27:c5:3a:43:
                    a0:23:38:04:5c:8d:ba:6e:15:7e:6a:7b:68:0e:a5:
                    56:f3:f8:92:89:a0:b9:9e:4c:f5:cb:00:2d:a3:71:
                    2b:15:46:50:94:69:79:ea:65:dc:c6:70:dc:d0:b9:
                    af:a9:99:2e:f3:a2:db:83:d0:30:ac:bd:e4:80:75:
                    26:74:88:56:b3:a9:a2:47:3a:ae:ba:4b:1f:7a:34:
                    a4:59:c5:99:d1:a8:e3:93:01:98:9d:f7:7e:3f:5e:
                    57:cb:10:38:58:b8:cc:1a:aa:90:44:c2:64:4d:20:
                    33:9e:ec:8f:65:d2:95:f9:19:59:c2:83:8a:c9:c2:
                    29:fe:de:39:04:e8:03:79:89:51:3c:39:31:e6:e7:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:D9:EF:36:82:2B:0F:78:AB:BF:F8:1A:41:30:8A:6E:AA:98:B3
            X509v3 Authority Key Identifier:
                keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:be:ba:c5:26:26:80:50:3f:07:b9:f2:9e:f5:36:13:4b:
         e2:ce:68:d5:33:c6:93:5f:0d:be:cc:d9:d6:c9:c6:95:8e:83:
         79:10:7e:cf:ab:73:52:07:5d:8d:2c:f1:1f:df:e1:af:2e:aa:
         14:44:0d:9e:ae:b0:43:2d:b7:d1:aa:c8:0a:8c:2b:8f:31:f0:
         37:3e:a4:c3:a3:39:b5:78:70:86:ef:95:af:3b:d7:e5:db:98:
         08:02:5b:1e:1a:78:9a:34:eb:cf:cf:c0:37:62:53:a1:82:83:
         82:86:5f:22:33:d6:72:90:0b:9d:62:02:ea:ca:42:b7:fc:e1:
         97:9c:1f:5d:cd:ba:b1:ac:2e:ad:14:5c:21:1e:ff:d5:86:66:
         72:5b:8e:cb:6e:f6:c4:09:c9:1a:4a:ad:ae:46:95:e5:a9:c2:
         7f:98:89:0c:cb:ac:77:bc:86:64:5c:43:3c:76:0c:dd:29:38:
         7e:b5:69:c0:73:85:15:0b:17:ed:41:b4:fe:f6:48:88:fb:28:
         78:0d:28:10:05:b7:48:62:8c:e7:9d:b8:6b:6e:91:37:4f:99:
         d6:bd:71:1f:f4:e6:ef:8a:82:e6:5b:4e:1c:e3:ba:a9:ae:2d:
         d9:8a:b5:b6:d8:c8:c5:6a:ff:28:8f:ee:a1:e3:5a:d4:8a:8a:
         e6:6b:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:27:38 2025 by rpki-client