Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File:                     eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier:          EEJePedEPu5p5qpse5EwXciDtdAib1+uRRv1xOZ6Gfg=
Subject key identifier:   D9:5A:F9:0C:F9:89:62:B3:33:98:6F:1C:E7:20:6E:7F:EF:05:1E:DF
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer:       /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial:       01963FF9B92C76AC08FAB3C9211A52744D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number:          0B0E
Signing time:             Wed 16 Apr 2025 19:00:52 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:52 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:52 +0000
Files and hashes:         1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=)
                          2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: I9BTESlTNrRUAoDE6t1aWLoxJPeeyHFb2IeRLJSNqm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:b9:2c:76:ac:08:fa:b3:c9:21:1a:52:74:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
        Validity
            Not Before: Apr 16 19:00:52 2025 GMT
            Not After : Apr 17 19:00:52 2025 GMT
        Subject: CN=d95af90cf98962b333986f1ce7206e7fef051edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:60:4c:1c:f4:7f:ef:f0:71:0a:52:dc:ec:
                    f6:05:eb:56:a8:4d:b4:46:e0:96:c5:ef:71:45:df:
                    b7:7f:0b:f3:9f:7d:08:f3:12:fc:82:67:c9:bf:cd:
                    b2:e1:07:55:da:68:87:45:99:4e:7d:45:21:d7:fc:
                    98:36:ef:20:03:f4:d7:30:67:f9:42:cc:eb:4d:2d:
                    18:79:55:02:82:ef:5d:ee:ec:ff:22:b1:ad:13:4c:
                    28:0d:b2:fa:8d:b2:98:35:fb:e3:0a:01:10:6d:69:
                    4e:93:32:ed:b7:a7:05:ca:2b:ac:5f:71:b3:9c:e1:
                    a9:8b:d5:19:da:52:44:e2:b5:46:71:c6:25:2b:00:
                    ac:3f:d2:c1:37:c4:98:45:fc:1c:23:4e:58:62:d6:
                    9e:6f:de:37:e6:ad:3f:a1:63:b1:8c:fd:4e:14:d2:
                    82:f2:6d:32:65:31:3a:de:37:16:f0:62:1e:39:a4:
                    df:12:3c:41:34:36:03:2b:be:df:b9:af:1a:97:00:
                    1b:4e:04:34:33:22:69:6e:7e:7f:93:f6:17:1f:02:
                    33:0c:d9:d0:5d:6b:35:d9:6c:2f:89:a1:c8:d2:fe:
                    bf:22:24:ab:ec:34:31:2d:8a:cd:dd:43:6e:84:3a:
                    fc:91:f5:40:ce:ad:fc:e5:9a:c3:c2:75:14:04:b1:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5A:F9:0C:F9:89:62:B3:33:98:6F:1C:E7:20:6E:7F:EF:05:1E:DF
            X509v3 Authority Key Identifier:
                keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:bd:20:7f:e6:7a:20:e5:b8:65:33:c2:22:27:97:36:b5:d9:
         6b:3c:61:c6:e0:3a:00:68:ef:01:29:7e:d5:ce:9a:97:bf:c6:
         bd:d9:c2:b5:db:45:cf:4c:e2:30:aa:a8:7f:b6:27:64:c3:d6:
         4b:74:ce:ab:95:43:89:37:74:69:7e:0c:74:c7:0b:f4:f9:cf:
         df:12:26:a0:94:dd:43:c1:bb:f5:ff:f7:a3:1b:72:e5:cb:0c:
         d4:7a:2c:7d:69:0e:01:bf:58:b1:54:8b:79:35:53:97:33:ba:
         8e:10:7c:19:d8:68:6d:73:95:39:c4:c1:67:79:ab:93:c3:a4:
         18:ef:11:e6:61:df:6e:a1:35:8f:4b:70:84:d8:b4:9b:41:f0:
         5e:e8:0b:ad:b0:67:66:07:bd:d6:33:db:92:be:fa:b8:85:59:
         65:73:ad:8a:9c:be:16:6b:5d:6d:5a:be:e7:31:53:d7:90:e4:
         62:f3:40:68:d6:ac:39:ef:94:0b:eb:21:28:33:da:f1:47:b6:
         84:48:c3:5d:1b:1a:ac:4d:60:98:32:8b:c7:7b:b4:c6:f7:96:
         b1:8d:ba:da:7a:71:79:f7:a1:aa:2d:00:02:ad:8b:ba:e4:bf:
         08:a3:ef:32:a5:a0:b4:c5:7b:8b:6c:a1:19:52:3f:66:0a:41:
         29:ca:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:23 2025 by rpki-client