Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File:                     E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier:          1sollyqB4bbStc/Rl3126oT94CzCqjIl5loibE4D1qA=
Subject key identifier:   B4:02:02:7D:28:4B:D0:F4:06:01:1A:86:32:6F:5A:9F:81:D5:06:FB
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       0196293B1E2FC812FC7AB3CD89719D3F266F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number:          14ED
Signing time:             Sat 12 Apr 2025 09:01:02 +0000
Manifest this update:     Sat 12 Apr 2025 09:01:02 +0000
Manifest next update:     Sun 13 Apr 2025 09:01:02 +0000
Files and hashes:         1: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: dRaaLscHISwHF1JLoM3s/2A1zcPRwMrz7lA8+oGo+mA=)
                          2: Oi8bBj7abbUUGWgLnipKRlAWhqg.roa (hash: uBPR6lVF7mLe6knRM5SQ0/u91d8nwbpqoLhQPG3UKIM=)
                          3: jbGvVuouVUGuodE3wSjw_6Kl_WQ.roa (hash: 0q3TS/imhDlO4EU7lxVd1fwILuDkXznK6ePE6/PQttU=)
                          4: vyq7frrOZ18P3bS0LsRzkLQVayM.roa (hash: ahnDTdH2Zi2KbYKjlRjjF3km1v/4SmSVHP2tW2n0dn0=)
                          5: xqgSeGIVEF82G1UQzaanBBXZ4j0.roa (hash: DA3L+prbTCIOti4LbG2Ch15XaVBtWVA8dw3jHgvPOJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:3b:1e:2f:c8:12:fc:7a:b3:cd:89:71:9d:3f:26:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Apr 12 09:01:02 2025 GMT
            Not After : Apr 13 09:01:02 2025 GMT
        Subject: CN=b402027d284bd0f406011a86326f5a9f81d506fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:7d:c0:2b:4a:69:c5:24:75:a5:b2:da:b9:
                    12:78:c6:1b:20:c6:93:3d:a7:e0:37:66:e5:cc:cb:
                    f7:ef:c9:68:86:52:56:01:44:13:34:88:8a:f9:a0:
                    c3:69:15:77:0c:2d:29:fd:85:58:38:68:58:50:73:
                    26:bd:a2:c4:03:61:92:e1:d6:56:6f:75:15:da:df:
                    86:05:e9:08:f4:5d:3b:61:7f:e7:c2:62:36:d1:89:
                    6b:b7:d9:ab:78:da:e1:13:b6:46:91:0b:5a:d0:bf:
                    a9:6c:1d:25:52:32:31:03:58:ab:b5:6d:ea:a0:1e:
                    7e:4f:f8:db:cb:f7:3c:36:18:ee:4d:af:52:90:35:
                    c3:22:a9:ac:c6:99:68:f8:64:45:e9:1d:68:95:5b:
                    27:eb:5f:1e:fb:79:3d:87:69:c2:40:57:06:1b:89:
                    90:6f:ce:54:a7:24:6f:0c:22:8a:33:42:40:81:c4:
                    c9:65:e1:23:26:36:ca:79:53:f5:b7:64:5c:e4:bb:
                    c4:a7:7b:9c:9d:e3:65:c6:c9:55:e3:ab:7f:e7:14:
                    e3:b2:eb:39:e9:4a:2c:03:9c:67:8a:59:65:2a:cd:
                    28:9d:7e:c8:63:5e:e7:d6:a1:3f:2c:62:ea:fb:ba:
                    1c:c6:80:e8:53:e5:52:4d:65:02:42:9d:b4:01:91:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:02:02:7D:28:4B:D0:F4:06:01:1A:86:32:6F:5A:9F:81:D5:06:FB
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:58:48:92:22:0c:4b:d4:73:f5:98:27:57:ee:dc:c8:de:
         17:e6:3f:75:3f:b8:28:52:01:f8:72:60:54:97:ff:03:f0:a1:
         ec:6c:00:62:35:9c:41:f1:89:38:42:bc:10:c9:ed:f4:e9:19:
         c6:ed:c2:ab:fa:15:dc:62:69:88:6b:54:25:1d:23:53:32:83:
         bd:4d:c7:a6:55:02:df:b8:26:65:9d:3e:b2:3f:f8:51:7d:0f:
         06:2c:38:d7:f3:01:5e:98:fb:01:ee:a2:e4:f0:7f:ea:9d:c1:
         dd:cc:56:e8:51:22:4b:1e:44:a0:a9:ba:0f:7f:53:e5:93:45:
         31:95:bf:bf:46:e8:1f:2f:c4:e7:90:87:cc:c5:be:93:56:54:
         f3:7a:f8:e7:b2:d1:46:ab:82:1d:82:2c:b0:98:b6:c8:6a:c0:
         6d:30:5f:a4:ee:d6:91:35:2f:09:0e:fa:1c:d7:b1:44:9a:7f:
         4e:5f:bd:41:b9:6a:c8:42:87:c2:db:d8:1e:1d:20:75:26:c2:
         95:3a:c9:7f:f4:f2:b3:f8:43:f5:47:24:94:11:b8:6a:8d:54:
         93:2b:62:c2:35:80:1f:b5:76:c2:d0:44:5e:5b:6e:a3:29:48:
         a4:ce:07:db:52:11:d2:31:88:55:b0:a1:e5:3d:d5:db:ef:4b:
         36:41:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:21:27 2025 by rpki-client