Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
File:                     EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft (raw, json)
Hash identifier:          4Qpgbp0KP6po8Z/0Yl/iZl9Ao90PiIoxjQwbgN2aYfA=
Subject key identifier:   5C:68:CD:F4:CF:72:D3:DD:CA:9C:9B:BA:23:15:FE:87:73:36:51:83
Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
Certificate issuer:       /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Certificate serial:       01962B2A3DBFB9F9900D046A2641F2E41712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
Manifest number:          0482
Signing time:             Sat 12 Apr 2025 18:01:50 +0000
Manifest this update:     Sat 12 Apr 2025 18:01:50 +0000
Manifest next update:     Sun 13 Apr 2025 18:01:50 +0000
Files and hashes:         1: 9Z7pH5NPnAqikrLECUV4KgNs0A8.roa (hash: MDaAz2g07ukZgilrtHl7Gypl8ywa3pObRf5OUvVo4KA=)
                          2: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl (hash: q4jLpP5zfNlRWB6Reag/XwdBq1GWRS3LbYs7Zie0wQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:2a:3d:bf:b9:f9:90:0d:04:6a:26:41:f2:e4:17:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
        Validity
            Not Before: Apr 12 18:01:50 2025 GMT
            Not After : Apr 13 18:01:50 2025 GMT
        Subject: CN=5c68cdf4cf72d3ddca9c9bba2315fe8773365183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:9a:ce:fc:06:fa:f4:15:84:cd:f5:49:fa:
                    82:7f:6e:3d:02:69:1b:e3:ce:37:7a:8b:9f:f7:87:
                    c6:15:6a:ab:34:fc:f0:7c:9e:14:65:57:38:24:f0:
                    b6:93:d9:bd:d6:e7:12:e1:99:a2:2a:95:36:01:d3:
                    99:b8:c5:04:5b:cc:26:9c:af:e6:24:15:ae:8e:3b:
                    3b:ed:2d:84:47:35:b2:9e:7b:59:1f:72:4a:d6:8e:
                    a1:51:0c:ee:f4:0c:ed:71:18:c1:52:69:b2:6d:e2:
                    2e:7f:ed:4a:45:86:cd:69:76:65:e4:d2:0a:70:59:
                    52:47:05:af:eb:ff:51:ba:f0:50:04:78:a3:e6:b2:
                    21:eb:54:4e:26:5f:66:9d:02:f5:99:d2:f9:93:08:
                    48:e6:e9:fd:ac:71:80:55:eb:3b:3c:b9:05:bb:2f:
                    b9:98:d5:82:74:bc:7a:89:c8:ab:c3:e9:db:a5:1c:
                    f4:fe:ec:c0:c7:19:f9:80:1a:cb:8e:59:9c:d2:4b:
                    04:71:7d:0b:f4:47:d2:bd:bf:3f:80:f2:13:50:33:
                    da:25:87:89:a5:77:73:64:82:10:86:df:1b:be:5c:
                    5c:ce:70:a5:f1:58:76:45:0f:d3:33:28:e3:08:a9:
                    34:92:92:1d:04:19:8d:05:55:14:91:3d:9e:0a:0d:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:CD:F4:CF:72:D3:DD:CA:9C:9B:BA:23:15:FE:87:73:36:51:83
            X509v3 Authority Key Identifier:
                keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:12:dd:5d:20:21:e9:33:87:9b:68:6e:f9:c6:0c:10:ac:82:
         b4:b6:e7:cd:f8:38:7d:43:63:be:51:d8:b3:46:d7:15:58:6c:
         44:67:90:0d:9b:ed:e8:53:e4:d9:5d:a3:ab:8d:f9:bf:c9:c1:
         c7:ba:9b:2d:d6:d0:94:1f:00:7e:23:1d:50:63:bd:01:51:39:
         86:06:61:fe:6f:67:3a:33:7d:7a:e1:c3:87:d5:2d:b2:9e:72:
         64:1b:ac:40:81:a0:a1:f9:f1:29:80:6a:9d:57:a7:76:81:c7:
         cc:e8:51:ab:0f:8b:c6:63:c7:d4:eb:29:28:7e:a5:03:b2:80:
         50:71:c0:b9:9b:c7:df:f9:6f:f9:35:ac:25:b1:58:de:41:0a:
         d2:79:31:83:c7:3a:d6:85:2b:61:fa:28:1a:6f:5d:b9:06:2d:
         f8:bd:ae:a5:a6:b9:ce:84:a3:fb:8d:c3:11:4f:ac:22:ab:70:
         72:ac:bf:71:82:ee:a2:9e:20:d8:1d:d4:c1:e3:e0:43:9b:9f:
         61:ca:9c:9d:af:e7:a4:25:34:27:b4:c6:ca:78:36:72:7b:8b:
         ec:ef:5e:58:f7:28:e3:f4:e8:6d:70:4e:cc:1f:0b:3c:36:91:
         a7:c7:ac:22:59:5e:f5:b0:97:37:1e:57:4c:a5:be:0f:cf:de:
         72:78:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:45:27 2025 by rpki-client