Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          Jw+CVDBYyA9syQliG2UFWfXVwww9s5vh+lOEcE6unmU=
Subject key identifier:   16:B5:CC:52:BD:61:92:29:25:61:B9:EF:53:04:EE:8E:E3:0B:10:9E
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       01963EE7004B07764368F56F806E45C17235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          0EB0
Signing time:             Wed 16 Apr 2025 14:00:48 +0000
Manifest this update:     Wed 16 Apr 2025 14:00:48 +0000
Manifest next update:     Thu 17 Apr 2025 14:00:48 +0000
Files and hashes:         1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=)
                          2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: e7qpny1xsTXfNGq1ZHMHIt/0DFRTYdlzNB34ksbKzg8=)
                          3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=)
                          4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e7:00:4b:07:76:43:68:f5:6f:80:6e:45:c1:72:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Apr 16 14:00:48 2025 GMT
            Not After : Apr 17 14:00:48 2025 GMT
        Subject: CN=16b5cc52bd6192292561b9ef5304ee8ee30b109e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:82:b4:25:67:91:1b:cc:d6:23:52:f6:de:
                    4b:fd:a2:fe:aa:8a:65:ec:78:34:01:78:1c:a8:ef:
                    c7:e0:ba:d6:3b:ed:da:62:dc:9b:cb:2c:da:24:77:
                    2c:58:6c:5a:9d:94:08:05:e6:cb:ff:c0:c1:ef:6b:
                    31:8d:78:6c:a2:6a:6a:1d:88:6d:b8:c0:86:81:cd:
                    fe:23:3f:15:89:7b:be:f2:26:f2:d8:76:51:25:7a:
                    aa:9a:79:fc:04:7a:36:46:1e:43:af:91:b7:28:b6:
                    83:e2:ea:3a:cb:06:cb:36:96:7b:18:9c:66:23:fa:
                    2b:ba:82:fb:1b:b5:b6:dc:28:f8:ca:a7:1f:57:5f:
                    1c:21:96:12:a8:59:e9:25:d1:6f:c3:25:53:01:d4:
                    37:77:70:91:ad:05:02:a5:aa:95:9e:ef:ec:ac:00:
                    b1:72:3e:1e:b5:a2:5e:eb:d2:88:bd:3d:4e:78:07:
                    c5:b6:f3:97:15:38:7c:b4:df:e5:3e:5b:70:51:5b:
                    b1:1b:b7:4b:66:a2:fd:e4:66:91:f5:18:ba:98:af:
                    4e:d2:d7:57:6d:df:df:5a:32:ac:05:a1:a2:ee:fe:
                    8c:d0:a6:cd:a4:1f:e1:f8:9f:cc:38:ab:bc:3d:01:
                    a2:ad:c9:4f:94:8d:0e:ad:59:60:73:ab:c3:6b:7f:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B5:CC:52:BD:61:92:29:25:61:B9:EF:53:04:EE:8E:E3:0B:10:9E
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:82:05:ae:47:70:5a:f9:38:b2:6d:2b:52:83:6e:13:2b:db:
         b5:c2:7f:1c:34:3a:b6:67:c2:7d:3d:ad:4e:ee:df:3b:b6:aa:
         7b:47:7f:eb:b7:5c:bd:53:d5:09:0a:26:2c:5c:7f:cb:0d:dd:
         dc:aa:39:3f:37:9d:31:3b:64:70:a0:ad:4d:3c:53:31:82:9b:
         59:33:c8:15:8d:c1:8e:25:0b:d0:ff:b7:a9:fd:e0:83:06:c6:
         51:35:1f:59:a3:2a:5a:8b:37:12:12:40:08:d9:67:30:45:52:
         8a:ca:7c:74:a7:37:b1:92:af:bf:a2:b9:05:ee:76:c1:00:99:
         3a:40:fb:38:87:45:c0:18:06:e5:cf:39:4d:91:5b:70:86:67:
         aa:3a:91:53:66:6c:e1:c9:f6:e4:55:e3:d1:47:99:f9:38:89:
         15:de:ad:18:39:d0:5d:24:56:55:7f:1f:9a:7a:d2:3a:a8:38:
         f9:51:6f:16:dc:55:82:11:4a:57:1d:60:dd:d3:a1:85:33:dd:
         4d:25:0e:aa:a1:b1:31:e7:b4:58:de:a9:f6:61:c2:5f:6a:d6:
         21:0e:63:b2:12:cb:ab:76:35:95:39:b4:12:6a:f6:80:e3:1c:
         02:43:17:6f:22:7c:2e:b6:4f:8e:5d:ae:43:d8:f7:ce:a8:9b:
         6d:30:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:17:14 2025 by rpki-client