Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          cHfaWRPEo/C+nVwVVALFA5WU5UN5wDR/QNIexKF8T9I=
Subject key identifier:   8E:BE:A0:73:E2:F1:26:A2:7D:62:2D:3F:B4:F1:1D:70:26:23:21:AA
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       019648FCE08162E984E061768598041CE641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          0BD8
Signing time:             Fri 18 Apr 2025 13:00:54 +0000
Manifest this update:     Fri 18 Apr 2025 13:00:54 +0000
Manifest next update:     Sat 19 Apr 2025 13:00:54 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: 0B/ysGnZlyhXPyuhBPjgsZLP6FJA3TXEzLuOa9nTFL4=)
                          2: MpZukC5Je7qm2_0dzCsOSFpg8Zk.roa (hash: 3WYgApKsvBIkvYFsJfu+jnkLPrausIW2p0OxArSLtNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:fc:e0:81:62:e9:84:e0:61:76:85:98:04:1c:e6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Apr 18 13:00:54 2025 GMT
            Not After : Apr 19 13:00:54 2025 GMT
        Subject: CN=8ebea073e2f126a27d622d3fb4f11d70262321aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:ac:cd:fe:e7:8b:0b:7d:3e:2a:54:56:6c:
                    81:4d:24:60:2c:97:ee:ee:95:1e:e0:fb:a7:a0:c7:
                    8a:b6:ba:92:7f:18:5d:41:83:aa:29:82:7e:80:e5:
                    94:6d:9f:f7:fd:fc:85:3f:b0:9b:d9:d6:52:b4:ec:
                    c8:f5:09:6d:91:7a:d2:e9:fc:86:7d:32:de:99:8d:
                    b9:0c:2d:c4:07:67:68:86:c1:26:14:4c:8a:0c:40:
                    d6:ff:ee:1d:94:58:c3:a4:56:ed:48:d3:9c:9c:3c:
                    88:34:4a:14:7d:f6:0d:a8:ff:17:0e:f5:9a:32:b1:
                    8b:fc:83:12:c1:71:30:04:13:52:89:2a:c5:00:c4:
                    a6:1f:69:cc:17:ae:56:66:be:5e:64:0b:71:a4:d8:
                    f9:dc:fc:63:7f:bf:73:1a:fa:70:1e:a0:ba:3d:19:
                    32:41:cb:ec:f2:fe:33:e4:29:4a:db:62:59:61:43:
                    9f:b8:9b:1e:c2:17:5a:47:b9:b2:08:8f:f8:f0:72:
                    60:5d:81:a8:18:61:ac:30:9f:54:aa:f4:5b:09:bc:
                    19:bd:5b:c4:59:9b:2b:d0:1b:1b:d3:a0:7c:f5:67:
                    27:8e:5a:c4:b4:70:59:ab:3d:69:22:5d:7c:fb:81:
                    3f:ad:7b:0d:08:49:ed:a8:df:55:55:fd:8e:35:6f:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BE:A0:73:E2:F1:26:A2:7D:62:2D:3F:B4:F1:1D:70:26:23:21:AA
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:39:f0:ce:97:15:fe:92:f3:7f:bf:f0:af:6c:e5:fe:2a:
         a2:33:3a:91:8a:8b:2e:7b:ea:8e:08:cd:db:bf:b6:90:46:cf:
         33:34:3f:68:2d:6e:ff:03:2d:6c:d7:3f:bd:48:e3:23:cc:db:
         68:d6:f6:35:6d:a5:d5:80:e0:d0:1a:9a:78:77:2f:3e:2b:05:
         58:49:2e:10:0a:7a:60:2a:de:25:1a:3e:93:1e:7c:1c:47:c9:
         12:b3:70:23:6b:ae:2c:78:93:2c:f3:fa:dd:66:bf:ac:24:84:
         66:6b:3a:ab:b9:b3:e6:74:c6:26:42:14:31:e9:9e:a3:c5:94:
         03:21:98:bb:95:f5:2e:ad:c2:23:09:17:31:5f:78:8c:bd:0a:
         79:ac:7d:39:1e:2a:0a:6f:b6:46:90:bd:8d:73:af:fa:18:eb:
         e7:4b:72:c8:78:10:91:7e:a1:39:e4:f3:07:24:35:84:1d:87:
         da:83:7e:2e:cd:41:12:6e:a9:5e:4e:78:6c:fd:e0:a1:ba:f5:
         ea:e5:1a:bc:59:eb:c9:96:88:1d:fc:28:fa:58:af:98:9d:30:
         bb:5d:50:49:87:85:d4:53:38:c8:0d:8f:79:f3:c0:32:90:62:
         0e:43:32:09:45:7b:6a:da:af:33:3e:3c:95:a6:d1:7e:1a:4a:
         45:c5:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:29:06 2025 by rpki-client