Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
File:                     eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json)
Hash identifier:          tYfOvdnbJNiB+3KHdpQ6S8OEuQloCtotyeD8ZhLxxR8=
Subject key identifier:   FE:BF:1D:D9:D5:2E:5C:9B:F9:54:86:29:47:C5:94:88:FE:4E:B9:D3
Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A
Certificate issuer:       /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
Certificate serial:       0196447B930D8EEB61260D0AB85FA0F8F315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
Manifest number:          14F7
Signing time:             Thu 17 Apr 2025 16:01:11 +0000
Manifest this update:     Thu 17 Apr 2025 16:01:11 +0000
Manifest next update:     Fri 18 Apr 2025 16:01:11 +0000
Files and hashes:         1: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: 9aQ3Eclax9yufq7oiqgHlP1POKpLZVdAvpB+Up/TOXk=)
                          2: stNJNaGeal-FHwEwjC3WB-1Iv34.roa (hash: qGHFbDJPeE85BxBcD0txqzFvtVR+ui4dTz0qswD2vsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:93:0d:8e:eb:61:26:0d:0a:b8:5f:a0:f8:f3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
        Validity
            Not Before: Apr 17 16:01:11 2025 GMT
            Not After : Apr 18 16:01:11 2025 GMT
        Subject: CN=febf1dd9d52e5c9bf954862947c59488fe4eb9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:86:2d:7d:cc:74:7a:74:6e:39:33:a2:a5:
                    10:a6:e2:02:ed:b7:34:dc:1b:39:c6:19:80:68:fb:
                    89:4b:b1:7a:50:f2:82:f4:78:5a:79:4d:58:e2:9a:
                    7e:df:1f:4d:e6:83:c7:af:b4:3e:e2:47:03:b0:86:
                    44:d4:46:8f:c2:ed:d6:f6:25:a2:97:3c:2a:0c:ca:
                    1e:66:35:55:af:2f:5d:e5:bb:ec:21:a9:a3:a2:e6:
                    31:f7:fb:81:5e:4c:e5:34:9d:88:a1:a7:62:dc:ad:
                    8c:4c:ba:e6:09:89:40:44:ea:e2:35:8c:00:50:81:
                    f6:3e:ee:4e:af:7a:00:48:8a:cf:a8:54:25:02:34:
                    88:52:23:b8:13:cd:b2:9c:bc:f4:11:6e:34:e8:9e:
                    33:83:f3:cf:13:fd:db:c2:f8:f7:22:5c:f1:f3:4f:
                    40:f8:37:62:2e:43:41:7b:d1:69:e0:15:ae:26:c3:
                    72:57:a3:71:b1:39:48:f3:2b:9c:07:59:bb:87:53:
                    c9:77:3e:0d:dd:05:1f:5e:e1:16:4f:7f:c2:60:39:
                    12:37:6e:b2:5c:30:d6:32:e6:4e:84:ee:0f:36:df:
                    18:68:f5:4c:74:27:73:fd:ee:df:75:a5:6c:eb:9a:
                    20:00:1a:02:ec:bb:02:dd:3b:fc:f1:db:47:27:a2:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:1D:D9:D5:2E:5C:9B:F9:54:86:29:47:C5:94:88:FE:4E:B9:D3
            X509v3 Authority Key Identifier:
                keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:21:14:96:92:c6:3e:d0:60:2a:9c:52:ee:fe:93:2f:47:
         5b:b9:2c:d6:df:fb:d7:ba:98:98:cb:4f:c4:5e:5f:f4:ca:e2:
         09:d9:1f:60:b9:48:87:78:a3:24:de:de:0f:56:ee:a1:08:e2:
         9d:ec:73:b7:3a:7f:c4:a9:a3:17:9c:9b:a8:68:71:ef:d5:63:
         e5:d6:34:af:b2:64:c2:49:49:ac:5f:c0:c6:28:d4:02:96:8c:
         24:d1:c1:63:dd:22:fd:7f:29:aa:01:8d:d2:e8:9a:7a:70:cf:
         f1:b5:27:2b:b2:8d:6f:67:08:1b:45:c2:02:e4:88:cb:ca:d8:
         47:dd:45:f0:e3:26:4c:46:d8:f3:b8:ab:4e:b2:af:d9:f2:60:
         a4:7b:a1:13:26:8c:df:eb:70:e4:4f:65:20:4e:b3:ba:e0:7d:
         f7:c4:71:a0:08:2d:a5:49:fd:d5:c8:67:65:20:63:a8:ad:d5:
         70:ef:b1:ef:7d:59:87:33:44:81:92:bf:c6:5d:3e:33:a9:d2:
         e5:e3:cb:4d:c5:58:44:17:b2:03:9f:b3:20:e8:26:88:78:4b:
         33:4c:77:9d:e7:84:62:43:e4:ca:9e:b7:42:b2:91:14:8f:eb:
         bb:24:bb:9e:c7:b6:40:20:15:2a:1b:ed:5c:fc:71:6c:fd:44:
         3f:c5:2b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:05:08 2025 by rpki-client