Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File:                     ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier:          lGoJdZivaltbR3zOOF8e/mpp4TtcGhPcLNwtkPnO2qo=
Subject key identifier:   BF:A6:E6:8C:71:41:3F:35:1A:86:C1:01:8B:99:26:C0:2C:79:5B:43
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer:       /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial:       01958CCEE31FC8C5B45855CBB3725B3F39D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number:          044F
Signing time:             Thu 13 Mar 2025 00:02:03 +0000
Manifest this update:     Thu 13 Mar 2025 00:02:03 +0000
Manifest next update:     Fri 14 Mar 2025 00:02:03 +0000
Files and hashes:         1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: h1Vs/ElgHQ2Zlituk9q3zRxAceGVIVSCJSOgjVbjo6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:e3:1f:c8:c5:b4:58:55:cb:b3:72:5b:3f:39:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
        Validity
            Not Before: Mar 13 00:02:03 2025 GMT
            Not After : Mar 14 00:02:03 2025 GMT
        Subject: CN=bfa6e68c71413f351a86c1018b9926c02c795b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:93:24:e2:a6:3f:f7:83:c8:9b:3b:44:dd:
                    f3:5f:1c:55:fd:54:aa:bf:6e:32:89:47:0b:0b:98:
                    b8:c8:94:bd:01:3f:26:7a:70:30:d0:39:ce:73:b3:
                    f8:60:f7:17:a6:45:77:d7:23:06:1c:28:94:25:24:
                    5e:9d:b2:19:71:7d:e6:67:32:a2:dc:cd:13:07:9a:
                    4f:4a:04:41:de:51:b3:0c:0b:5d:86:88:35:44:e3:
                    36:03:6c:a7:00:a7:b5:6d:25:fd:bf:f0:70:e1:07:
                    71:99:31:03:c6:e3:e1:d4:4e:6e:97:f6:e5:4c:4e:
                    f8:9a:ae:34:20:99:e2:34:f7:a4:4a:9a:48:f4:b9:
                    3e:a1:55:1b:c1:3f:00:c5:31:76:b2:a2:b7:61:41:
                    35:51:4f:ad:a9:4b:99:8a:96:a2:19:e7:8c:8e:89:
                    29:18:1e:51:45:aa:ef:c2:c6:12:5c:dd:83:54:75:
                    c6:e2:02:34:6f:41:15:4e:8c:9b:0f:46:9a:10:7d:
                    1c:6c:5a:38:67:40:11:bd:6e:63:4e:1a:ad:71:ba:
                    44:b9:b8:b6:ff:6e:3e:e7:4a:7b:5a:31:2c:a8:8e:
                    b6:8f:d6:74:45:94:6f:33:44:6d:46:e8:04:4f:e2:
                    71:fd:14:06:be:f5:93:79:00:ec:74:23:23:36:85:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A6:E6:8C:71:41:3F:35:1A:86:C1:01:8B:99:26:C0:2C:79:5B:43
            X509v3 Authority Key Identifier:
                keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:d4:07:fc:28:db:ea:65:32:29:4f:32:6c:eb:9a:d3:61:
         2a:96:52:9c:6d:39:ba:02:77:b0:38:69:24:84:65:8c:23:0e:
         0d:a8:3f:d7:3d:2c:7f:0e:2f:90:1c:14:31:ef:c0:10:b2:89:
         db:38:53:bc:28:52:93:f1:7f:74:02:f4:6e:3e:f8:e2:4f:d3:
         8c:df:7e:c2:fe:e5:75:03:5b:6f:7a:cd:94:cd:c5:d3:0a:a7:
         98:5a:20:1f:7d:a9:6d:bc:f4:1a:38:c1:92:49:d9:53:b7:67:
         37:3f:38:a0:c5:75:82:31:d0:b4:8d:f5:9c:5f:25:d0:83:9a:
         4c:8d:75:07:6a:f1:15:1f:89:19:d2:df:17:d7:39:fb:4b:2c:
         d2:6e:65:a8:69:c2:f4:eb:32:ea:22:1e:a2:39:1f:11:4b:a8:
         27:80:b7:b2:2f:99:4b:af:e2:0b:a9:d0:f8:4e:92:ba:dc:f0:
         51:09:10:89:98:c9:4d:64:48:db:1d:e0:08:1a:b1:6a:67:9c:
         86:43:b4:51:98:f2:9d:4f:0a:f1:15:9d:b1:b7:23:51:62:21:
         70:8e:e4:df:00:c6:cc:9d:63:5d:1d:a3:9d:c0:d0:69:4d:50:
         56:7e:7d:be:a7:5d:67:5a:a3:3b:62:9b:e7:d1:8b:ab:68:61:
         81:dc:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:19 2025 by rpki-client