Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
File:                     EBKHknrXsdtHmuWrkquHxKT69JY.mft (raw, json)
Hash identifier:          T5HjdcZYVbKDLnwWLmxvDmRLzL7RSRUHkRQ0vRS6uug=
Subject key identifier:   BD:3B:D5:F3:E6:5B:34:2F:37:98:6B:CC:F5:1F:37:C3:50:5D:D2:EF
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Certificate issuer:       /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial:       01962CE1913048DA566D5583939C33F987D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 02:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 02:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 02:01:42 +0000
Files and hashes:         1: 4QR_9ICDY1eAjAMQinzDvd_fSbM.roa (hash: QOGIl5yTiA09+cvbQSor4wKyODpGweFUOGDGmoa5Fkw=)
                          2: 4TPUxBZQjPMFC7b1mfrFjCvLGlY.roa (hash: JkcUiwxVUZ6Y1IABb79mPduZ40ATbeXmGRW1UsM28Lg=)
                          3: EBKHknrXsdtHmuWrkquHxKT69JY.crl (hash: vDIV+I1YE7HKff5p2UsE62KVbQ+/xXE96bkXnMC35aU=)
                          4: Wo-dX3lQK__8wGgqhbqIC_egjRY.roa (hash: Kje1K6kIBEP6yfvrAyyBJragoqmu73LHVFRq0DMX108=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:e1:91:30:48:da:56:6d:55:83:93:9c:33:f9:87:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
        Validity
            Not Before: Apr 13 02:01:42 2025 GMT
            Not After : Apr 14 02:01:42 2025 GMT
        Subject: CN=bd3bd5f3e65b342f37986bccf51f37c3505dd2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:97:5e:c6:a7:00:e0:c7:33:a3:27:74:a0:
                    26:d8:cb:44:1d:73:1d:f0:ac:fd:5c:43:50:09:56:
                    c7:b0:16:1c:2b:30:66:7a:a6:89:3a:13:42:30:0c:
                    62:0c:60:1b:a3:a5:6c:6b:9c:dd:34:a8:12:23:fb:
                    10:18:74:ce:4a:ce:99:c3:4e:4d:63:2e:c5:83:ec:
                    32:49:bf:b9:cc:a0:32:c7:06:5d:3e:a5:79:88:e2:
                    df:43:19:e0:d3:b5:9e:ac:97:c6:da:05:d5:4d:75:
                    2f:e3:43:5f:4f:e8:c9:b1:09:8f:f1:01:99:53:ad:
                    47:29:cc:18:ca:29:fc:78:7d:27:dc:bd:ba:e0:e1:
                    aa:c2:87:98:1a:2e:46:78:a1:06:6c:46:e4:a6:01:
                    80:72:1b:c6:44:a0:e9:e5:03:54:8c:d3:0d:fc:c9:
                    1c:bd:b0:68:f1:71:0a:3f:00:58:59:cb:2a:28:6f:
                    1e:9e:39:b8:36:e6:72:ee:88:d3:8f:61:a0:16:1c:
                    cd:8e:ed:56:49:79:0b:74:d8:63:0e:5f:9d:9c:2e:
                    cc:24:a2:dd:56:5d:e3:4b:73:e9:63:6f:2b:bf:25:
                    49:51:d5:ed:0c:43:88:c9:82:d4:a2:ac:7b:c3:9f:
                    4f:5a:cd:59:f1:aa:7e:8d:92:4e:53:d7:52:fe:ab:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:D5:F3:E6:5B:34:2F:37:98:6B:CC:F5:1F:37:C3:50:5D:D2:EF
            X509v3 Authority Key Identifier:
                keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:6f:6b:45:53:13:fa:af:d2:60:ee:94:cb:ac:ed:52:7b:
         cf:02:e5:a2:8b:3d:17:d3:ba:ec:66:46:bb:59:2c:d0:4b:65:
         43:40:7b:15:a1:b4:01:73:27:b4:94:1d:ed:ed:23:de:de:eb:
         2b:08:20:c4:2a:bf:10:bd:49:6c:b0:7e:76:9e:5f:fd:c3:f4:
         09:e5:4d:10:b8:a0:04:12:d9:7f:4f:18:9a:00:dd:4d:71:26:
         45:3f:16:83:62:8f:61:89:51:fc:f4:46:d4:82:76:0c:36:16:
         c8:ba:cc:85:ff:29:d9:4b:f6:78:62:b4:f1:b6:9b:bd:f0:d2:
         94:15:47:82:71:68:8a:d7:f2:a6:34:63:ef:ee:0e:71:05:02:
         9f:0b:7e:ce:75:98:0c:45:8d:4a:f4:d8:ea:b8:21:75:86:a1:
         2f:fc:db:b4:be:af:40:75:cf:ae:c4:8b:95:ee:30:6b:ce:ae:
         d7:07:4f:bc:98:7b:01:41:a2:b0:94:26:83:85:34:45:13:9c:
         2d:79:00:c0:64:65:d2:38:aa:bf:7b:47:9f:9e:02:56:f4:9a:
         09:0f:bd:ab:21:d2:71:37:ec:76:41:c4:f2:de:b8:cd:08:f9:
         77:2f:45:0f:92:f6:8b:aa:23:30:34:1a:1c:6c:2e:3a:36:a7:
         2b:f5:b4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYs4ZEwSNpWbVWDk5wz+YfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTI4NzkyN2FkN2IxZGI0NzlhZTVhYjkyYWI4N2M0YTRm
YWY0OTYwHhcNMjUwNDEzMDIwMTQyWhcNMjUwNDE0MDIwMTQyWjAzMTEwLwYDVQQD
EyhiZDNiZDVmM2U2NWIzNDJmMzc5ODZiY2NmNTFmMzdjMzUwNWRkMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooKXXsanAODHM6MndKAm2MtEHXMd
8Kz9XENQCVbHsBYcKzBmeqaJOhNCMAxiDGAbo6Vsa5zdNKgSI/sQGHTOSs6Zw05N
Yy7Fg+wySb+5zKAyxwZdPqV5iOLfQxng07WerJfG2gXVTXUv40NfT+jJsQmP8QGZ
U61HKcwYyin8eH0n3L264OGqwoeYGi5GeKEGbEbkpgGAchvGRKDp5QNUjNMN/Mkc
vbBo8XEKPwBYWcsqKG8enjm4NuZy7ojTj2GgFhzNju1WSXkLdNhjDl+dnC7MJKLd
Vl3jS3PpY28rvyVJUdXtDEOIyYLUoqx7w59PWs1Z8ap+jZJOU9dS/qsbrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL071fPmWzQvN5hrzPUfN8NQXdLvMB8GA1UdIwQY
MBaAFBASh5J617HbR5rlq5Krh8Sk+vSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMt
NzNhNDUyYmFmYjQ2LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMtNzNhNDUyYmFmYjQ2
LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPRva0VT
E/qv0mDulMus7VJ7zwLloos9F9O67GZGu1ks0EtlQ0B7FaG0AXMntJQd7e0j3t7r
KwggxCq/EL1JbLB+dp5f/cP0CeVNELigBBLZf08YmgDdTXEmRT8Wg2KPYYlR/PRG
1IJ2DDYWyLrMhf8p2Uv2eGK08babvfDSlBVHgnFoitfypjRj7+4OcQUCnwt+znWY
DEWNSvTY6rghdYahL/zbtL6vQHXPrsSLle4wa86u1wdPvJh7AUGisJQmg4U0RROc
LXkAwGRl0jiqv3tHn54CVvSaCQ+9qyHScTfsdkHE8t64zQj5dy9FD5L2i6ojMDQa
HGwuOjanK/W0bw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:57:29 2025 by rpki-client