Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
File:                     E_xd30njbWmTYwGtIr8kOkcbUkw.mft (raw, json)
Hash identifier:          1r08wy9Hd9EEHPCR19DZE/b4RlMYvvAbG6gdo0A4N1g=
Subject key identifier:   47:54:80:91:12:2C:DB:3B:71:86:03:0C:66:7C:19:93:78:29:55:65
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Certificate issuer:       /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial:       019652369B72A0D2D0544A664BCE017A7E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
Manifest number:          0BF5
Signing time:             Sun 20 Apr 2025 08:00:32 +0000
Manifest this update:     Sun 20 Apr 2025 08:00:32 +0000
Manifest next update:     Mon 21 Apr 2025 08:00:32 +0000
Files and hashes:         1: E_xd30njbWmTYwGtIr8kOkcbUkw.crl (hash: ujbIiVPDuH4lm0q41tzZ+z4I9yayoZFB5DtxNHbWLLk=)
                          2: TBlASPcR78fuynDDw3RgtcVhkrQ.roa (hash: ZgFGRZrNPcQYHDv0l0eVYG11hp9amh5nevB8oXQScOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:36:9b:72:a0:d2:d0:54:4a:66:4b:ce:01:7a:7e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
        Validity
            Not Before: Apr 20 08:00:32 2025 GMT
            Not After : Apr 21 08:00:32 2025 GMT
        Subject: CN=47548091122cdb3b7186030c667c199378295565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:21:e6:33:57:5b:03:e3:8f:ea:24:7d:89:
                    cf:80:57:26:c1:f6:3c:d8:a9:ce:f0:07:8f:c0:6b:
                    c5:e0:94:52:61:47:77:d2:cf:94:ee:95:fd:0f:5a:
                    99:7e:be:2c:79:ec:4c:81:5d:b3:67:cd:c2:30:fd:
                    63:66:37:eb:ff:13:5f:25:ce:9b:7b:66:62:3a:38:
                    b9:08:26:fd:5f:1c:22:df:71:c6:e4:32:39:65:13:
                    63:c1:e0:97:00:30:6d:4e:3f:ef:48:6e:d2:c7:a5:
                    21:48:d6:88:ba:cc:78:6e:fc:3e:63:24:69:d3:e9:
                    eb:92:ec:f7:46:17:be:17:95:60:0c:3d:b3:d3:57:
                    09:c1:77:5f:16:14:16:33:e2:5c:d5:77:19:ee:19:
                    6a:67:85:75:9e:14:d2:26:a0:66:5a:dd:9f:41:94:
                    2e:9a:0e:48:e8:4f:61:a3:88:2d:bf:ac:60:71:82:
                    7c:07:2d:0d:81:e9:29:a0:e8:b7:61:f6:6b:24:06:
                    fc:e2:c6:b6:a3:37:b5:b9:09:5c:5a:f1:91:28:b8:
                    4f:16:f1:a7:01:77:65:98:ba:93:7e:15:88:a5:33:
                    51:c4:fd:0e:23:59:13:aa:50:08:ff:f5:9f:02:d6:
                    9b:e9:da:9c:91:90:66:26:da:b8:5b:fe:68:ba:cf:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:80:91:12:2C:DB:3B:71:86:03:0C:66:7C:19:93:78:29:55:65
            X509v3 Authority Key Identifier:
                keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:ef:96:dd:3c:33:bc:cd:b9:1c:27:e2:d7:b3:36:c2:fa:
         39:a7:72:30:48:1b:0b:0f:fc:5c:1a:46:2b:c0:88:4c:cf:98:
         25:43:b0:ba:fe:a9:f4:f3:1f:ef:d3:67:1f:de:fa:2d:20:fb:
         de:4e:3c:62:b0:64:01:cd:d6:12:21:8a:27:8b:a3:7e:77:22:
         51:6b:8d:da:a6:e6:55:07:fe:5e:e2:e0:ae:06:cb:6d:9b:45:
         d5:56:a2:39:43:68:95:02:67:ed:ff:a8:97:a4:63:9d:ac:ef:
         a5:39:75:e8:b8:f7:6e:52:50:54:f3:ed:fa:1c:03:9c:51:ac:
         4b:c9:65:cd:3e:02:1a:24:9c:46:cb:8d:34:a8:39:96:50:ee:
         6c:51:1f:f2:18:cc:75:e1:0d:51:29:07:a9:dd:40:62:77:b9:
         57:51:8b:40:e6:93:95:8a:1c:f3:07:7c:f7:ff:f4:41:2b:da:
         bc:e6:66:67:fc:86:a4:29:2f:d1:a1:9e:53:1c:d6:58:cd:c6:
         86:c8:52:91:e1:80:cd:44:f7:56:1f:74:b6:e3:14:cb:db:87:
         d2:be:1a:3c:66:f3:ff:4f:14:ab:7d:c2:bc:b7:e7:b6:e7:cf:
         44:e3:ca:e0:96:24:16:f0:f9:07:fb:ab:b8:98:67:bc:2c:95:
         e1:df:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:16:46 2025 by rpki-client