Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File:                     EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier:          ZCsrz8tfRzgTlUaVs2qHEZbQ/Wh4GHffvKxGfy9LwPU=
Subject key identifier:   4B:5A:6A:AF:1D:0A:DB:10:36:BE:34:09:A2:AD:44:03:C3:E8:1C:74
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer:       /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial:       019748C357A622D227102577539A5D200049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number:          0A
Signing time:             Sat 07 Jun 2025 05:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:50 +0000
Files and hashes:         1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: NvK6yBjmoX6r8QdRkVOn3aGOm2RRlyTIDbYYDDiKHHw=)
                          2: vGF2KAvK3aprRRdgwH5KABdGMAU.roa (hash: RXv+kUD5G+c5aahHL6+Y+Di5kkYa37mIJ1HvrhSMRbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:57:a6:22:d2:27:10:25:77:53:9a:5d:20:00:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
        Validity
            Not Before: Jun  7 05:00:50 2025 GMT
            Not After : Jun  8 05:00:50 2025 GMT
        Subject: CN=4b5a6aaf1d0adb1036be3409a2ad4403c3e81c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:67:41:c8:0d:70:0a:76:e4:27:11:83:5f:
                    0b:24:b1:7b:d4:bf:3d:12:9c:72:f2:7b:a6:c3:c3:
                    a4:1f:da:84:e7:09:36:a3:f2:aa:ec:41:4b:fb:99:
                    b8:0e:2a:0b:9c:84:c1:b9:af:9b:eb:c4:aa:7e:44:
                    a5:b7:1a:16:27:f5:a9:c8:31:ff:cf:81:ba:88:34:
                    1a:cd:85:3e:73:03:b9:37:99:76:1e:88:83:f7:9a:
                    42:74:37:b1:e6:14:b8:d3:0b:18:5b:68:53:1f:78:
                    2f:b4:ec:c5:81:be:a6:89:91:d0:95:76:0e:30:47:
                    0c:47:4c:27:65:39:08:5e:e3:07:6a:39:db:54:af:
                    bf:91:82:86:59:02:3e:63:aa:9a:70:6d:6e:cb:11:
                    81:7c:27:74:a2:41:83:38:fa:78:39:1f:2f:19:bc:
                    28:3a:71:3e:b8:b5:0e:3e:fa:f9:c7:88:62:6a:98:
                    78:11:56:b9:1f:f5:79:28:22:6d:83:ed:3c:00:85:
                    b2:6b:4b:ec:f6:e8:30:fe:6a:ee:ff:8f:60:53:3c:
                    33:ba:58:7c:66:1a:ae:5d:6d:76:9b:54:e7:52:fa:
                    2c:5c:27:eb:e8:37:b4:fc:40:12:24:0a:1a:21:2b:
                    04:19:11:a3:d3:e1:3e:05:27:60:bd:3a:a1:93:f3:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5A:6A:AF:1D:0A:DB:10:36:BE:34:09:A2:AD:44:03:C3:E8:1C:74
            X509v3 Authority Key Identifier:
                keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:3e:4e:82:27:2d:20:50:38:5f:f2:85:e5:c2:f9:31:ce:
         46:d4:0b:0d:29:2e:b5:15:d1:0b:f3:05:43:20:47:bf:71:c0:
         f6:0b:16:43:66:eb:db:c4:c2:fb:b7:ac:d5:62:19:36:d0:18:
         97:12:47:50:a5:35:8d:25:b7:18:b3:4a:3e:c1:13:33:b8:57:
         c2:cd:19:dd:e8:ba:94:2d:1a:6b:bf:1e:6a:0f:07:f8:a5:3f:
         50:4f:ad:a6:3d:08:83:96:9c:53:df:19:24:db:81:6a:26:f2:
         9b:0c:0a:19:93:c7:bc:6e:b1:26:76:a4:02:55:ce:66:dc:e2:
         81:fb:33:3b:7d:80:af:8e:e8:23:6c:7b:1f:87:c7:a6:e2:80:
         b8:35:2f:69:34:a2:32:2d:fb:f0:0a:93:08:ee:4e:79:4a:f0:
         19:13:77:49:c9:5f:79:47:41:ec:af:d3:87:79:a9:af:53:39:
         49:60:ab:27:0d:e2:14:4a:81:ab:d2:bb:fe:4a:72:12:34:4d:
         0b:f9:dd:03:a6:b3:e8:eb:d5:f0:a5:df:b5:2b:91:7e:0b:8d:
         e1:b2:e3:5b:7f:5a:57:f0:7d:61:f1:42:50:ba:61:b6:9d:87:
         9b:27:00:0a:c9:be:24:96:02:35:62:f9:87:e3:b2:4b:ad:8c:
         f6:01:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:35:01 2025 by rpki-client