Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File:                     68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier:          vuyigbXUPKnmzjAujsRFthcvSD43y7EYPKUAQV6M8MA=
Subject key identifier:   27:1F:2A:ED:96:B1:C7:09:9F:E3:0F:B7:BD:BF:04:F3:6B:B1:19:A3
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer:       /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial:       019644445540BC32464E8BE5335C5998C576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number:          0E02
Signing time:             Thu 17 Apr 2025 15:00:50 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:50 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:50 +0000
Files and hashes:         1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: qRxoiuTFaw6v0UMnjrVI+cUP2kvF6H3q/ip0Hy1HqAo=)
                          2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:55:40:bc:32:46:4e:8b:e5:33:5c:59:98:c5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
        Validity
            Not Before: Apr 17 15:00:50 2025 GMT
            Not After : Apr 18 15:00:50 2025 GMT
        Subject: CN=271f2aed96b1c7099fe30fb7bdbf04f36bb119a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:5e:f8:4e:88:1b:fb:50:85:3a:2f:a3:cd:
                    3c:ef:5c:eb:c6:b4:c3:09:c5:a4:87:bb:00:7d:3c:
                    58:21:b2:23:6b:2e:19:22:a1:fa:13:9f:18:6d:ec:
                    1d:aa:58:a5:d6:89:a2:cc:c9:f0:e0:97:be:ca:06:
                    51:b6:67:51:d4:18:67:3c:3d:40:62:94:14:74:94:
                    34:3a:57:45:31:05:c9:ae:98:56:50:0d:2c:50:15:
                    02:11:48:97:49:ce:f9:22:7b:a9:de:16:0f:df:67:
                    d7:a2:d8:90:a2:62:c7:72:e0:10:2e:a3:63:e2:2b:
                    86:c4:20:c4:45:6d:4a:6d:a6:83:ba:d7:1c:9b:2a:
                    de:f1:ba:4e:aa:63:98:1b:d3:7b:b4:91:96:8e:83:
                    7f:4a:d6:58:b1:fc:f6:5c:e0:a7:77:f3:28:01:55:
                    18:d1:43:db:e5:43:fd:9d:07:ca:47:c8:e3:19:01:
                    b8:5b:96:da:1b:31:8e:15:4a:dc:5f:34:1f:b9:f3:
                    54:a1:c9:1e:25:71:6c:08:c1:94:a6:ab:5c:a8:47:
                    72:60:85:b3:c1:d7:e6:3e:80:d4:84:57:f1:74:4a:
                    2e:4b:12:07:09:fc:22:19:83:52:9d:24:10:2b:aa:
                    d0:96:16:8e:9d:c7:85:d7:51:fd:e6:8f:38:70:ec:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:2A:ED:96:B1:C7:09:9F:E3:0F:B7:BD:BF:04:F3:6B:B1:19:A3
            X509v3 Authority Key Identifier:
                keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:3a:26:3d:8c:15:77:68:99:66:e3:0c:e6:aa:0f:4a:47:
         1c:96:a3:a5:e9:80:81:8c:68:f2:9e:b5:57:de:f7:c9:7f:9d:
         5d:af:32:9f:18:79:e1:2c:29:d7:63:74:3f:e1:dd:16:37:c3:
         f5:8d:db:8a:e3:16:10:06:35:b6:54:fb:a0:3f:a0:46:f4:d8:
         c6:96:18:13:76:08:3b:50:47:5b:42:27:b8:2f:af:eb:de:e8:
         48:ec:14:cb:e7:62:da:fa:2d:1a:eb:f0:65:5a:b3:de:cb:17:
         74:b6:ff:fb:25:a0:e8:89:f8:6a:aa:62:60:12:c7:01:58:54:
         67:8f:fc:9a:d1:76:99:68:37:99:c0:88:39:93:a9:1c:86:76:
         64:f4:a5:08:9a:54:96:55:0e:7d:c5:57:56:47:bb:d0:44:a3:
         b5:f9:62:5a:fa:af:b7:76:82:d0:0f:17:a9:2f:ac:55:e9:26:
         ab:f2:c8:ed:0d:41:07:26:96:de:89:7b:fb:39:b1:44:b1:d1:
         6e:98:ee:dd:24:be:8c:b0:96:2c:29:06:ca:80:49:eb:fc:25:
         ed:87:3f:09:c4:a2:27:e9:ef:3c:8c:6d:5e:dd:d9:fd:71:cc:
         94:65:66:c3:44:d2:08:56:08:d5:96:83:e0:17:db:c5:48:6e:
         50:e6:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:29 2025 by rpki-client