Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          nWVGUAOTXhUuZct5o4RjQM7y5wY4nFl8PcwiQQsEUnI=
Subject key identifier:   96:B7:CF:31:DA:95:AA:A2:AF:F1:AB:BE:BA:1D:41:4F:05:B8:F0:EF
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019610FC4D1972C09D81838C20F6BA1D270F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          14E2
Signing time:             Mon 07 Apr 2025 16:01:32 +0000
Manifest this update:     Mon 07 Apr 2025 16:01:32 +0000
Manifest next update:     Tue 08 Apr 2025 16:01:32 +0000
Files and hashes:         1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
                          2: 7JHYrzTxN9asgLqVnNRUfP1LZ10.roa (hash: ChCGPqEl2ro34qpoNR4Xt2LPCuZTPhOJ4X9rWHYGEBA=)
                          3: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
                          4: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
                          5: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
                          6: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: kFk595P+R8Jy5tCCuOUMcl0Cc7boBh4poKBf1vzWwyo=)
                          8: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
                          9: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
                          10: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:fc:4d:19:72:c0:9d:81:83:8c:20:f6:ba:1d:27:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Apr  7 16:01:32 2025 GMT
            Not After : Apr  8 16:01:32 2025 GMT
        Subject: CN=96b7cf31da95aaa2aff1abbeba1d414f05b8f0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:78:5b:0a:c2:71:b2:46:a7:4a:16:26:b6:
                    25:71:da:bd:a6:cf:ba:49:1d:20:2f:df:07:9c:0a:
                    ea:c0:87:a4:37:79:37:9b:8c:c9:3e:75:bc:74:62:
                    e3:ec:d3:ef:cd:49:ce:09:60:9f:80:45:c7:df:52:
                    b4:81:4a:47:00:97:f1:ca:3b:ff:db:23:84:75:1d:
                    2b:b3:06:ca:82:a6:8d:13:79:3c:db:3e:d9:fa:05:
                    3f:94:4a:6f:bb:b1:45:f8:2d:81:28:94:4a:9b:fe:
                    68:e8:04:6f:25:38:d2:cf:af:8b:e2:21:53:6a:2d:
                    c9:4b:6f:91:5e:fc:ea:ee:09:d5:cb:58:b8:07:90:
                    1c:09:75:d6:f8:0d:47:90:dd:98:9c:1a:e6:26:77:
                    4c:3a:24:c4:40:26:11:d0:05:18:7d:1d:a8:42:9d:
                    43:f3:19:77:b2:9e:1e:fb:22:51:79:f1:3b:d6:ee:
                    5b:b7:de:a9:8b:3a:e6:30:4f:56:01:67:b1:cd:a8:
                    38:11:01:b9:13:d5:54:be:55:ea:11:dc:f7:2a:ef:
                    c0:28:bc:e0:fd:81:4b:c1:40:df:3b:2e:05:b7:16:
                    4e:c7:e5:49:68:fa:57:41:8e:e4:94:b3:be:49:ee:
                    64:57:66:b4:08:f3:6e:28:a8:6f:ed:a3:bb:d8:dd:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:CF:31:DA:95:AA:A2:AF:F1:AB:BE:BA:1D:41:4F:05:B8:F0:EF
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:65:ab:a7:59:7c:09:db:71:78:10:dc:b2:c4:53:b1:29:11:
         7e:ac:27:e2:18:ca:61:5d:e9:9e:92:43:50:1f:0b:1a:8c:e9:
         2b:2f:81:79:6e:5d:c9:d6:54:58:06:41:f3:f0:f5:8f:4b:b5:
         42:5a:77:0d:e4:df:e6:a4:68:e9:7e:55:61:b4:7b:ad:a7:8c:
         47:9f:ac:d4:03:85:22:aa:4c:41:d8:9f:c2:a0:c3:3d:ec:20:
         22:3e:69:c1:44:26:b2:ba:67:13:f1:52:3b:79:fb:d9:ae:a2:
         dc:d4:e6:89:c9:96:65:30:6e:ef:ad:2d:82:80:08:28:70:27:
         65:1f:17:b3:25:54:70:1a:d3:78:38:e1:41:87:19:1a:1b:d3:
         38:2c:74:24:06:b8:59:07:d8:56:07:f2:03:20:33:64:9f:2e:
         47:38:6e:d4:fd:ff:10:26:d5:4a:bb:56:72:5d:da:75:5d:cc:
         d5:da:53:bf:d0:67:26:c2:b8:3f:ca:3a:12:df:67:94:28:28:
         92:c0:f0:2e:fb:9a:fb:19:e4:dd:ea:62:01:9e:6a:67:ab:eb:
         7d:06:da:e7:2e:13:80:03:9b:83:7d:dc:46:eb:62:9b:b3:c6:
         13:a7:34:6b:91:60:ba:a9:73:e4:60:3b:11:a2:e2:93:83:c8:
         05:e1:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:16:57 2025 by rpki-client