Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File:                     eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier:          LxnaakMxbiwbaPGUQuZBFEdCqsWU0QT0TBiwDkJB9vQ=
Subject key identifier:   E5:55:BE:E9:8C:3E:5E:29:7D:5B:B3:15:F2:8D:6B:B3:FD:06:ED:2B
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer:       /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial:       01965838620C58E5C737549806D9FD2885D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number:          01F5
Signing time:             Mon 21 Apr 2025 12:00:11 +0000
Manifest this update:     Mon 21 Apr 2025 12:00:11 +0000
Manifest next update:     Tue 22 Apr 2025 12:00:11 +0000
Files and hashes:         1: W8sGLPfZJfk-AE8QSt5pW51bYBc.roa (hash: WTLS8/lHH8tSlHx/vjXHMnAP1canB1yYuL3OZnBm/0I=)
                          2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: eW+z0N9GbYdbU/DwU9ccLdyNcZ1YzHR6Nqn7DLrWbDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:38:62:0c:58:e5:c7:37:54:98:06:d9:fd:28:85:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
        Validity
            Not Before: Apr 21 12:00:11 2025 GMT
            Not After : Apr 22 12:00:11 2025 GMT
        Subject: CN=e555bee98c3e5e297d5bb315f28d6bb3fd06ed2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:6c:f5:99:71:ba:1c:9a:af:54:6e:a3:93:
                    3d:9a:35:96:f6:1f:03:bd:bb:06:56:46:86:41:82:
                    d1:b2:0e:41:7c:bd:2f:09:2a:19:71:45:a1:18:2b:
                    86:ec:3e:2c:31:bd:a0:77:77:7f:b2:a7:57:93:48:
                    4b:ee:b8:ea:85:48:11:c2:c9:60:6c:f7:32:4f:c9:
                    c2:1f:9e:51:1a:a3:32:e5:2d:5a:a7:f9:e2:83:31:
                    14:45:dc:2a:30:ae:d0:a6:bd:e2:23:a0:e4:01:17:
                    74:71:7b:cb:cf:00:37:7f:13:e9:0c:62:38:74:d0:
                    b5:0a:63:8e:bd:6b:28:18:44:7f:18:d2:99:5c:be:
                    63:c8:c3:dd:19:c4:76:c5:2b:97:5e:30:65:ef:f2:
                    84:f3:9c:62:6b:60:09:ef:2a:eb:20:41:51:01:9d:
                    54:2e:67:5d:81:a6:7f:21:d2:81:2a:01:6c:97:c2:
                    d5:25:cf:37:ec:1d:5b:df:76:1d:c9:6f:58:ec:c8:
                    09:da:16:a3:29:29:bb:4a:e0:a0:40:fd:3e:d8:8b:
                    85:f0:bd:45:34:20:ca:53:14:fd:c1:34:ee:82:5e:
                    54:fb:2f:db:94:7c:fc:1c:00:ec:72:e3:ed:9c:2c:
                    47:54:12:61:e1:92:61:61:c9:38:c8:50:43:6a:73:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:55:BE:E9:8C:3E:5E:29:7D:5B:B3:15:F2:8D:6B:B3:FD:06:ED:2B
            X509v3 Authority Key Identifier:
                keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:36:88:fa:0b:43:d5:e6:22:f5:5a:bc:f8:c0:1f:9a:9e:a0:
         50:fa:04:e0:c8:4e:32:91:55:21:50:e4:47:15:1b:11:88:d9:
         ed:46:61:2a:ae:85:00:8c:88:23:20:78:79:71:60:e3:65:cd:
         6f:58:72:be:1a:70:5b:9a:7b:52:cf:b0:a2:85:57:c6:62:fa:
         16:eb:da:d0:e4:da:af:c3:20:04:67:0d:f3:ac:92:a1:d5:e8:
         9a:fe:5f:77:e3:4d:11:f0:81:99:47:a2:45:70:07:bb:6b:14:
         ee:a2:57:95:1a:53:40:dc:1d:2f:2e:35:ad:f2:01:ad:97:6c:
         b4:f4:8c:93:86:81:4b:2b:ba:d9:18:ec:9d:ed:c4:0b:1b:51:
         57:70:e9:88:0e:4e:a7:3b:24:6c:2c:6a:90:35:9f:b0:57:65:
         a9:70:59:5a:21:0c:11:96:84:31:5f:38:05:43:8e:b0:1d:2f:
         ea:7f:f0:85:44:25:7f:a6:b5:cb:0e:d6:4c:61:7c:06:9c:1a:
         a0:2a:68:05:0d:c6:1e:38:9b:e0:db:88:3a:fd:b9:9b:9e:8a:
         7d:2a:c2:20:40:0f:11:d3:1e:6d:56:11:6f:d0:59:a5:f6:e2:
         91:c0:1b:9c:db:ab:c4:fc:66:cf:ee:30:10:e8:08:a3:21:a5:
         d6:3a:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:19 2025 by rpki-client