Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          BbEZF/VZXdINrd4aPGLXmDOkjEWqtAXJ3fe1AJ/7qNk=
Subject key identifier:   7C:9F:F0:68:95:B5:D3:B9:CD:0A:8E:E5:96:81:98:05:04:B2:A2:33
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       01968435EDADEEBC7387A973821294511322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          10AC
Signing time:             Wed 30 Apr 2025 01:00:48 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:48 +0000
Manifest next update:     Thu 01 May 2025 01:00:48 +0000
Files and hashes:         1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: SXQPM7pdWEOPbqvChU7pI5oZIQmBR3uZX1jVFNteYAE=)
                          2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:ed:ad:ee:bc:73:87:a9:73:82:12:94:51:13:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: Apr 30 01:00:48 2025 GMT
            Not After : May  1 01:00:48 2025 GMT
        Subject: CN=7c9ff06895b5d3b9cd0a8ee59681980504b2a233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:94:1a:77:8e:77:f6:7d:6d:e5:5f:96:1f:
                    18:4b:2d:f0:1d:11:7b:86:5e:65:41:84:c1:aa:3f:
                    bb:b1:8b:04:75:64:0f:9e:7e:bd:f3:2c:2e:3b:c7:
                    76:8c:e7:9b:ce:ab:78:f6:f0:c5:93:af:58:0c:bb:
                    ce:ab:da:26:bd:3b:d9:e7:09:89:e2:70:99:ad:82:
                    40:a7:3a:ef:35:a6:66:ce:c2:f2:be:20:f0:1a:c9:
                    e1:23:be:54:b7:e2:c9:e2:93:94:b0:36:c8:6b:47:
                    d7:b3:e4:3b:24:47:e3:f0:6e:be:1d:53:8c:90:ec:
                    ce:e9:ca:8b:f7:9f:7e:72:48:71:d5:b0:25:5a:3f:
                    5d:0b:ff:d6:85:98:54:6d:18:74:fc:7b:2f:98:57:
                    fc:fc:7c:93:28:91:a8:6c:d8:bc:13:79:c7:b5:36:
                    f3:80:9f:83:46:04:67:a4:c3:d5:b7:81:d9:94:64:
                    d6:78:59:84:21:a7:02:0a:92:8c:89:ab:86:b8:4a:
                    00:a8:95:78:96:93:8c:7a:03:32:c3:e6:43:05:ad:
                    33:b1:ee:fc:33:58:d5:21:c3:4d:34:45:f1:1c:ba:
                    f8:23:2d:3f:2c:2a:73:37:bc:5f:2d:cf:43:46:cf:
                    c8:f2:45:9a:96:c1:3c:11:f1:b7:cb:b3:a1:f1:73:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9F:F0:68:95:B5:D3:B9:CD:0A:8E:E5:96:81:98:05:04:B2:A2:33
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:47:1c:f6:b9:7c:2c:62:66:a1:01:d8:c5:18:a5:ca:23:
         32:ee:cd:8e:d6:20:db:9d:56:16:84:1c:1d:d5:33:55:84:55:
         5b:08:ae:cd:81:94:8a:db:1d:10:50:68:6b:32:4a:a9:28:63:
         9b:29:c0:0c:f3:c6:dd:61:41:8c:81:10:03:43:0c:44:8c:f5:
         ab:22:20:4d:86:17:53:c9:82:2a:2f:ba:c7:84:03:ba:f0:93:
         20:70:98:af:48:2c:dd:5e:26:6c:7b:71:87:0e:64:61:ee:6c:
         47:f9:7d:04:64:da:80:c4:5c:85:2a:09:d8:3c:f9:fe:fe:d3:
         86:27:87:b2:4d:1f:e3:7a:3d:ca:ca:e1:1a:c8:dd:3a:b6:ae:
         8e:fa:ed:69:b5:f8:af:08:73:c2:c9:4c:3c:e1:01:57:3d:80:
         b8:9a:b1:7d:04:30:f7:5a:55:9b:ce:09:b8:53:5d:a7:38:e3:
         b7:17:2a:0e:1c:0e:76:34:64:ab:d0:3f:7c:13:1d:66:f8:5c:
         32:8f:75:80:2c:ce:85:f6:32:49:c0:7d:60:21:3a:91:01:ef:
         e6:1d:42:06:8d:bd:48:6b:4f:ac:67:c8:d3:96:0d:08:62:93:
         99:ae:b9:00:ec:c5:2b:d4:86:38:7c:43:3c:cd:9c:a5:73:68:
         c4:48:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:36:25 2025 by rpki-client