Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File:                     70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier:          sC/4feyFOx3EUL7cryAgZ27QW6o88lQOTMEKVQjzgjo=
Subject key identifier:   53:0B:4A:24:3B:5A:C4:61:9A:40:50:20:CA:5E:E6:45:27:06:EA:75
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer:       /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial:       0196876DD53E6D22B0D83803417E55976891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 16:00:44 +0000
Manifest this update:     Wed 30 Apr 2025 16:00:44 +0000
Manifest next update:     Thu 01 May 2025 16:00:44 +0000
Files and hashes:         1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: /VwUE+IDy753sYRrgV8oemZjSqwAVWpsECPug0dKqgk=)
                          2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:6d:d5:3e:6d:22:b0:d8:38:03:41:7e:55:97:68:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
        Validity
            Not Before: Apr 30 16:00:44 2025 GMT
            Not After : May  1 16:00:44 2025 GMT
        Subject: CN=530b4a243b5ac4619a405020ca5ee6452706ea75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:2a:db:16:fc:9e:85:76:1e:cb:52:f0:be:
                    7b:d9:5b:91:bc:df:61:a4:bb:8c:38:1d:a4:a6:08:
                    4d:33:d6:d9:67:94:1d:ef:60:95:90:1d:10:25:f5:
                    52:c1:bf:67:fa:a3:ea:f5:cf:b5:03:50:91:f7:ec:
                    5e:ea:16:9e:e7:80:1c:6e:64:ec:4c:94:ea:72:72:
                    a1:c0:35:2e:83:b3:b4:9c:7b:6b:22:a2:80:5b:49:
                    ad:7b:ab:9c:74:0b:a6:7a:5a:c3:39:a4:66:59:dc:
                    86:b7:9e:72:e1:62:ba:a8:d1:23:fa:1f:7d:24:b6:
                    bc:f2:4d:e5:3b:d5:75:da:e9:cd:dc:c3:20:7f:2b:
                    9a:13:b9:0a:fd:08:30:4e:7a:9e:9c:a3:0e:b8:3e:
                    ac:f6:be:47:6c:1b:40:e9:58:30:41:08:6c:a1:92:
                    45:95:cf:84:e0:1e:75:f2:5a:5a:24:31:63:f2:17:
                    27:cd:89:56:b0:5d:d7:4d:6c:4f:25:d4:fd:cd:0e:
                    22:2d:64:af:95:e6:7d:42:09:92:a3:d3:ca:e0:39:
                    7e:bc:72:aa:0d:fb:2f:41:c8:ea:6f:b8:09:b8:fd:
                    d7:26:6b:dc:35:8f:da:c5:2f:ce:0a:de:a8:a3:6d:
                    da:6f:24:d5:06:e6:df:8d:dd:b4:e7:75:d3:83:31:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:4A:24:3B:5A:C4:61:9A:40:50:20:CA:5E:E6:45:27:06:EA:75
            X509v3 Authority Key Identifier:
                keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:88:a0:97:ea:19:65:89:2e:eb:be:20:40:fc:d4:12:73:b4:
         6b:55:64:bb:23:ab:73:bf:4a:52:b0:e6:be:19:b1:65:d8:4e:
         3d:47:f1:42:e9:07:5a:3c:d1:b9:bf:f6:03:d1:5c:91:8f:83:
         d9:06:bc:0f:b2:76:35:b9:f7:8a:2a:e8:14:8a:b7:13:fb:c4:
         d8:20:db:00:b9:96:03:e5:07:24:f5:e8:b4:f1:56:40:c6:ee:
         11:94:f2:89:d5:97:27:01:2c:a7:82:e4:01:68:38:0d:7c:b6:
         5e:b3:95:de:8b:5d:3e:16:0b:0e:61:63:39:da:0d:51:0d:0f:
         d9:fb:38:c0:13:6d:0e:ba:58:7e:c9:92:6e:58:fd:93:18:2f:
         03:ba:3c:65:4e:7b:39:08:7a:5b:b1:07:78:ee:1d:51:88:a1:
         32:8b:a4:88:0a:4b:17:e9:84:16:e7:7d:ae:f6:75:76:5d:6b:
         4b:23:a7:14:26:58:ec:15:56:7b:08:a3:92:2f:76:b1:52:b6:
         dd:fd:1a:d1:73:7c:75:d9:2b:23:df:f9:7c:88:f3:b4:9c:57:
         f6:1c:9f:99:12:b3:83:49:1d:9a:80:d4:b7:65:37:c4:d7:29:
         81:3d:16:d4:ab:83:3a:21:b0:b2:d4:d7:b6:70:5d:ce:7c:5f:
         4b:99:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:59:03 2025 by rpki-client