Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File:                     E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier:          gf2h17W2Du2o7v8CW+9fKmA0JqB3ulhpspaa3PL6KGk=
Subject key identifier:   AC:10:78:19:5C:15:5D:E6:8E:CB:EC:2E:B8:12:93:7B:82:8A:4C:A9
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer:       /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial:       019673423B359F7C2CB927A3B3A1253B924B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number:          FD
Signing time:             Sat 26 Apr 2025 18:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:42 +0000
Files and hashes:         1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
                          2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: 2KzNuRz1f9qrgB0uSokoZIF+MwhTYHPdOL9PUVLj5AM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:42:3b:35:9f:7c:2c:b9:27:a3:b3:a1:25:3b:92:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
        Validity
            Not Before: Apr 26 18:00:42 2025 GMT
            Not After : Apr 27 18:00:42 2025 GMT
        Subject: CN=ac1078195c155de68ecbec2eb812937b828a4ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:44:07:c4:7c:4c:27:88:84:62:1a:48:e3:
                    b9:a3:08:87:b8:1e:9c:18:96:74:bd:15:5a:67:58:
                    16:ca:21:8f:c9:ad:75:5e:e7:c5:5f:71:1e:42:87:
                    5a:51:7f:6f:aa:b6:cf:13:b0:1b:c3:a8:14:a0:d3:
                    d7:31:9c:ef:9e:fd:2f:8c:b4:2a:34:1d:f0:5f:78:
                    f8:44:9f:fe:19:e2:63:b3:2a:36:fa:67:02:45:fb:
                    1a:f8:f1:f8:64:0c:ec:ae:c1:a1:ba:da:ae:da:85:
                    04:63:db:e3:91:23:9f:8b:99:09:c1:37:2b:ff:fe:
                    c3:da:3e:1b:4e:4a:18:17:97:ba:f0:d3:b3:52:55:
                    11:4f:ea:80:da:13:b6:76:e9:b2:8a:24:a3:02:be:
                    60:5b:17:8b:ba:bc:da:89:fc:0b:11:af:80:ec:bb:
                    3a:c7:5c:69:0d:cf:9c:94:cc:0a:4f:98:d4:0c:6b:
                    f0:28:b9:28:32:76:08:17:f9:4d:54:f3:a6:ae:c2:
                    3e:7c:9a:19:c4:93:1b:ee:f7:11:47:25:36:35:05:
                    6b:15:5c:e6:98:2d:da:42:f4:2b:90:a2:81:6c:47:
                    56:d3:e3:64:8e:8e:44:e2:42:64:01:2b:6d:58:a6:
                    02:b8:ec:ce:37:e4:c2:ac:3a:73:78:25:94:fe:b1:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:78:19:5C:15:5D:E6:8E:CB:EC:2E:B8:12:93:7B:82:8A:4C:A9
            X509v3 Authority Key Identifier:
                keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:67:ac:3d:ff:23:fa:8a:11:a1:3e:8b:ad:c4:b5:2b:a1:a1:
         d1:a5:a3:f9:3c:f5:2f:2b:06:9e:2a:c6:85:c5:69:e7:c3:e6:
         a8:eb:8f:af:08:4d:da:7a:a0:cd:03:ff:5b:c6:36:a1:25:26:
         9d:4a:8d:e2:e8:fa:33:ad:3c:d0:ac:e9:47:f8:19:ab:11:cd:
         a3:1b:4e:60:30:01:76:65:03:68:00:b3:b3:77:2d:93:a0:23:
         cb:ee:9e:f0:83:aa:82:c9:66:63:34:13:ee:76:9e:f8:e9:16:
         69:a2:91:93:86:39:9e:e0:eb:94:ee:a2:80:6c:7a:d1:f6:c0:
         3b:e3:c1:e4:9a:89:06:7f:9c:48:82:cc:30:1f:89:0a:5b:53:
         6c:e1:93:38:fc:c6:be:85:7a:74:c7:41:5a:ed:be:04:a8:96:
         42:e6:3e:6e:04:da:8a:e5:c4:68:2f:5a:dc:cf:a0:5b:94:6d:
         a0:34:5e:2e:02:d2:95:3d:1b:fd:43:8d:d5:64:f8:ba:0c:2b:
         42:32:74:2a:af:0b:a0:cd:e4:b4:c6:25:82:1c:27:8c:2a:e1:
         56:e0:36:c4:7d:30:e2:f1:6b:5a:b6:d4:06:ad:c1:a8:0f:c9:
         1b:e9:25:df:68:ac:e8:ba:5b:ea:e5:64:5d:a0:75:f6:ce:47:
         7b:ff:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:28 2025 by rpki-client