Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
File:                     61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft (raw, json)
Hash identifier:          jPqFw/hLDLNJ7kkgED7u8WMN0Eu9zJbA3wZxAt6hBRE=
Subject key identifier:   F3:0A:1F:5B:8A:15:21:33:1A:6B:42:17:67:A0:B0:1C:79:DC:09:4F
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Certificate issuer:       /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial:       019673E68B91D3BFDAF2C558C62576594A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
Manifest number:          13FB
Signing time:             Sat 26 Apr 2025 21:00:10 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:10 +0000
Manifest next update:     Sun 27 Apr 2025 21:00:10 +0000
Files and hashes:         1: 1-2EBppiSOjktT4c8541NHUWIXp4.roa (hash: mDi6ulbEvLogL54BCm4x5j5s52n2zOwohZJdy8LLDgM=)
                          2: 61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl (hash: c9PbGzP+0dzmPkG4WCmI/5h1iiQJs8EuPXYAuHNGuEw=)
                          3: 99j68jcIcmMIEjblV6YGZG7Xz-A.roa (hash: 6pGtaoOAdQOjWl1uvPVsb4nf1cwSsH0trxw0JSPAMyQ=)
                          4: eyY-erluNs3v5144XEgHxCFOudE.roa (hash: TBmAqLL8PbuQkrNWT7JMgvjhkU1ufdS4TOsNk7ShJ90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:e6:8b:91:d3:bf:da:f2:c5:58:c6:25:76:59:4a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
        Validity
            Not Before: Apr 26 21:00:10 2025 GMT
            Not After : Apr 27 21:00:10 2025 GMT
        Subject: CN=f30a1f5b8a1521331a6b421767a0b01c79dc094f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:cd:66:cc:27:66:fa:cd:7c:3a:78:9e:83:
                    5b:cd:a7:e0:c0:91:17:13:2a:55:98:35:dc:9d:74:
                    a3:50:cd:9e:2e:7f:b8:38:c3:6f:4b:e9:5d:01:de:
                    c6:25:46:e3:b3:af:1f:94:3d:54:f4:09:c2:c7:70:
                    3c:44:ae:1c:3c:22:9f:ca:a0:5f:3c:a6:2e:d7:4b:
                    b6:39:39:59:87:ef:8a:b5:4c:3a:8c:7d:85:79:da:
                    7a:a7:d7:e9:97:09:f6:67:93:c4:cf:c6:c3:81:dd:
                    51:3e:c5:f4:84:fe:07:65:c4:85:de:cf:a5:ac:32:
                    1b:93:79:f0:2c:85:0c:53:3e:95:87:8c:0f:55:1d:
                    44:28:ac:11:05:1a:48:e2:00:25:57:27:ed:93:e4:
                    c8:05:71:c4:58:9b:0e:04:60:d6:cf:9c:a2:5f:6e:
                    55:68:6b:49:f9:ad:64:3e:7b:cb:f3:41:8a:ec:35:
                    5f:09:13:d2:ab:f8:15:6d:37:b9:a6:9c:93:bc:6c:
                    43:04:94:3c:27:54:04:9c:30:9f:2c:0d:63:23:59:
                    68:91:e1:a7:d3:09:4f:31:fd:14:0c:a2:b4:5e:2a:
                    90:c0:92:32:e6:46:55:ad:fe:07:c0:84:95:c9:74:
                    5d:f6:15:36:17:4e:c1:22:d9:57:a5:49:53:4b:61:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:1F:5B:8A:15:21:33:1A:6B:42:17:67:A0:B0:1C:79:DC:09:4F
            X509v3 Authority Key Identifier:
                keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7a:e2:69:5f:68:c8:b4:cb:c6:79:b4:f6:58:c6:86:9f:55:
         38:b9:a1:97:f2:75:1b:05:f9:c2:41:f7:fd:48:af:01:e7:88:
         3a:16:17:6f:61:68:1c:7e:99:18:23:15:97:83:e1:ae:d3:50:
         f8:e9:a3:05:a6:f1:04:13:ae:ba:00:66:67:39:eb:fc:2c:a8:
         d7:07:86:03:da:9d:85:a2:39:b1:ae:5a:56:f8:71:f6:9d:df:
         75:d4:cd:b3:e4:0f:1e:db:60:0b:70:22:47:2a:56:a3:31:12:
         22:5d:a2:e5:a4:7f:18:78:fe:51:68:8f:92:21:73:1f:8f:89:
         93:e1:5b:1c:0c:98:a6:d5:ac:91:40:00:82:1e:37:1e:27:16:
         43:d3:aa:c8:ba:21:1b:a0:bb:4e:fc:93:19:18:7f:64:6c:bd:
         fc:55:25:b2:78:6b:9f:c0:85:96:d7:6d:18:75:ca:3b:9e:fa:
         b3:71:c1:88:44:a5:7e:b5:12:12:80:c5:76:16:29:16:52:58:
         52:62:c7:66:09:da:ec:47:15:f9:60:b9:d6:c7:9f:60:33:f4:
         d2:b5:5c:56:51:56:b2:f4:80:e4:7a:c4:9c:65:b0:c7:9a:73:
         11:3d:00:eb:74:01:20:ef:3a:fd:d0:47:cf:a3:3b:9c:63:74:
         c4:63:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:05:47 2025 by rpki-client