Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File:                     ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier:          pQYUKllgXgOxv3qUgdlJQRZ+5pCCSAeFi1CFBsiFFVc=
Subject key identifier:   CA:8E:78:8C:3D:9E:37:8E:14:1C:75:6A:77:9C:49:78:CB:31:E4:B3
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer:       /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial:       019679E93740A4F2ED07B3936C9641FCC644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number:          1510
Signing time:             Mon 28 Apr 2025 01:00:49 +0000
Manifest this update:     Mon 28 Apr 2025 01:00:49 +0000
Manifest next update:     Tue 29 Apr 2025 01:00:49 +0000
Files and hashes:         1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: oTvryQrd1gUGeoiBmwAI8Vvpo8BLl7t1xdx42uDqkWw=)
                          2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:37:40:a4:f2:ed:07:b3:93:6c:96:41:fc:c6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
        Validity
            Not Before: Apr 28 01:00:49 2025 GMT
            Not After : Apr 29 01:00:49 2025 GMT
        Subject: CN=ca8e788c3d9e378e141c756a779c4978cb31e4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:d1:70:70:35:fb:e4:dd:48:1e:70:34:3b:
                    d6:5f:8f:13:6e:17:b3:d5:7c:5c:aa:53:64:7a:38:
                    27:aa:65:51:20:49:1c:69:4d:17:0e:ff:f6:72:62:
                    12:f4:79:3e:3b:90:04:08:61:0e:2a:1e:86:5d:0d:
                    e9:d4:c7:85:94:a1:f5:f0:d2:9d:70:bd:19:88:e8:
                    49:12:70:d4:35:99:01:80:17:d4:c0:96:41:24:5a:
                    fb:a5:00:b2:94:71:2a:1a:0a:16:20:ce:74:11:aa:
                    5b:56:4a:97:f3:66:70:e8:fb:bd:ee:a3:b0:a6:74:
                    47:1b:40:5d:81:79:01:56:d0:68:8d:33:f2:3e:4e:
                    ea:7c:83:0b:54:4a:e2:7e:a9:28:71:ce:f3:ab:6c:
                    50:e3:cb:ee:b3:7e:87:c1:64:cb:c4:07:62:df:1a:
                    eb:08:0e:e2:5c:12:10:12:b7:22:65:1a:39:1d:26:
                    aa:cc:3c:d6:ba:66:92:63:28:97:3b:2d:ba:54:3e:
                    34:55:2f:2f:3f:ce:f6:f5:3b:58:ee:6a:9b:56:86:
                    30:be:ce:b8:b1:13:c7:84:93:4e:d0:9a:6f:46:41:
                    8e:d5:41:5b:f0:d8:ea:a6:e2:7d:95:bf:8d:c4:5f:
                    38:2e:5c:56:84:3f:30:4b:3e:d3:15:93:ab:90:a9:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:78:8C:3D:9E:37:8E:14:1C:75:6A:77:9C:49:78:CB:31:E4:B3
            X509v3 Authority Key Identifier:
                keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b1:30:7f:26:aa:4a:75:27:47:05:4e:c9:21:56:5e:e5:32:
         ae:f5:fe:ee:e6:8c:0b:0f:65:08:ce:1d:9e:c3:8a:7f:d9:4d:
         4d:56:aa:0f:a5:50:c5:b9:32:0f:4b:79:fe:91:9e:12:03:b1:
         7b:80:56:f0:e5:90:98:dc:52:13:b7:10:28:46:2d:a6:d2:10:
         d5:b1:08:88:61:ef:d5:68:f2:50:54:87:06:f4:fe:08:70:6b:
         9f:62:81:8d:04:bd:d3:69:27:0d:2b:ea:d2:2d:f0:73:d1:89:
         22:d2:ae:92:12:b6:b7:3c:5c:55:79:a9:5f:1a:02:4e:f7:c8:
         52:f7:4e:ef:8b:c6:01:8b:35:0e:d9:76:98:1e:45:0e:e7:52:
         a4:e8:dd:b2:f2:9d:e6:bc:0e:58:3b:3f:c9:6e:aa:65:5a:77:
         21:46:dd:f0:1c:9e:c3:74:b6:bb:ff:74:97:17:26:dd:48:57:
         c1:34:2e:e1:73:10:ee:37:a8:58:ac:86:9f:fc:fa:ba:e6:09:
         2e:2f:e3:e4:24:0c:6f:6d:be:55:40:11:fe:3a:90:61:ec:49:
         03:da:98:43:3f:f3:1c:03:00:dc:96:42:5e:c3:67:8d:82:84:
         15:8d:db:11:4a:e3:ef:31:0d:1c:a2:33:51:77:37:4b:31:4a:
         78:ec:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:13:21 2025 by rpki-client