Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File:                     EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier:          K8e5Oea6R6hwd1Hu0w5SazzX/YIm32+5KP4wkR+YGt0=
Subject key identifier:   FE:47:D3:43:AA:37:0C:36:84:BB:D3:40:B5:47:55:F9:5A:1D:2B:7D
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer:       /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial:       019672305537C5281C6198377D64BE23E9AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number:          1512
Signing time:             Sat 26 Apr 2025 13:01:32 +0000
Manifest this update:     Sat 26 Apr 2025 13:01:32 +0000
Manifest next update:     Sun 27 Apr 2025 13:01:32 +0000
Files and hashes:         1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: hDFUg50Pg84N9KHqVHoA3I70VbViOFHf+FlpNJnTVTw=)
                          2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
                          3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
                          4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
                          5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:30:55:37:c5:28:1c:61:98:37:7d:64:be:23:e9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
        Validity
            Not Before: Apr 26 13:01:32 2025 GMT
            Not After : Apr 27 13:01:32 2025 GMT
        Subject: CN=fe47d343aa370c3684bbd340b54755f95a1d2b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:9a:cf:ac:b3:7b:31:ec:54:42:40:5d:56:
                    e4:69:61:2c:60:f1:67:72:00:6a:67:6b:1c:2e:23:
                    3a:c5:fb:3f:78:57:58:7f:2a:3c:d8:78:bf:3e:a3:
                    dd:12:c6:90:8b:d1:0f:38:4d:2e:8a:91:10:17:de:
                    5c:f0:e0:12:5c:3a:8b:1c:56:36:de:8e:45:2c:97:
                    a0:3e:f4:6b:78:68:6f:3b:ac:b9:aa:91:3b:6b:a2:
                    60:93:12:d6:cf:24:45:1d:8b:1c:76:73:a8:fb:a7:
                    16:a2:85:4f:80:68:33:44:07:d1:69:17:14:cb:94:
                    79:40:aa:32:a3:37:f3:e9:aa:94:34:a3:45:8a:a6:
                    46:e3:0b:d6:08:7b:95:ea:33:e3:ee:cc:14:db:a8:
                    e9:47:85:c1:7f:77:b1:e1:ac:b9:9d:b3:f2:02:5b:
                    3d:db:17:57:39:8c:67:24:f7:bb:bc:2a:db:a1:df:
                    e7:d9:7c:5a:62:4e:4c:97:1f:d5:e4:f4:b1:d4:41:
                    79:20:58:32:7f:a4:56:66:bb:b5:26:08:31:32:db:
                    57:e6:3b:56:d4:3f:5a:ec:50:72:5a:ed:9b:94:5f:
                    a8:21:8e:16:a0:17:5e:4a:2d:e7:4d:ac:c2:d4:28:
                    09:d4:a1:0e:a7:fd:02:dd:3e:78:94:bc:5f:6c:ee:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:47:D3:43:AA:37:0C:36:84:BB:D3:40:B5:47:55:F9:5A:1D:2B:7D
            X509v3 Authority Key Identifier:
                keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:20:d7:5e:f4:89:22:d7:f9:73:61:d8:a1:b0:14:62:32:
         cf:48:a4:fc:24:8a:61:04:e9:ea:4e:59:59:68:03:0e:3d:6b:
         45:9d:41:af:75:22:2c:c0:d1:f0:88:b3:34:04:12:da:65:1f:
         84:8e:7c:18:ea:bd:ab:21:6f:b3:a9:2a:4e:8f:9f:91:88:64:
         74:30:a8:96:43:2b:6e:7e:12:3c:f8:a1:c4:8f:c4:98:90:36:
         10:17:ad:9b:d8:99:1f:33:63:a1:5c:7e:94:60:3e:e8:cc:3c:
         da:04:79:06:37:35:46:bf:d0:f2:17:f0:ad:3e:86:71:fa:99:
         00:12:e2:e6:e8:c7:1e:67:53:f7:e4:98:94:41:67:09:e2:1a:
         c9:5c:4a:b5:10:f8:d3:00:52:d5:17:8a:74:21:53:2c:87:82:
         28:f6:dc:0e:0c:a3:65:07:52:95:31:c4:24:37:ec:65:f4:fc:
         86:d7:81:84:7f:fc:b7:41:d8:64:06:81:f4:5b:98:b4:dd:8f:
         9d:c2:e6:54:46:d7:be:46:7b:41:e7:41:34:4b:3e:71:60:1e:
         b2:db:ed:cb:a6:5c:1b:44:f7:8d:4d:d6:5e:45:73:91:a2:96:
         cd:dd:4d:11:6a:07:bc:4f:c6:89:b0:d3:1a:64:a4:e8:c7:48:
         40:44:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:00 2025 by rpki-client