Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
File:                     eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft (raw, json)
Hash identifier:          cICI5i5yuVhQyh94YJD7tpO0lWeorcJj4q7yzLMV7mQ=
Subject key identifier:   33:9F:AD:47:52:18:E7:95:CF:F6:8D:C9:42:F0:87:AA:00:EA:3A:24
Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
Certificate issuer:       /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Certificate serial:       0196767A76CE04B088695AE2959E574FDC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
Manifest number:          09B3
Signing time:             Sun 27 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:59 +0000
Files and hashes:         1: 3FhPHXjNqCNRaJkhajAtvZfU25U.roa (hash: bU5Bg3UPlM6G59tVUSFZdAywzmF3MD1KfnmT0LLr508=)
                          2: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl (hash: LeBO2mN+sGMYjUzuIVg2idJenW8bkeSPEG35OAPzUac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:76:ce:04:b0:88:69:5a:e2:95:9e:57:4f:dc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
        Validity
            Not Before: Apr 27 09:00:59 2025 GMT
            Not After : Apr 28 09:00:59 2025 GMT
        Subject: CN=339fad475218e795cff68dc942f087aa00ea3a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:f5:66:5d:06:d3:2b:66:3c:24:0a:16:55:
                    17:53:b8:5d:f1:3c:e2:3b:43:46:53:0b:b9:ce:a3:
                    a7:7b:c6:66:33:b7:af:54:0a:d6:8d:d8:7b:1c:89:
                    16:1b:4f:7b:bf:86:9f:49:d5:a6:f5:11:25:93:b1:
                    47:bd:22:27:7c:39:3c:c2:c6:80:35:3a:72:21:ce:
                    6f:22:bd:5c:d1:04:0a:1e:5d:5b:e9:bc:6e:43:c0:
                    f4:25:50:78:4a:3c:d3:5a:7d:70:26:7d:fd:ed:f6:
                    e5:d0:25:99:1a:31:c0:6f:8c:44:b5:9c:8e:a8:3e:
                    e6:51:f7:f8:6c:5a:18:28:27:30:54:1d:c1:cf:5e:
                    5e:1b:c5:9c:43:fa:45:2f:b6:77:a3:d5:df:ee:c3:
                    3c:87:cf:5c:8f:79:38:2f:e5:1b:71:01:f2:f2:96:
                    21:f4:80:4f:19:da:d5:fc:5a:bc:59:bc:1d:2b:3a:
                    38:e9:e5:50:e8:9b:12:2b:43:42:23:39:11:88:f3:
                    12:5c:ed:6c:ee:f8:dc:8c:a9:47:79:f4:96:96:3d:
                    ef:5a:e0:57:c2:58:a1:0d:30:4d:1d:74:63:6f:ea:
                    df:19:9d:98:5e:02:c8:13:3d:39:c7:43:61:1c:09:
                    7d:e9:7c:57:29:05:9b:b2:f0:61:71:d0:eb:e4:cb:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:AD:47:52:18:E7:95:CF:F6:8D:C9:42:F0:87:AA:00:EA:3A:24
            X509v3 Authority Key Identifier:
                keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:be:39:36:fa:7f:38:18:c9:1a:50:4c:f8:47:ff:6b:01:19:
         eb:51:1c:42:6b:79:73:4c:99:aa:0a:57:b8:1a:44:16:6e:cc:
         80:fc:a4:b5:27:c6:66:a8:a7:c3:c1:55:94:6a:e1:a3:00:f7:
         7c:7d:c0:12:b8:56:75:4e:b4:21:8e:dd:f5:8e:dc:f1:07:07:
         cc:98:ac:c3:64:b7:97:5e:65:c0:6d:bd:57:c1:22:e7:a2:1d:
         93:89:73:04:61:f8:62:7a:5a:b2:b4:02:fb:61:93:ca:67:55:
         99:23:64:a2:97:48:f7:6d:1c:84:c1:75:05:28:56:7e:3e:e3:
         c4:94:b7:79:60:ee:d6:9e:be:22:f2:f6:75:2c:f9:df:b1:28:
         b7:55:94:a0:85:e2:41:34:4e:9a:df:9d:0d:aa:2a:15:cd:24:
         4a:45:95:97:4a:b2:56:1a:c1:06:58:bc:e8:14:0e:b8:78:5c:
         e7:91:d9:18:4e:4a:51:db:df:7d:cf:0b:68:e1:62:00:1e:a9:
         33:92:2b:e8:35:97:99:17:2f:11:0a:d8:25:bf:70:c5:9d:04:
         2b:b9:48:49:29:a3:c5:9a:fb:2c:87:51:83:8f:82:15:a8:42:
         56:8a:54:7c:0b:ad:8e:d2:dd:cf:24:5c:16:b5:15:57:2b:00:
         90:4b:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:40 2025 by rpki-client