Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          jmlTWgynt2Uc/X6L+NNHiWw0RcJC4PDBl30QqhQMNL8=
Subject key identifier:   8A:43:E6:AB:47:7A:CF:EB:BC:03:CB:3C:D3:3C:59:F0:DF:03:FC:34
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       019673B04967815EB57A6A036C57ED8AD9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          0D81
Signing time:             Sat 26 Apr 2025 20:00:55 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:55 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:55 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: GAjHY7RYMplDsz+tpvKsCVfz90zGUJ3nCrYD6Gr0m6k=)
                          2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:49:67:81:5e:b5:7a:6a:03:6c:57:ed:8a:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Apr 26 20:00:55 2025 GMT
            Not After : Apr 27 20:00:55 2025 GMT
        Subject: CN=8a43e6ab477acfebbc03cb3cd33c59f0df03fc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:6b:1d:bc:32:04:c5:89:22:11:e6:5f:b0:
                    27:0f:53:3b:e3:0e:b6:ed:e7:ee:a6:39:fa:7f:16:
                    e6:5a:0c:23:16:69:60:be:25:5f:1c:ae:01:e6:e6:
                    4e:2b:d2:4f:3b:26:73:82:cc:29:af:ee:aa:72:f0:
                    61:8c:ef:68:0a:42:f4:a7:90:3b:53:ae:82:e7:d4:
                    8a:1a:bb:26:74:bf:54:71:bb:58:f9:19:4b:3e:79:
                    b9:91:97:b7:00:6d:cd:74:cb:e5:b9:d1:b9:7e:95:
                    ac:0a:06:9f:41:24:ea:44:eb:80:d0:7c:08:a1:8b:
                    b1:92:63:ef:a7:f4:85:ee:44:ce:d6:e7:20:9b:bb:
                    59:96:ea:70:e4:6d:08:f2:fd:d9:c7:8b:1e:10:64:
                    9e:41:9b:c4:6a:04:28:19:35:f0:ed:8d:1e:bc:63:
                    ee:bb:c0:57:d9:d4:26:4d:11:2c:9a:b4:a5:d4:60:
                    08:cd:c0:5c:3f:bd:b7:26:6a:15:dc:91:fa:4a:b4:
                    9e:33:b4:f1:60:ae:33:df:bf:b3:e6:77:6b:e5:7b:
                    3f:7f:b5:3b:af:3d:19:c1:53:03:63:46:09:03:6e:
                    f1:6a:1f:da:bd:74:9e:f4:4b:08:56:4d:1e:3c:aa:
                    49:6f:52:90:87:71:4d:f1:ee:94:ec:12:86:10:fc:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:43:E6:AB:47:7A:CF:EB:BC:03:CB:3C:D3:3C:59:F0:DF:03:FC:34
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:a0:2b:b7:fc:73:cb:aa:93:54:13:1c:6e:58:e9:db:3a:
         3a:c2:dc:54:b7:49:7c:7c:9f:d3:85:a5:7b:77:6c:c1:be:02:
         9f:ae:fd:0e:32:73:4b:a4:57:62:7f:65:d1:f9:42:d8:36:1f:
         d2:ba:9d:6a:01:90:dc:7f:2b:6b:b6:f1:2f:bb:77:c1:b7:d1:
         f4:89:17:d0:44:84:27:05:70:29:ac:6c:5c:0a:ee:f0:eb:8e:
         dc:60:e9:59:24:a5:36:20:91:04:cb:db:b0:02:cd:1c:61:f7:
         bd:c3:c7:f3:ef:2e:72:d0:d6:db:d3:68:06:bd:9d:9d:77:f7:
         5c:d7:12:db:ea:62:16:46:d7:71:2c:31:24:28:e0:88:33:7c:
         e2:62:62:d7:71:73:70:4a:b4:be:2f:bb:60:1a:91:dd:fa:47:
         ce:b9:e0:85:33:13:8e:ac:ae:00:26:83:68:0b:dc:a8:1a:76:
         e1:84:97:53:f9:de:8a:03:6c:ad:77:30:a9:84:73:bc:52:b9:
         8d:f7:54:ab:89:38:b4:2b:03:05:1e:70:74:04:ba:5e:2e:56:
         f9:80:c4:58:25:42:73:04:08:fe:17:dd:f3:e7:89:f2:c1:50:
         75:3f:91:de:e0:77:a0:89:e0:93:bc:ad:6f:9b:e7:e1:db:30:
         af:4a:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:33 2025 by rpki-client