Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File:                     egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier:          K785UDU8Lr49OBBMJPnllmF1TCT3Yh5NmL+cfhcQ/Jc=
Subject key identifier:   51:60:BD:BB:D8:4C:59:8A:64:5D:91:9E:E0:4E:5B:34:74:69:67:79
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer:       /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial:       019681A2AFF6B9A33782D6030A0DC7EC8138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number:          102D
Signing time:             Tue 29 Apr 2025 13:00:44 +0000
Manifest this update:     Tue 29 Apr 2025 13:00:44 +0000
Manifest next update:     Wed 30 Apr 2025 13:00:44 +0000
Files and hashes:         1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: fGq97RAL6w9oe6990u36ovGIqfGwUmpXbhOh/nmSTHk=)
                          2: h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa (hash: SWkmFiL0pM+fIwknjB1oWTVUsg4SQOvXw9O+NxZEonA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:a2:af:f6:b9:a3:37:82:d6:03:0a:0d:c7:ec:81:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
        Validity
            Not Before: Apr 29 13:00:44 2025 GMT
            Not After : Apr 30 13:00:44 2025 GMT
        Subject: CN=5160bdbbd84c598a645d919ee04e5b3474696779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:5a:51:22:f0:8d:35:b8:35:08:8f:aa:c2:
                    35:49:b5:ba:77:e4:1c:f2:c3:2c:8c:e2:92:ca:d3:
                    05:79:dc:6a:82:ae:9b:e6:28:a3:27:09:1a:d4:91:
                    76:5d:25:93:6c:fd:fe:2e:14:31:70:68:f2:aa:20:
                    e4:47:87:2d:9c:89:07:a7:15:d7:b5:6f:89:ec:ce:
                    43:83:83:f4:20:15:ab:92:f3:87:f0:2b:15:25:91:
                    52:f8:b7:56:22:ad:e2:81:ec:a5:1f:47:30:71:05:
                    08:32:84:30:49:fa:84:56:81:60:64:d9:0a:48:32:
                    76:18:79:7c:7f:31:fb:ed:c3:50:29:eb:3a:df:15:
                    58:e8:9b:6e:4d:da:a1:d9:d7:a0:af:1c:dc:ce:0b:
                    6f:fe:fa:05:cd:ee:99:f9:8f:1c:eb:17:71:70:8b:
                    2a:93:59:7c:52:29:04:52:bd:b0:51:d2:5e:f0:e1:
                    49:d5:b2:d6:36:79:c9:39:ef:9e:c4:60:29:f1:b2:
                    c6:44:90:d8:3e:2a:89:2f:ed:6e:ed:61:bc:6c:2b:
                    a0:5f:a5:b4:fd:15:ec:99:50:cb:cd:82:e6:db:e4:
                    95:aa:ea:b3:0e:a5:a1:ed:84:c1:f5:c6:8f:dd:f4:
                    ad:dc:3f:7c:79:65:84:7e:07:05:69:76:03:aa:72:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:BD:BB:D8:4C:59:8A:64:5D:91:9E:E0:4E:5B:34:74:69:67:79
            X509v3 Authority Key Identifier:
                keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:cc:a4:0a:ee:a7:9e:ce:63:8e:3b:f8:8a:b0:06:d9:48:
         44:cc:f8:e7:ec:4c:ac:d9:9b:bb:8b:c9:73:30:68:dc:e3:2d:
         51:01:b7:71:64:50:72:4c:16:60:a3:1f:4a:9b:4d:20:a2:bc:
         d4:13:f2:a5:a9:7b:e2:9f:0d:ce:10:71:fa:a4:83:50:4a:c4:
         d6:be:3f:fd:90:9b:a5:d6:84:62:7c:29:d3:55:71:3b:87:f3:
         af:10:0a:8e:0b:29:57:de:17:6f:c8:c5:b5:cc:54:71:54:cd:
         d8:c9:02:e8:a4:38:f3:a7:59:10:44:c9:39:da:d2:3e:07:0e:
         f4:e6:f4:47:94:2c:9e:a3:7b:84:34:da:9e:cc:0e:19:63:e1:
         4c:03:73:04:ee:ef:31:92:96:e9:90:ec:61:4b:08:35:d9:da:
         fd:69:a6:46:72:96:c6:19:1b:fa:c5:a1:2b:92:e5:64:45:ba:
         67:aa:68:3f:72:71:11:c9:e0:a3:4c:e9:be:1b:44:80:ff:a2:
         d9:85:0b:39:8f:35:36:bc:e6:87:96:d1:0c:37:2b:a6:b2:cf:
         11:3d:7b:2d:16:b8:de:f8:1b:f5:e3:bc:7a:ff:c2:65:99:e8:
         da:fe:03:a6:a0:37:e9:b0:da:a1:15:40:fa:c4:6c:19:6f:f0:
         67:b0:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:24:32 2025 by rpki-client