Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File:                     eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier:          IU/Bya4w0vdYXFuKmczui8qExlSuJ8XRycu7tqiY6bw=
Subject key identifier:   DB:C9:B6:D6:90:18:AA:BC:2D:44:60:AE:EF:B7:1C:66:CC:DA:0D:6E
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer:       /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial:       01967A8E190036C529EEBA14882AEC2D6453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number:          150F
Signing time:             Mon 28 Apr 2025 04:00:54 +0000
Manifest this update:     Mon 28 Apr 2025 04:00:54 +0000
Manifest next update:     Tue 29 Apr 2025 04:00:54 +0000
Files and hashes:         1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: QCQVvzFZqMmaxxEi76yh7fETC03g9jt5fzcCig7rteo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:8e:19:00:36:c5:29:ee:ba:14:88:2a:ec:2d:64:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
        Validity
            Not Before: Apr 28 04:00:54 2025 GMT
            Not After : Apr 29 04:00:54 2025 GMT
        Subject: CN=dbc9b6d69018aabc2d4460aeefb71c66ccda0d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:1e:e5:cb:e8:8e:73:ae:82:08:dd:b9:a8:
                    f4:88:72:13:69:74:c1:b4:55:46:3d:79:69:4c:fe:
                    56:90:73:8c:eb:7f:20:9a:41:ab:2d:ce:46:bd:2c:
                    9a:1e:cf:95:69:b5:3e:74:63:a3:6b:b5:4c:d0:02:
                    ba:77:e8:1c:0f:e9:c4:51:51:b1:9d:70:f7:a4:d4:
                    54:ae:c6:86:d1:21:72:f3:db:16:8a:5a:2f:58:1a:
                    64:f0:1a:d0:97:0e:b3:02:79:63:d7:9d:0e:35:67:
                    4a:71:09:ed:80:64:65:70:d2:b7:36:07:a6:5d:a5:
                    54:34:f5:e9:01:98:69:91:89:ba:a1:14:d8:34:c6:
                    c8:ff:23:42:dd:69:4c:6a:d7:21:b0:7a:29:f7:af:
                    28:f7:bb:7c:c3:e2:aa:c7:49:74:85:ae:f4:a4:9d:
                    86:f9:eb:bc:63:1e:87:f3:5c:64:f5:dd:02:df:54:
                    80:93:d6:7d:4e:0a:4c:05:4f:9b:c2:5a:d9:9f:9d:
                    6e:07:1d:fa:d8:7c:5f:c3:b1:52:66:b9:80:46:1d:
                    2e:1a:2e:40:24:52:4c:a2:6c:04:10:f0:e2:23:38:
                    07:bd:3c:48:e8:52:6a:d2:5c:1f:39:02:40:6c:fa:
                    05:4a:29:95:31:46:10:88:42:0e:33:7e:6d:a8:b6:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C9:B6:D6:90:18:AA:BC:2D:44:60:AE:EF:B7:1C:66:CC:DA:0D:6E
            X509v3 Authority Key Identifier:
                keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:6c:00:98:b1:7a:40:f5:d1:21:84:dd:f2:59:4b:84:f4:
         e6:8c:eb:18:93:7f:27:76:79:b3:f1:f3:b7:7f:9e:1e:0c:3b:
         1b:a0:e4:28:ee:e0:fb:b0:cd:7c:c2:83:4e:6d:a8:09:99:91:
         6d:fd:51:33:8c:2a:0a:09:1a:5e:d8:d0:d4:1c:d9:95:f9:67:
         42:68:bb:9b:62:4b:93:e0:40:9f:1a:af:3d:a6:0e:07:2c:aa:
         f3:22:55:6c:47:93:2e:7b:e3:03:49:bf:73:b7:f7:cc:52:b1:
         0a:86:93:54:2e:4d:9a:51:fd:be:a9:69:ec:cd:b2:e8:c9:04:
         7b:db:95:22:9d:65:a3:46:8f:1e:b2:e6:0f:6d:c2:bc:5d:2b:
         c8:26:b6:df:23:c2:43:81:c7:d6:d5:5f:e5:5b:78:70:8c:d3:
         a1:f6:2b:09:76:09:4e:ef:03:a4:02:cf:ce:c7:91:05:5d:de:
         83:9d:79:2c:6e:7b:4b:7b:92:cd:27:48:13:7f:85:54:4f:0d:
         8c:b2:97:12:f4:fc:6c:96:56:64:29:08:21:59:12:0e:6a:52:
         a9:b5:c5:a8:0b:5b:e0:0f:45:ee:2b:d4:53:62:73:a8:e8:80:
         06:65:f3:96:f7:1a:77:de:68:2c:c7:a5:bf:7c:1a:88:dd:ac:
         d2:84:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:50:56 2025 by rpki-client