Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File:                     _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier:          ACgC0uWwlqtoUgckq8JrPWSAqhyxE+E5LURZZCaXy4s=
Subject key identifier:   46:92:C9:C0:8C:6C:46:2F:97:0A:1B:0A:43:19:27:27:19:1E:DE:10
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer:       /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial:       01968E826B1D20B6B58545523CD32BA8C62C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number:          1281
Signing time:             Fri 02 May 2025 01:00:33 +0000
Manifest this update:     Fri 02 May 2025 01:00:33 +0000
Manifest next update:     Sat 03 May 2025 01:00:33 +0000
Files and hashes:         1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: 39jRUoBFsuO1BhK9Nhu8CYZVUtNbkvjWtZ20O5dwP3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:82:6b:1d:20:b6:b5:85:45:52:3c:d3:2b:a8:c6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
        Validity
            Not Before: May  2 01:00:33 2025 GMT
            Not After : May  3 01:00:33 2025 GMT
        Subject: CN=4692c9c08c6c462f970a1b0a43192727191ede10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:88:46:70:62:f5:40:b0:43:f7:2f:40:d1:
                    51:ab:9b:1a:b0:32:1a:04:2a:16:32:dc:12:c8:83:
                    07:f2:22:67:41:7d:5d:bb:55:5d:1d:96:e3:75:b4:
                    df:52:22:0e:6f:89:57:c3:38:71:24:07:f9:6f:5c:
                    05:6b:91:4f:a0:b9:d9:12:82:06:2b:83:13:06:88:
                    51:79:27:36:05:58:2a:48:71:ef:3b:11:9b:6b:7a:
                    c9:65:5a:a6:ba:8b:b8:45:18:d0:a7:27:72:af:4a:
                    af:11:3a:d2:75:b5:2b:3a:86:1f:85:4c:b8:59:39:
                    7e:b3:74:b9:89:54:44:09:0c:0d:07:df:be:a9:19:
                    64:a8:5b:9a:98:63:ab:dd:dc:da:63:08:41:10:56:
                    c1:11:57:ec:7a:77:c4:6a:47:31:2c:7f:09:3f:4d:
                    05:5f:01:97:c1:20:d8:38:b5:fa:cd:ee:a5:f9:85:
                    40:dd:a2:90:ae:e7:1c:4c:d3:7d:50:38:d0:1d:f0:
                    66:e2:6d:df:e3:df:f0:32:19:db:73:ea:53:54:45:
                    dc:bf:78:9d:3f:5a:95:67:08:26:c3:00:cf:c2:c8:
                    7f:cd:6b:2f:ad:02:1e:05:64:be:87:b3:5c:85:ed:
                    70:7b:39:a7:65:a1:97:bb:76:8a:29:56:33:3f:f4:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:92:C9:C0:8C:6C:46:2F:97:0A:1B:0A:43:19:27:27:19:1E:DE:10
            X509v3 Authority Key Identifier:
                keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:32:2a:c0:d1:71:87:65:f8:17:73:dd:a6:4f:12:42:20:2a:
         5e:0b:15:5e:84:73:83:c5:38:61:53:60:bf:16:22:9b:c8:9f:
         bb:88:68:ff:a9:8f:44:45:60:7a:77:d4:63:a6:fd:5d:5f:a9:
         8e:03:f9:d7:b4:2a:fa:83:76:d8:cd:d4:23:62:aa:d0:3a:a1:
         4b:a4:2b:4b:af:58:12:76:b9:31:38:ac:e0:0f:25:3d:56:85:
         6a:97:97:55:e5:f4:05:cb:80:93:18:59:63:85:e4:ad:8e:cb:
         56:b0:fb:3e:f4:8c:6f:ef:64:03:ac:e8:f0:31:99:86:33:25:
         66:d9:d9:42:41:69:7a:c0:4b:da:12:06:bc:0e:99:7c:0c:dd:
         16:5a:f6:c0:7b:f2:52:53:2e:bf:28:9e:0f:66:cd:44:c3:be:
         25:59:f6:f1:a7:ef:ec:49:a8:1a:7e:dc:36:20:a9:f7:db:67:
         14:18:49:91:fe:72:45:62:92:03:1c:f0:bc:f4:26:17:a7:00:
         84:19:1d:b7:d5:c3:85:09:1a:27:3a:4c:fb:78:98:83:27:e9:
         41:43:ec:84:1f:06:17:d3:7a:7d:6a:c1:2c:bc:e2:19:9e:b0:
         2c:a2:b6:ef:78:8d:e2:7e:1d:0e:ee:f6:8b:42:b3:4e:7b:73:
         73:5d:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:58:39 2025 by rpki-client