Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File:                     DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier:          TQFM3lqyKkcwVbFQn/r427DCM9X47noWFiAJ+p909Mc=
Subject key identifier:   FA:1F:84:7A:3B:16:17:9F:B4:A2:88:B3:69:2B:B5:E9:E3:A9:F3:F8
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer:       /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial:       019683C7D1271E25DC6CD6A3E0489CB0DEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number:          1518
Signing time:             Tue 29 Apr 2025 23:00:32 +0000
Manifest this update:     Tue 29 Apr 2025 23:00:32 +0000
Manifest next update:     Wed 30 Apr 2025 23:00:32 +0000
Files and hashes:         1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
                          2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: pIEMIBYmhJi8JX8zAP5aWrWaH8GWNd+pttoFBpTfXy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 23:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:c7:d1:27:1e:25:dc:6c:d6:a3:e0:48:9c:b0:de:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
        Validity
            Not Before: Apr 29 23:00:32 2025 GMT
            Not After : Apr 30 23:00:32 2025 GMT
        Subject: CN=fa1f847a3b16179fb4a288b3692bb5e9e3a9f3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:5f:01:51:1a:67:6a:67:47:92:52:1b:53:
                    f5:41:16:82:24:b5:51:c1:66:fb:a5:66:c1:31:f6:
                    44:a5:d4:df:4f:ec:54:20:27:be:79:ef:56:42:96:
                    4a:f1:a8:91:71:a1:00:3f:03:9e:2b:7a:2d:c2:49:
                    16:8d:97:7f:29:75:c5:65:3a:e1:40:17:37:54:03:
                    7f:6c:1a:b5:58:3c:b6:e4:5b:17:db:cc:aa:d1:81:
                    22:fa:58:6f:55:42:47:f9:45:88:b1:d3:70:3a:dc:
                    7a:a3:07:4f:18:50:c1:d2:46:b1:73:11:ed:dc:28:
                    4a:ce:ca:94:e9:68:4f:3c:ea:49:f9:84:68:e7:d2:
                    ae:5c:61:ff:be:76:cc:50:74:4f:4c:6f:75:71:07:
                    91:49:74:96:fe:a3:91:88:24:a8:89:cc:b3:7d:e7:
                    cf:e2:08:74:ad:c0:ee:ec:bd:71:1e:d5:dd:85:44:
                    49:81:55:4a:20:dc:26:6a:c4:11:cf:28:33:f2:28:
                    22:83:3e:dd:81:b0:da:2f:a1:0a:a3:91:01:44:74:
                    e8:da:81:8d:0f:8c:f4:e4:31:75:f3:ee:64:75:b9:
                    2b:7c:e7:f0:18:02:94:45:d0:a0:19:6f:3a:ae:1c:
                    01:2a:a3:c2:78:5c:d4:3d:27:a9:82:37:4d:e7:fc:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1F:84:7A:3B:16:17:9F:B4:A2:88:B3:69:2B:B5:E9:E3:A9:F3:F8
            X509v3 Authority Key Identifier:
                keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8a:32:e1:39:f1:35:c4:28:66:36:44:91:99:37:59:48:d6:
         89:75:0c:58:be:81:cc:50:34:fe:3c:16:b8:52:3b:8e:79:95:
         1f:05:85:2a:b5:59:c3:12:38:11:25:b4:20:3a:f2:f2:11:0a:
         46:c0:96:06:34:ba:09:e1:d1:31:41:3b:a1:57:52:83:3d:24:
         07:02:17:31:91:f1:7a:77:1d:23:b5:a1:43:f5:b0:33:9f:92:
         e4:3c:40:e2:b0:94:3e:80:11:a5:5d:32:6a:ff:bb:35:e6:ef:
         35:b0:21:51:c0:dd:92:15:d2:44:ac:ab:e8:4c:05:4d:2d:61:
         bb:23:52:ca:f6:76:1b:c1:ba:45:94:39:0f:2e:fb:46:79:a1:
         19:b9:6e:13:00:63:00:ce:ad:e6:49:bb:20:c1:c2:d9:ae:db:
         84:38:80:14:51:3f:66:c2:d9:fa:59:fd:66:75:94:49:d9:32:
         ed:1d:c2:33:ad:27:55:3f:02:f3:57:bc:f4:04:b5:59:1a:6f:
         b5:8c:98:70:17:32:9d:d2:2d:76:13:f8:95:d4:24:09:cd:bf:
         97:d3:5a:47:fe:bf:aa:e8:e4:56:94:e8:7d:f3:e0:68:50:54:
         cc:5a:05:9c:d4:4a:0e:b7:2d:bb:e6:66:95:81:4e:62:b0:bf:
         a0:39:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:52:42 2025 by rpki-client