Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File:                     7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier:          3JPF6ybVNk/Swn67WR2/Yw3a0vxpw3GCJ05v/FB9qXU=
Subject key identifier:   C5:BD:D3:9A:33:D9:9A:E3:BC:76:BB:69:08:84:53:B2:F4:AA:F4:92
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer:       /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial:       019686919D62E5A098B13DF9BF5DF624E2FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number:          1519
Signing time:             Wed 30 Apr 2025 12:00:11 +0000
Manifest this update:     Wed 30 Apr 2025 12:00:11 +0000
Manifest next update:     Thu 01 May 2025 12:00:11 +0000
Files and hashes:         1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: 9tzimFlZPeIgsfQ0J9PoZJDKcVKytWldc6O4xvs3jZM=)
                          2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 12:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:91:9d:62:e5:a0:98:b1:3d:f9:bf:5d:f6:24:e2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
        Validity
            Not Before: Apr 30 12:00:11 2025 GMT
            Not After : May  1 12:00:11 2025 GMT
        Subject: CN=c5bdd39a33d99ae3bc76bb69088453b2f4aaf492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:1b:47:59:03:89:a0:9d:f9:39:c0:9e:1c:
                    bb:ac:d8:d1:2e:dd:5f:0a:28:5a:e8:1f:ac:95:cc:
                    aa:d8:e5:51:34:04:9d:f7:ca:6a:f3:3a:48:d8:65:
                    91:d7:d6:38:80:57:83:03:13:2f:6f:2b:32:73:00:
                    11:4f:1a:8b:2a:21:11:a1:13:81:d1:89:91:38:cf:
                    76:df:65:bf:b5:52:d1:1b:1e:3a:3f:83:67:63:da:
                    03:43:c3:96:07:b3:49:51:7a:ef:7f:39:23:fe:0d:
                    c2:58:48:65:27:21:d7:28:ec:d5:e4:56:be:9a:1e:
                    7f:ca:e6:07:65:9b:cb:bf:56:d4:e7:2e:c7:6d:d7:
                    66:1a:b4:4d:c6:18:7c:93:52:76:d3:bb:51:79:4c:
                    42:a3:ae:b2:96:e7:7a:59:b9:3e:85:d1:34:35:6a:
                    2f:bf:1a:eb:24:07:6e:42:a4:92:b4:6a:6c:f2:49:
                    18:9c:0f:af:31:97:6a:d5:de:21:0a:e1:38:11:06:
                    2b:f3:51:d1:24:b3:6b:e5:8b:01:90:5b:01:78:b6:
                    64:a5:e6:4b:25:6a:b1:03:bd:d5:f9:65:68:fa:c7:
                    fc:ac:de:5e:fc:d0:a9:20:21:a5:a4:4a:fc:08:2a:
                    6e:8e:93:df:1f:fb:c4:3b:f1:91:c7:e2:09:84:8b:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BD:D3:9A:33:D9:9A:E3:BC:76:BB:69:08:84:53:B2:F4:AA:F4:92
            X509v3 Authority Key Identifier:
                keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:35:bc:ec:fb:3b:e1:97:0d:7a:e2:82:9b:64:02:17:a3:09:
         11:58:2d:66:83:b9:fe:dd:74:81:80:a1:8b:e2:c1:c9:34:e6:
         ce:b1:37:ce:4a:a7:30:53:07:55:10:89:89:16:3e:43:f0:48:
         62:4f:35:cb:c3:96:85:80:21:73:f3:c7:b9:4d:8d:99:40:56:
         a1:f3:76:9e:b6:46:75:ef:a9:20:d8:6d:73:7a:a1:7c:22:3c:
         80:d9:b6:02:86:21:22:de:82:e3:db:df:0b:bf:3d:51:96:96:
         06:6d:81:3f:6a:68:c4:73:8b:d0:eb:0a:a5:a7:a7:b2:c9:02:
         a8:83:dd:e7:98:aa:33:2a:8e:0c:23:d3:d9:9c:e9:3b:60:fd:
         82:5c:b3:4b:6a:dc:ab:60:28:f3:30:8e:4b:55:61:b3:15:fd:
         ce:f4:51:42:56:53:5f:6c:a1:1a:47:a2:84:bc:27:df:61:84:
         6a:84:37:89:56:92:97:8c:0e:03:02:01:15:e5:85:e7:f4:fe:
         3d:01:72:73:a3:9d:b5:3e:52:fd:69:51:95:4d:6b:73:28:2b:
         50:75:b2:25:58:21:1f:a1:ee:08:a6:58:96:2c:20:f6:60:f1:
         63:33:f6:0d:0e:24:00:30:c0:0b:c8:52:81:7d:e8:01:85:63:
         0c:22:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:37:07 2025 by rpki-client