Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File:                     EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier:          X4bOy2W41DyNCy7qqmHbsTB5HnAxKaPJ9e9aZ0uoJNI=
Subject key identifier:   E5:01:61:28:D7:28:C3:1F:DB:04:D5:DC:DB:D7:D3:3A:42:EA:22:12
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer:       /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial:       019674FA16AA6A50E15736B91B4E6BB7DB2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number:          0942
Signing time:             Sun 27 Apr 2025 02:01:08 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:08 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:08 +0000
Files and hashes:         1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: bQM94ioJ0ZtTKiQYZkvmCUGN1J2HZYL5PGKdsDhDmhc=)
                          2: m05UFQfMUkm8RmzIuHOsksJMdP0.roa (hash: yGsV8HL3U4MAtVDLG2EGnsRjRnklyUH2zR9pUN6kEek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:16:aa:6a:50:e1:57:36:b9:1b:4e:6b:b7:db:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
        Validity
            Not Before: Apr 27 02:01:08 2025 GMT
            Not After : Apr 28 02:01:08 2025 GMT
        Subject: CN=e5016128d728c31fdb04d5dcdbd7d33a42ea2212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:04:5f:85:1f:e2:7f:c4:cc:16:e8:8e:91:
                    a0:16:42:7b:ec:c4:88:78:cc:fb:71:2f:ac:ed:29:
                    da:6f:32:5e:d6:6e:f1:6c:f8:ca:b1:54:86:e0:8b:
                    0b:f5:2c:ae:d6:3c:1d:45:74:75:32:2c:eb:a3:3f:
                    d9:5b:73:62:7a:02:82:da:13:af:3a:85:75:f4:7b:
                    d6:61:9b:9f:9c:bb:15:22:6c:25:ec:b6:98:4c:9f:
                    1a:be:ab:29:1d:25:3f:cd:84:c5:4f:4b:79:1d:e9:
                    1e:f1:93:4b:e3:87:d7:76:06:3d:43:b9:fc:f3:1c:
                    12:d6:f3:8e:92:8c:cc:20:95:b4:65:69:8b:26:ad:
                    8c:dc:8b:0d:56:f4:3c:57:0b:f4:c0:77:b2:43:07:
                    fe:db:a0:97:aa:8f:32:90:a7:53:cd:4d:9e:72:02:
                    d9:4d:62:72:2b:86:2f:16:5c:f2:7b:2b:3d:49:45:
                    1a:90:6c:89:ca:97:e3:01:ce:08:bf:f7:82:f6:30:
                    ca:7e:96:f4:8f:28:cd:02:e3:33:14:84:31:4a:e3:
                    de:6f:62:1e:8f:f2:29:14:b4:ab:63:80:d4:a4:15:
                    25:ef:75:c3:95:da:36:67:bd:b6:d9:38:84:64:d9:
                    69:53:1e:94:da:8b:a5:1b:46:c2:35:a6:f4:12:89:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:01:61:28:D7:28:C3:1F:DB:04:D5:DC:DB:D7:D3:3A:42:EA:22:12
            X509v3 Authority Key Identifier:
                keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6b:65:a1:7b:c0:8d:1f:f3:b0:bc:95:e7:28:1f:8b:99:68:
         45:fc:f2:42:77:7e:49:ad:17:e8:57:4e:e2:e1:ff:18:e8:37:
         34:16:fb:42:94:3a:ab:05:34:95:8d:7b:1e:a3:8b:ae:2d:0f:
         bb:56:d1:36:70:bf:cd:3b:3f:07:59:f1:34:97:b5:28:00:b0:
         f8:43:dc:5d:fd:21:3f:13:76:fb:94:a4:50:8d:0d:10:14:12:
         2e:80:68:ca:e3:08:ca:e6:32:29:4a:52:5e:bb:3e:3a:8b:74:
         40:26:8a:39:52:bf:85:ec:da:3f:33:11:59:6e:1f:80:ed:3b:
         d6:6b:d3:1c:30:b4:85:eb:84:ef:6b:bf:f9:96:e5:18:2b:49:
         e8:4f:68:9e:d4:7c:1e:6a:d9:0a:8c:9a:36:83:3c:2c:4e:af:
         0e:b6:57:4b:08:07:ea:22:73:bb:6f:61:71:23:43:8e:40:2c:
         a4:44:bb:9e:59:b7:e7:e2:23:02:dc:12:23:f9:4b:f5:7a:6f:
         b9:2b:3b:b4:4c:04:63:e5:5e:6c:7a:40:26:03:17:ee:69:f5:
         9f:83:d6:08:db:11:1d:9c:0a:5f:47:7d:ef:76:6b:02:94:a9:
         d0:a3:7e:17:8e:0e:53:5f:2e:eb:0a:4d:5f:21:91:a8:46:39:
         2f:47:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:13:27 2025 by rpki-client