Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
File:                     euxtTzVbc4ad_qGnkYDIoheN8f0.mft (raw, json)
Hash identifier:          MBpP59HXKQQKouDta8EjwylLkWzUZsGyed7EPpHyV1E=
Subject key identifier:   2B:5B:02:13:C4:B4:10:62:9E:09:9E:0A:25:93:20:6F:8D:AB:CF:F5
Authority key identifier: 7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
Certificate issuer:       /CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Certificate serial:       019686C9431F917A5A216A19A725EAD592AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
Manifest number:          BF
Signing time:             Wed 30 Apr 2025 13:00:58 +0000
Manifest this update:     Wed 30 Apr 2025 13:00:58 +0000
Manifest next update:     Thu 01 May 2025 13:00:58 +0000
Files and hashes:         1: GlERHStnJxWQurcUkrnzvUsZBvQ.roa (hash: 2BqHZp4aDN03bLESoTVqSnJeyUSck+7eAGoy0G/N7ws=)
                          2: euxtTzVbc4ad_qGnkYDIoheN8f0.crl (hash: wAJBekP8G6y+dZSxqr1+KvO92FbLgvUrqyg8Gauq3DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:c9:43:1f:91:7a:5a:21:6a:19:a7:25:ea:d5:92:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
        Validity
            Not Before: Apr 30 13:00:58 2025 GMT
            Not After : May  1 13:00:58 2025 GMT
        Subject: CN=2b5b0213c4b410629e099e0a2593206f8dabcff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b0:68:87:e2:fa:7b:73:d4:0e:11:90:59:7b:
                    53:28:8f:b2:34:ec:b5:55:d3:d4:94:cc:8d:26:ae:
                    5b:ea:b9:91:ae:c0:a3:d8:b8:26:02:93:2a:99:93:
                    b3:24:f8:2d:75:96:ea:7e:87:e6:79:3d:67:41:d8:
                    cd:80:5f:90:25:44:18:40:56:8b:b9:a8:2a:e7:0b:
                    12:80:08:0d:b6:9c:36:34:07:03:fc:f3:1a:3e:f4:
                    60:e7:eb:03:3f:36:0b:50:6d:1e:f1:75:1b:6c:1d:
                    a9:9e:43:b8:41:ef:fb:3e:b1:d9:83:b3:70:a3:40:
                    91:76:c3:50:5e:a8:cc:69:ac:23:33:6a:aa:46:9a:
                    3b:f5:d5:7c:5e:18:dd:e1:bf:4f:44:d4:e7:56:bd:
                    fc:22:2e:01:75:82:04:07:31:b7:2c:17:12:b5:58:
                    26:2c:32:79:7e:7d:c2:1e:ae:f3:98:a4:c5:49:b2:
                    c4:07:da:be:b8:a9:c4:37:79:2c:38:03:2e:55:07:
                    3f:5a:9f:83:a5:d1:83:04:3b:9c:53:cc:a8:5f:83:
                    35:5b:56:6a:31:95:4c:c6:ce:48:70:18:d0:61:5e:
                    e3:ac:10:81:7c:32:15:2c:9f:a8:49:7e:7c:51:69:
                    34:dd:8c:6f:5b:ba:26:b1:18:4e:2f:74:a5:a9:dd:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5B:02:13:C4:B4:10:62:9E:09:9E:0A:25:93:20:6F:8D:AB:CF:F5
            X509v3 Authority Key Identifier:
                keyid:7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:77:3c:fc:47:43:17:65:6a:e7:13:98:e8:0e:5c:0c:00:
         9f:e7:bf:f2:26:51:8e:d6:36:3d:f5:c1:af:01:e5:b6:2b:c3:
         dc:a2:0e:1d:32:77:1b:d1:e1:5c:b9:01:82:f3:d7:81:e5:65:
         fe:7f:1b:5f:2c:84:bb:ea:12:38:82:d9:48:a6:b3:4f:06:7a:
         52:05:df:64:69:71:f0:12:14:d2:65:9f:86:9c:1e:4a:eb:84:
         35:9d:17:2c:68:10:2b:25:88:04:16:45:67:24:c0:a8:7d:dc:
         be:2f:4c:2f:2c:6a:01:02:39:78:27:45:cf:5f:ea:ac:98:43:
         7f:7f:7b:aa:c8:f6:9a:b3:d4:73:5a:66:5e:0e:44:7f:b2:82:
         9d:6f:ca:28:80:6d:05:26:72:83:8c:37:67:06:2f:db:5a:8e:
         88:52:c4:aa:db:9c:f7:77:d4:0a:d3:34:bd:49:80:a2:26:f5:
         bc:20:5b:f5:15:ab:1e:b3:77:27:39:ef:34:de:35:8e:66:53:
         22:56:f7:e7:13:91:5c:0b:82:d3:16:7f:1e:5f:9d:5f:42:a6:
         b8:7f:be:b7:fc:b9:97:3f:df:34:b1:d7:5a:68:9c:e4:38:a4:
         cf:4a:6a:10:d4:98:b9:a7:85:5e:19:32:be:71:17:32:0e:1d:
         eb:c5:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:37:13 2025 by rpki-client