Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File:                     7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier:          KQFxX8FmUxrMGfcFC30XipyeORG9e46T9d7tMQ+iwvY=
Subject key identifier:   36:13:A9:8F:A0:1A:9D:3C:9C:5D:82:5F:15:F9:95:C6:ED:13:6F:EE
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer:       /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial:       01967DC5D8951A851443984E9CD68C0E632B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number:          14A8
Signing time:             Mon 28 Apr 2025 19:00:40 +0000
Manifest this update:     Mon 28 Apr 2025 19:00:40 +0000
Manifest next update:     Tue 29 Apr 2025 19:00:40 +0000
Files and hashes:         1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: hHNFgLsVpiOGc0/imIVcSPyt9Nciv4MHr+TXR8Q1bVo=)
                          2: AKJNBvg_Wp6-g3QkU1hgfnYKS_I.roa (hash: 8/1gxZ5RhK3Xfc9FWx/YXavES1/BKptW13V8wouvEZc=)
                          3: NPvM3xVxkQ_LMP_9_lAVPXggEPY.roa (hash: WMRbhoyDgXHVdgSvk5Bk4s0agvzfv3IFLc0hFCDdwCk=)
                          4: R2R6Zwpm3C7mEGCf96myxK2TaP8.roa (hash: JHhhJ/hqneURZNBRt/i03bXTcRI7N5eSJkdKe9AFbQI=)
                          5: buWauLtfMC3GcFJJMi4SlwdwaoI.roa (hash: dGDi40pRAf4C2JEAwUiWsT7itHv7hqD0XOyXY8zr8H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:c5:d8:95:1a:85:14:43:98:4e:9c:d6:8c:0e:63:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
        Validity
            Not Before: Apr 28 19:00:40 2025 GMT
            Not After : Apr 29 19:00:40 2025 GMT
        Subject: CN=3613a98fa01a9d3c9c5d825f15f995c6ed136fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:4d:d7:25:b6:22:d2:0d:be:17:8d:af:56:
                    da:6c:c4:8f:15:8c:e3:de:9b:b6:51:e1:0d:4a:4b:
                    a1:d9:b8:ae:05:c1:18:12:29:fa:a6:e9:ea:28:c6:
                    4b:50:f5:3c:1a:11:fb:6c:e3:48:a4:75:87:2b:50:
                    f8:50:da:4d:f8:76:43:63:31:87:07:79:82:7f:93:
                    9e:51:0d:f9:4b:0d:ae:ee:1f:cd:4b:fc:e8:67:17:
                    55:ca:a9:79:0c:00:81:88:15:32:37:54:0f:08:80:
                    7d:98:ff:e4:9f:aa:3f:d6:09:1a:bb:94:50:29:83:
                    fa:36:7e:bd:e5:a5:d6:87:39:fc:27:5a:66:66:29:
                    74:f3:a1:bf:0e:fd:94:2d:ed:f9:7c:d5:34:1d:de:
                    e6:86:5c:76:7f:34:83:3c:2d:1e:29:52:5b:dd:bf:
                    18:04:2a:7f:10:26:b5:12:f8:68:9f:ab:53:9e:68:
                    64:98:8f:99:e9:b8:75:4a:44:10:5c:ab:c6:a4:e8:
                    aa:bb:10:3f:ae:be:6a:dc:e3:c5:78:62:23:ba:17:
                    82:e8:72:2e:e5:2c:6c:19:c5:b8:9b:a5:76:02:b4:
                    78:76:ef:97:24:33:b9:89:96:37:a0:63:4d:c1:5b:
                    02:27:6f:37:8d:56:05:a3:37:78:37:e7:76:76:a5:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:13:A9:8F:A0:1A:9D:3C:9C:5D:82:5F:15:F9:95:C6:ED:13:6F:EE
            X509v3 Authority Key Identifier:
                keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a0:a5:71:66:e2:90:56:cc:2e:38:e2:7a:7e:2d:37:0a:60:
         9b:f1:29:75:4f:cf:62:36:11:a2:a6:36:de:19:8c:f9:de:4e:
         0b:77:5f:69:93:f9:74:70:f0:9a:ef:73:88:76:d4:be:55:78:
         d2:82:65:40:ba:9a:c2:43:e8:8d:7f:c2:d4:99:35:98:04:97:
         cd:7d:85:ea:f6:53:90:b2:74:74:98:ce:12:1b:a0:80:77:43:
         c7:20:79:48:d4:8b:d0:07:ed:bb:fc:d7:2f:f3:ef:3f:72:c3:
         83:1a:19:3c:ef:4a:9f:e3:a9:2f:fe:12:eb:3a:bf:79:a2:ee:
         8e:ca:1b:e2:3b:9d:ce:7d:1c:41:e8:13:d2:81:97:56:93:f9:
         f0:a7:13:c0:ce:b3:df:33:dc:72:34:1f:4b:9e:6f:b7:d0:4b:
         4c:7b:a8:5d:85:80:1d:e9:70:0b:9e:7b:db:ed:0a:7e:0a:e1:
         78:8d:79:65:4b:00:73:0a:c0:6a:72:5b:d6:4c:63:71:8f:a4:
         e7:21:f9:dd:e6:30:d9:54:36:58:12:45:ab:8d:b5:fd:bb:e7:
         3b:5d:f6:02:86:08:53:91:5a:e1:b1:1d:77:d7:fc:7f:da:7e:
         9c:16:f9:87:18:94:3b:74:c9:51:5b:c8:cb:b0:94:49:a1:73:
         3a:bc:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:22:45 2025 by rpki-client