Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File:                     ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier:          +BqzQBVJ+BzfBdfNbzl1BIuTzaBSGnIeIbwsKYVSrOI=
Subject key identifier:   62:00:CE:F7:78:C8:93:65:FF:9B:3A:EF:01:75:AD:57:D1:5E:59:4C
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       01968DA720F9A81E2C570CD3CA72D7D9BB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number:          0D29
Signing time:             Thu 01 May 2025 21:01:02 +0000
Manifest this update:     Thu 01 May 2025 21:01:02 +0000
Manifest next update:     Fri 02 May 2025 21:01:02 +0000
Files and hashes:         1: Z7fNj1YJ8aSn3r_MEyl5vIDYUPE.roa (hash: WsvnlIuXrT6wZCrahcudQBBAK43k6FKEOxnr2kwJ0Ew=)
                          2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: y2zePieSfDkPgKv5pktNXvYQClGcpeLfEOmg8i54A6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:a7:20:f9:a8:1e:2c:57:0c:d3:ca:72:d7:d9:bb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: May  1 21:01:02 2025 GMT
            Not After : May  2 21:01:02 2025 GMT
        Subject: CN=6200cef778c89365ff9b3aef0175ad57d15e594c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:80:b3:33:e3:be:b7:e3:6e:b2:27:e6:3f:
                    e1:2e:bd:83:f5:56:7c:96:ab:94:1a:7c:9b:46:b8:
                    de:1b:79:e1:1f:c1:a5:ca:88:f8:9a:15:16:fc:e1:
                    ff:36:c8:42:d3:05:d7:27:49:6b:4f:7c:3f:49:c1:
                    44:bb:9f:fc:20:17:37:f1:ba:95:ec:7b:b7:74:1a:
                    c4:2e:e4:28:37:60:2b:ac:72:c3:e7:f6:f2:cf:79:
                    83:ab:f5:ab:c5:df:38:23:dc:ec:4c:87:a0:7a:ec:
                    39:1a:df:a1:39:e4:3b:b2:c7:ec:36:75:2f:c0:8a:
                    92:da:c1:11:7a:8d:5a:67:ee:a3:f0:0f:cd:c1:d5:
                    1d:bb:bf:56:5a:df:72:af:dd:80:42:ee:ef:d0:95:
                    b2:95:60:1a:b9:4f:f8:68:be:bf:a0:d8:3d:ff:32:
                    d0:25:c8:c6:74:a0:8a:54:a2:30:05:f0:70:fd:f3:
                    ad:11:32:e1:a0:b7:ec:75:43:9e:1c:22:fb:99:66:
                    a1:29:12:09:23:a0:71:e6:8c:44:a0:33:29:f6:4c:
                    07:3c:75:f0:93:6b:91:61:b4:be:d2:46:af:90:a2:
                    e2:0a:69:2e:19:17:eb:4d:30:4a:69:ff:aa:d1:32:
                    b6:1f:c6:f1:70:16:eb:d0:4c:29:88:e4:5f:64:40:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:00:CE:F7:78:C8:93:65:FF:9B:3A:EF:01:75:AD:57:D1:5E:59:4C
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:97:1f:fa:24:37:28:dd:a5:5d:f1:3b:cf:6d:1f:37:db:
         65:90:5d:bf:5b:45:69:7e:40:8c:9c:ce:a3:ee:4b:24:89:fe:
         7a:bf:30:f8:8e:24:0b:df:84:0b:1f:36:59:8e:52:bd:18:25:
         0d:d9:d1:85:d8:71:41:46:b5:f5:d2:32:0e:ea:b9:4c:70:4d:
         ad:f6:ec:b1:f5:d8:13:f6:b0:c0:94:b5:df:ae:46:6c:d4:ad:
         d4:ec:38:e9:9e:0a:35:cf:26:f8:d8:90:ad:90:5b:c1:1a:bf:
         5d:8a:9b:e0:eb:6f:18:42:b0:c5:f6:6b:77:12:4c:1c:15:73:
         86:ad:91:c2:8e:d6:df:94:f7:0c:23:e4:e1:92:7e:14:df:de:
         fb:a5:04:0d:d6:73:db:1f:fd:ac:d9:eb:a5:3b:ff:a8:83:fc:
         d5:7d:4f:f5:1f:d3:8d:14:7c:df:d1:ed:7c:97:f9:04:9c:13:
         55:ca:3a:73:4a:cc:6a:12:1c:ee:e8:11:5a:3b:9c:5c:f2:82:
         92:3f:b3:83:66:29:2a:b3:da:9c:43:36:ab:6a:05:fb:b3:c6:
         fa:01:45:2b:eb:10:de:15:37:12:e6:15:64:d7:0f:42:1f:7e:
         e1:56:4a:a4:96:20:fd:4c:60:ce:3e:ca:28:b7:90:ac:b0:5a:
         7c:a5:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:21:50 2025 by rpki-client