Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File:                     EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier:          q043Gt+wQNS8SZBMCTltQjFweZZmhEf8IGFSnmx9RLc=
Subject key identifier:   16:85:B8:17:96:94:28:CD:2A:48:E8:D9:85:72:88:AC:B0:2D:37:7D
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer:       /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial:       019676E7FFD706E6B341B09EAD4A4D850EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number:          12AE
Signing time:             Sun 27 Apr 2025 11:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:37 +0000
Files and hashes:         1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
                          2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: vTC73uXqeapljflkYFKS0Ya+l40D5jydClQjvf/Y3TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:ff:d7:06:e6:b3:41:b0:9e:ad:4a:4d:85:0e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
        Validity
            Not Before: Apr 27 11:00:37 2025 GMT
            Not After : Apr 28 11:00:37 2025 GMT
        Subject: CN=1685b817969428cd2a48e8d9857288acb02d377d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:1b:ef:71:78:de:2d:7e:84:9b:6c:d6:5c:
                    77:1c:39:dd:2f:18:b5:0c:5e:01:d5:3c:62:c0:62:
                    4a:0c:a2:52:f6:19:89:78:03:1e:05:81:b3:d0:6e:
                    a5:cb:2d:23:5d:44:a0:53:1c:11:bb:42:27:11:c4:
                    e1:6a:cb:f4:66:39:a0:22:d2:10:ef:7a:9d:15:e1:
                    02:19:e6:a9:80:2d:2a:e7:ef:ba:ac:d9:48:f3:5c:
                    52:19:07:7e:8d:fe:d5:06:db:62:3d:d5:59:99:a8:
                    f3:e9:b9:32:74:57:76:71:55:ee:be:79:c3:a5:33:
                    4c:e5:3b:10:90:05:69:0d:87:4c:31:0b:9d:c7:91:
                    9e:9d:c4:9c:d7:5b:75:9f:83:47:92:12:24:a9:fa:
                    4d:df:9e:04:5a:08:c8:33:72:78:f8:18:1d:9f:f7:
                    fa:47:06:40:13:6d:fb:54:71:b6:ce:69:10:8e:0c:
                    8a:8a:cd:f4:14:f6:9f:9e:80:b8:b3:85:c2:2f:97:
                    49:16:68:d2:bf:7c:f0:76:08:e5:7c:f6:cc:27:f4:
                    81:ab:6f:96:c9:1f:1e:94:ef:61:2e:f0:a8:3d:e5:
                    ee:08:56:d0:49:8b:eb:f3:b1:0d:4b:41:6e:10:72:
                    ae:19:4b:89:ce:9d:07:d4:0f:66:14:e8:1f:7e:d4:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:85:B8:17:96:94:28:CD:2A:48:E8:D9:85:72:88:AC:B0:2D:37:7D
            X509v3 Authority Key Identifier:
                keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:f6:f4:7d:1b:26:f8:00:fd:bf:b1:6e:d2:b4:41:2e:4d:
         32:04:66:c7:68:35:e1:cf:b0:a1:2c:65:08:76:4d:22:3c:76:
         fb:46:91:47:e4:d0:28:90:6c:21:6c:f1:68:51:56:9f:ea:40:
         66:d6:2a:c3:2a:27:3c:cb:58:2c:70:c5:c5:4e:46:b7:9e:05:
         1f:9a:a5:11:e5:d9:47:b1:4f:3b:b1:b1:fb:f4:e0:9e:6c:1b:
         e8:9c:e6:c9:5e:63:ef:5a:0b:8d:28:bd:7f:3e:b4:4e:63:40:
         9b:b8:23:30:f7:38:3c:01:75:98:b3:f0:59:b7:4d:f3:42:7a:
         c0:41:1e:dc:c2:ec:5e:a5:21:37:30:da:f5:c2:b9:e8:44:67:
         e2:23:2b:36:7c:62:94:2a:4e:0e:38:b5:71:01:e1:a0:a3:f8:
         a0:c1:7d:83:88:f8:3e:b8:56:ca:9d:f0:d6:9a:63:88:e4:04:
         8c:f3:72:f1:36:55:39:7f:32:91:27:53:12:ac:7d:4c:f4:16:
         e0:4a:6f:9e:1c:6f:d8:87:01:62:b0:6f:0b:13:2a:34:6c:ac:
         f4:3b:1f:fd:43:e2:c5:5f:26:0e:4e:8b:61:8f:04:a5:d6:42:
         44:02:63:1d:95:8a:a2:44:b5:bd:cf:be:01:c3:55:04:3d:48:
         87:bc:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:42 2025 by rpki-client