Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File:                     nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier:          Td6cS9E1iw+27ULidCTeZL32wCyTfATUhlrsohJtgWs=
Subject key identifier:   D2:79:63:25:6D:68:03:C2:40:3D:59:66:A8:15:74:FB:BC:C2:CC:49
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer:       /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial:       019676E7D1FA0C283CAFD39C5766227A717C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number:          03A7
Signing time:             Sun 27 Apr 2025 11:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:26 +0000
Files and hashes:         1: GiJYSZmHP4AF_ON-lln6mBkXaRk.roa (hash: C1PRVClAPoLTLOqGEkfYdyI+UReAPqKicWbGHLAUP6Y=)
                          2: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: eeS3kPIHDrCEOaT+sKhjH8huKlU+CFGa+7NdglBkuIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:d1:fa:0c:28:3c:af:d3:9c:57:66:22:7a:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
        Validity
            Not Before: Apr 27 11:00:26 2025 GMT
            Not After : Apr 28 11:00:26 2025 GMT
        Subject: CN=d27963256d6803c2403d5966a81574fbbcc2cc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:b9:aa:c7:4f:73:36:c7:9d:96:9a:a8:0c:
                    d9:ac:d9:2a:a5:6a:4a:83:c4:b2:59:e1:0e:c6:a9:
                    57:86:2f:b4:8a:e9:fe:20:3e:33:95:45:4a:ed:c7:
                    d6:76:f4:2c:2f:72:88:94:3c:3f:cb:bf:5a:12:dc:
                    6e:7a:66:57:da:73:9e:89:0e:bf:b6:90:4d:9d:df:
                    87:92:1c:2b:14:7b:f7:5a:41:82:47:27:31:3d:fc:
                    48:3e:25:f9:25:e2:db:ba:3a:2f:ea:4e:e6:82:4a:
                    f0:e2:63:8d:85:29:a3:fc:db:16:fa:30:b2:0e:d0:
                    bc:41:89:2b:58:88:a3:a5:fd:89:c6:5a:c2:70:7e:
                    82:78:54:92:0f:cd:63:03:d4:97:ff:fe:f3:68:21:
                    47:07:b4:68:c9:7e:ed:85:ac:59:44:02:67:ef:e8:
                    98:be:4c:7d:58:aa:0e:92:59:a4:2b:c3:5f:27:74:
                    82:e2:2c:93:23:63:a9:04:6d:34:0a:c0:10:f5:26:
                    15:01:71:fd:c2:8b:6b:30:5a:8c:a9:bc:e1:e6:4e:
                    1a:17:8f:f2:b3:9b:22:b0:e8:ce:be:54:d4:07:ba:
                    94:3a:e2:d0:ce:37:4c:10:54:ef:e6:d4:de:2d:19:
                    00:1a:27:8e:cd:b4:47:76:ce:95:d0:9c:df:ae:73:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:79:63:25:6D:68:03:C2:40:3D:59:66:A8:15:74:FB:BC:C2:CC:49
            X509v3 Authority Key Identifier:
                keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:54:44:84:1f:6d:a6:ce:9d:9f:de:e2:5a:97:a4:90:30:
         4a:7a:20:b4:8b:6f:3d:e6:23:4f:28:b9:2e:38:1c:d2:86:80:
         ef:6b:a4:ec:08:15:49:6f:0a:e7:1d:9d:63:74:3b:38:f2:e3:
         da:9d:a8:49:a9:e2:3c:fd:0c:46:27:24:e7:ce:b5:42:56:0f:
         e9:4c:f3:ff:64:a3:10:02:77:0d:d8:e3:2c:8f:29:c4:59:00:
         c7:d9:30:4b:62:c2:e4:ad:69:86:1f:e1:bd:94:4d:3f:8f:f8:
         7b:9c:7f:c5:86:70:7b:2e:ad:2f:b5:db:52:c2:fe:34:9c:be:
         54:71:49:6b:82:d0:fe:de:05:b4:f7:7f:c9:63:de:a0:c0:97:
         f7:8c:fc:e8:ce:86:ef:44:5b:da:4a:74:ec:04:c4:66:d7:01:
         4c:0f:29:ac:4f:e0:80:78:89:41:06:68:91:72:88:5f:9c:8f:
         6a:25:34:ea:67:13:48:b1:e3:4c:08:41:0a:5f:06:4f:74:2a:
         0b:00:2d:4f:a3:6b:f2:54:2a:43:3f:f3:df:81:d6:4d:fa:f7:
         68:3d:d3:8c:3a:5b:77:ee:19:18:4e:88:4b:32:0d:e3:f4:2a:
         45:f1:4c:4b:76:52:0a:73:10:f6:5b:2a:e6:7c:de:0c:9b:cd:
         63:8b:16:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:11 2025 by rpki-client