Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File:                     E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier:          n22ZAKznV8Nr0QhNZor/0Rpfa3AmUWyByljn8w+7Iis=
Subject key identifier:   C7:3E:6D:3F:C4:73:C5:F0:FA:C4:66:76:2C:28:97:28:D7:BF:43:A6
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer:       /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial:       01968F9555685ABA0CBFB58764CEFDA054D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number:          1519
Signing time:             Fri 02 May 2025 06:00:50 +0000
Manifest this update:     Fri 02 May 2025 06:00:50 +0000
Manifest next update:     Sat 03 May 2025 06:00:50 +0000
Files and hashes:         1: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: KY4OpyPVC4R+fOX73Xzq+zXzQBej9OxJlN6lx45kIII=)
                          2: i3utctSwXJrSkgd5Tbp5Iqklo-Y.roa (hash: we3OAkuZWKug5XOiU5EwCdxx9AgvZmIQX0TruehoLK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:95:55:68:5a:ba:0c:bf:b5:87:64:ce:fd:a0:54:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
        Validity
            Not Before: May  2 06:00:50 2025 GMT
            Not After : May  3 06:00:50 2025 GMT
        Subject: CN=c73e6d3fc473c5f0fac466762c289728d7bf43a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:19:be:c9:d8:0a:45:bb:8f:18:50:89:a1:
                    e3:60:70:f1:28:a4:e2:d6:ae:dc:db:ea:a0:a6:e0:
                    97:12:04:74:f4:93:47:7e:4f:c7:e0:20:63:58:c8:
                    df:be:96:2d:ea:f2:08:7d:9e:38:1f:4b:31:92:d6:
                    d0:52:8e:43:49:29:68:0d:4e:e8:41:f6:49:5d:8c:
                    19:b0:ae:85:31:ce:3f:56:6f:05:4f:98:e6:f9:13:
                    3f:e4:1c:7b:9d:ef:88:38:e0:ee:24:7b:52:5b:f3:
                    4f:29:a0:ce:61:10:e1:4b:db:cc:cc:81:23:3f:5b:
                    ab:40:d4:3f:c2:37:48:75:ca:9e:0d:7d:89:7e:33:
                    52:1e:fe:c0:da:b9:f0:42:0c:87:9b:1a:41:72:f0:
                    6f:30:85:db:4c:d3:3d:61:6c:65:ad:f6:45:8f:65:
                    02:0b:a2:0b:2b:30:3d:ef:38:af:c8:00:97:be:68:
                    60:9b:a0:ab:cc:36:f9:3e:ec:a8:cb:de:af:e5:fe:
                    85:15:c7:b5:01:c0:13:e6:7a:23:99:1e:14:5c:f5:
                    d9:87:ef:45:15:2d:c6:34:1f:07:b8:bf:25:6a:79:
                    98:cb:91:cd:fc:c2:00:7f:2f:aa:ed:c6:16:39:32:
                    bb:8f:06:fa:d8:a6:4d:c9:ab:0e:5d:0d:cb:6a:58:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3E:6D:3F:C4:73:C5:F0:FA:C4:66:76:2C:28:97:28:D7:BF:43:A6
            X509v3 Authority Key Identifier:
                keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:54:da:da:06:8e:e3:f1:bc:fd:39:61:5c:60:9f:ef:c6:
         8e:04:6b:e5:83:56:fa:dc:8b:97:07:1a:7d:10:81:24:76:a4:
         43:99:4d:07:c9:18:8e:a8:64:29:6c:f0:1e:a6:d6:45:b5:43:
         61:21:91:ba:e0:80:06:7d:a6:7a:c9:45:85:fa:3b:a8:6b:e5:
         88:92:37:45:91:e7:0f:58:cf:ff:ac:0e:d0:00:9a:a6:61:ca:
         bb:d5:ee:18:d1:6d:f6:2d:e8:1c:9c:59:5d:1c:81:c0:a4:1e:
         ec:76:2a:bd:2b:69:71:95:a1:fa:b0:5f:1b:82:4c:b6:de:81:
         00:2c:4b:6a:fa:92:c2:7b:e7:cf:7c:57:78:3f:e9:35:e3:fd:
         5e:65:61:95:0f:f9:aa:bd:6c:b3:c2:4a:6f:60:ba:f2:3c:bf:
         14:35:ca:fd:31:73:e9:00:fd:40:40:98:71:43:b3:28:52:59:
         ed:90:d4:06:03:39:3a:be:30:09:56:61:80:44:c0:5f:ad:c3:
         df:2f:28:c5:0e:72:c6:7d:7f:71:45:8b:8f:4c:95:f5:58:ed:
         53:44:03:bd:2b:da:38:e3:31:da:b7:15:85:c4:0f:83:98:cf:
         3c:d3:7d:e3:c1:d5:13:90:9e:a0:0b:1d:b5:d3:60:c6:81:ab:
         2d:c5:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:31:53 2025 by rpki-client