Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File:                     eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier:          Xr5DCfhT1SUJgkvy39awqrD2fFG4T13AYiIHfIVHlmc=
Subject key identifier:   6B:E3:79:13:C7:6D:A3:19:1B:18:B5:CD:54:80:18:74:EE:D8:D1:ED
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       01969039AC27D3E3083AB8B7515BB8224FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number:          151D
Signing time:             Fri 02 May 2025 09:00:20 +0000
Manifest this update:     Fri 02 May 2025 09:00:20 +0000
Manifest next update:     Sat 03 May 2025 09:00:20 +0000
Files and hashes:         1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
                          2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: nFQB5RZQwDNUa84wnwX/u5QlAnQtVvHilqE9jSLknBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 09:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:39:ac:27:d3:e3:08:3a:b8:b7:51:5b:b8:22:4f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: May  2 09:00:20 2025 GMT
            Not After : May  3 09:00:20 2025 GMT
        Subject: CN=6be37913c76da3191b18b5cd54801874eed8d1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:05:74:95:56:ff:15:3c:24:c4:5b:76:d0:
                    7c:a0:e2:a4:f1:69:36:bd:5f:7e:e4:ef:5d:08:35:
                    b4:9a:4f:5c:a1:d2:01:d3:9d:12:b8:3f:3c:b3:f4:
                    82:07:c2:c5:7c:7e:0c:2c:be:49:81:7a:60:40:50:
                    09:07:5a:51:3f:97:bf:bd:5a:8b:91:8d:45:83:1a:
                    37:43:0b:f5:3d:13:5d:94:57:f2:97:ad:f8:68:23:
                    7e:76:aa:96:33:ad:c7:4b:d3:01:67:1a:16:45:0e:
                    e5:6e:ab:92:6f:fb:18:71:28:90:d2:c6:82:bb:32:
                    66:e5:47:60:a5:34:43:91:0c:a1:ec:9f:75:78:5a:
                    73:74:48:98:e9:e6:96:32:2d:d7:06:2e:eb:19:a4:
                    c4:12:b4:08:5b:1d:c0:2c:74:c5:7b:a7:c5:25:67:
                    28:1a:75:4c:76:43:95:8c:75:80:8b:72:dd:38:c6:
                    fa:06:ae:ba:4f:85:fc:eb:1f:6c:55:49:5d:ad:ed:
                    b1:20:36:1e:31:d8:cc:8c:22:2a:71:b6:3a:11:a7:
                    f8:30:4f:bf:23:d0:e4:e7:98:e5:3c:f6:59:52:49:
                    6d:2b:c7:ba:5c:1d:1a:64:ba:71:12:69:85:d0:57:
                    29:5a:95:a1:05:84:c8:50:15:84:3c:84:37:28:35:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E3:79:13:C7:6D:A3:19:1B:18:B5:CD:54:80:18:74:EE:D8:D1:ED
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:b1:23:dc:29:28:6a:7b:0e:73:95:fa:27:44:40:10:a3:
         39:79:a5:a7:d6:d1:19:64:ce:6f:53:85:7e:4f:bf:f2:bd:d9:
         f7:63:7a:5d:10:eb:8f:fc:ee:51:4f:f0:21:97:ab:7b:90:fa:
         3b:7f:b2:64:27:da:99:29:2c:3e:55:66:91:43:ae:0c:53:07:
         8b:ef:7e:cd:17:ca:d6:b1:17:92:f0:2a:cb:fa:6d:5e:0c:4d:
         18:ea:50:63:e9:58:8b:bd:93:1c:62:1e:b6:32:7c:81:52:8c:
         3d:35:f4:c4:f6:b0:11:59:f1:79:0c:ee:20:7a:fc:fd:89:f4:
         af:cf:3c:ce:7b:82:c1:a6:73:d7:23:16:4d:8c:d2:a2:f7:3f:
         44:ba:09:ec:19:e3:9a:19:cd:51:43:4f:60:bd:28:73:83:ed:
         30:8e:79:df:60:f1:92:5c:6c:68:8e:e0:a3:e7:2c:60:65:39:
         f8:d2:1e:49:c5:e1:7f:1b:9a:dd:6c:e5:41:37:2b:2b:a9:14:
         29:52:23:c2:a9:a0:bf:ff:1c:df:45:f7:cb:5b:50:98:e1:cf:
         23:5f:11:c9:1a:0e:81:27:23:34:fe:00:11:e4:b4:ac:1e:e8:
         3a:f9:43:7c:e1:70:fa:92:27:aa:0c:ca:61:ba:44:42:64:f5:
         90:09:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:18:48 2025 by rpki-client