Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          7uTRgOKeRETE+aG1aqHb8jCiBuVtzbEtbaS4KTqwo3o=
Subject key identifier:   EB:CB:40:55:A6:B5:D1:2C:74:6C:2E:EF:E7:FE:42:6C:D8:C4:40:85
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019682EC725C4133DEA54374401F370B0A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          151D
Signing time:             Tue 29 Apr 2025 19:00:55 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:55 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:55 +0000
Files and hashes:         1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
                          2: 7JHYrzTxN9asgLqVnNRUfP1LZ10.roa (hash: ChCGPqEl2ro34qpoNR4Xt2LPCuZTPhOJ4X9rWHYGEBA=)
                          3: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
                          4: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
                          5: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
                          6: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: P6jNIpoBxDHMDozsPVD/wAe4PvwFGi5pr2RRYbP0t6w=)
                          8: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
                          9: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
                          10: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:ec:72:5c:41:33:de:a5:43:74:40:1f:37:0b:0a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Apr 29 19:00:55 2025 GMT
            Not After : Apr 30 19:00:55 2025 GMT
        Subject: CN=ebcb4055a6b5d12c746c2eefe7fe426cd8c44085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:2c:7b:60:a7:01:a8:f1:09:b0:4a:d3:71:
                    66:12:df:fe:bc:8e:d4:37:60:b9:be:cb:13:d9:4a:
                    c1:c1:5f:97:e9:50:cc:67:d6:7c:89:f1:a1:20:a2:
                    13:67:f0:58:90:00:8c:32:4a:5c:9a:b5:88:59:d3:
                    f7:4a:d0:35:7f:f1:1a:4d:3e:dd:7a:15:fe:8e:fc:
                    16:d5:31:92:f4:f6:2c:f0:1c:b7:32:51:6c:d8:03:
                    13:6d:b5:0c:d8:cf:af:7f:c2:17:77:e5:7d:90:4a:
                    ed:7d:27:16:e1:59:cb:3c:1c:d5:1f:71:40:24:40:
                    bf:d5:27:29:ee:ea:c7:f6:e7:60:e5:63:42:7e:12:
                    76:9f:28:37:d6:92:ac:49:bd:aa:a5:3f:f8:4f:68:
                    a0:81:da:e2:a1:a1:78:dc:59:ab:69:f3:46:5c:c6:
                    3e:58:78:fd:55:e5:37:d3:a7:e3:ca:0b:ba:d4:1b:
                    35:57:22:ba:e1:9d:2d:27:79:9d:6b:60:84:6c:5e:
                    d9:bd:22:4d:ef:a4:65:74:88:4f:0e:b7:29:0d:52:
                    07:eb:88:f4:b2:7b:82:10:51:b6:fd:a2:d8:ed:11:
                    97:d4:5b:ed:06:47:26:10:a8:10:14:f2:cb:05:2f:
                    f5:16:6f:e0:a9:df:cb:9c:38:ae:ab:07:59:1f:17:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CB:40:55:A6:B5:D1:2C:74:6C:2E:EF:E7:FE:42:6C:D8:C4:40:85
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:74:ad:44:aa:5d:45:d9:3f:8d:bf:c5:91:aa:df:84:9f:19:
         1f:f8:1f:59:3c:b1:e8:68:61:af:ba:35:c5:90:7c:79:ca:37:
         ae:b2:b4:da:91:a6:c8:87:0e:fa:47:fb:99:ea:c9:7a:89:1d:
         fd:87:0e:56:a4:b4:c5:8f:89:f2:45:2c:35:17:04:1c:22:02:
         df:dd:33:6a:1d:ee:97:45:eb:ad:0f:6b:91:65:6e:b0:cb:d0:
         c3:e2:00:8b:bc:ef:f7:3b:bd:ff:ff:3d:ce:d5:e7:62:0a:f8:
         14:08:8b:82:f5:c5:23:6d:db:9d:b2:58:2e:94:22:db:49:33:
         84:ea:a2:71:ec:31:05:02:2a:2a:90:cc:29:47:a4:0f:02:0d:
         45:ce:bd:d3:d6:87:43:c5:38:88:7a:d7:48:79:e8:9b:db:ba:
         a0:b2:0b:24:e7:a1:34:ab:29:c9:e4:3d:99:ae:80:5b:68:9d:
         33:32:e5:66:a8:ec:df:fc:b3:bb:ff:ec:43:e5:fd:39:52:c8:
         eb:82:07:36:9d:ea:a6:90:af:04:56:57:fb:6f:05:e7:25:09:
         aa:2d:2b:f3:40:af:2c:e0:e1:9d:78:0f:0c:a4:71:00:11:45:
         eb:51:95:03:b6:fa:35:bf:2a:10:c1:e6:a6:25:88:25:fa:9e:
         8b:18:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:13:10 2025 by rpki-client