Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
File:                     EB_ffImYkkKRmDV1nJti-Mxp1JI.mft (raw, json)
Hash identifier:          TerEnjs1FDhdA7G6uefFdEJUoKY/1ycyNOK8OIh1CkY=
Subject key identifier:   6A:53:B8:AF:4B:A8:EC:EE:9C:FE:02:D5:40:0E:43:13:6F:86:1D:3D
Authority key identifier: 10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
Certificate issuer:       /CN=101fdf7c89989242919835759c9b62f8cc69d492
Certificate serial:       0196A5AF12BE18276622F8DCE198890ECDFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
Manifest number:          152A
Signing time:             Tue 06 May 2025 13:00:36 +0000
Manifest this update:     Tue 06 May 2025 13:00:36 +0000
Manifest next update:     Wed 07 May 2025 13:00:36 +0000
Files and hashes:         1: EB_ffImYkkKRmDV1nJti-Mxp1JI.crl (hash: TcwNScgE2fWOxXHuF5HQA/YZQxReqKri1lKDo+DrmhQ=)
                          2: IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa (hash: 9J+kDdJE2+cu7NB25/bKTQ6/hAIRTzrqadiukiS4eVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:af:12:be:18:27:66:22:f8:dc:e1:98:89:0e:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101fdf7c89989242919835759c9b62f8cc69d492
        Validity
            Not Before: May  6 13:00:36 2025 GMT
            Not After : May  7 13:00:36 2025 GMT
        Subject: CN=6a53b8af4ba8ecee9cfe02d5400e43136f861d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:51:52:d9:5a:fb:15:96:49:a2:2f:8b:d5:
                    65:e8:80:71:fd:1f:bb:5e:45:88:e2:52:62:cd:e4:
                    c7:eb:a8:c1:bf:26:0f:e6:90:e2:14:b9:69:d1:6b:
                    66:0f:7d:e1:dc:bb:74:81:a3:fb:36:7f:6d:ce:c5:
                    b9:61:ae:00:59:8f:24:67:74:6a:ee:4c:e8:29:41:
                    cc:da:ff:c8:06:cd:b5:77:07:26:10:e3:05:0b:fd:
                    5c:2b:93:ac:e5:f4:5c:8e:e0:0d:89:57:5f:ee:54:
                    df:26:1d:06:d8:af:6f:11:a4:1f:77:19:b8:78:40:
                    2f:90:16:1e:2c:d2:ff:c3:53:3d:9b:01:97:6b:cc:
                    6a:f5:d9:66:1d:4f:31:54:f4:67:0d:29:d8:93:ab:
                    8f:e9:7b:b0:5d:01:1f:73:5a:6e:4a:35:ce:58:a7:
                    4c:81:f7:69:ac:45:1d:ec:f5:3b:c3:d6:38:9f:cd:
                    6d:a1:26:e1:bd:2e:aa:e6:e7:ca:02:13:db:d8:6b:
                    82:de:dd:79:2d:e9:d2:05:e8:f4:fd:5d:59:d5:2f:
                    95:be:c7:25:d5:77:c4:e4:25:30:79:6a:cf:3c:29:
                    af:c7:66:78:6a:8c:6e:d0:c6:3e:f8:b3:43:bd:0c:
                    51:95:3a:2d:a2:73:62:bc:be:f1:ed:1f:07:a6:66:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:B8:AF:4B:A8:EC:EE:9C:FE:02:D5:40:0E:43:13:6F:86:1D:3D
            X509v3 Authority Key Identifier:
                keyid:10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:13:89:52:00:c1:7e:e7:0d:74:55:0b:ab:77:0e:30:fa:
         9e:18:3f:3b:7b:dc:b9:fd:e5:4b:54:57:6c:f4:fc:98:af:67:
         a4:40:0d:49:3d:d2:02:f4:04:00:f0:b0:e1:e5:b8:46:fc:a4:
         09:5b:46:5a:db:c7:47:23:b4:1c:c6:87:79:af:08:9b:e5:1c:
         a8:41:b3:21:b4:f4:f1:ee:f5:ef:86:ad:ac:b1:97:f2:4a:f4:
         50:17:cb:b7:a2:49:ef:40:0c:8e:ea:59:9a:eb:5f:0e:b1:49:
         0e:6c:70:2f:c3:ae:37:6d:54:d0:57:4a:85:85:41:80:7c:86:
         e4:5d:29:26:03:39:8f:0b:8c:ae:a6:1b:33:d8:9b:bb:bc:df:
         35:b8:14:5d:cd:b0:47:10:53:9d:2c:bb:56:4f:1b:16:4a:d0:
         fc:02:9d:7b:e6:48:6c:78:cd:11:2a:13:30:5c:a2:8c:f4:cf:
         3f:ed:ce:ed:e6:df:df:01:96:ae:42:5f:2c:dc:9f:05:eb:98:
         2d:75:c3:b9:ac:50:64:f2:87:35:c1:ef:31:a5:dd:95:14:b0:
         b0:27:26:83:60:46:70:6e:18:c5:68:59:e4:61:57:3d:65:b2:
         36:04:c1:b0:3d:eb:41:22:2f:dc:84:c1:61:b0:38:33:bf:ef:
         85:03:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:58:58 2025 by rpki-client