Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File:                     gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier:          8wjfTXcK0aCN/MRNFsXyMeYWM2Ochxuawds17A144/Y=
Subject key identifier:   F3:C7:82:DB:F3:03:F7:BB:26:CD:49:56:62:87:96:B6:9B:9E:AE:EE
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer:       /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial:       0196A0F71010ED1A6068972B5128197A20C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number:          06BD
Signing time:             Mon 05 May 2025 15:01:08 +0000
Manifest this update:     Mon 05 May 2025 15:01:08 +0000
Manifest next update:     Tue 06 May 2025 15:01:08 +0000
Files and hashes:         1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: DieHwnLYWLIPVSIUM7SjyzMcQgaiG3IIB2i0Ey4QNoU=)
                          2: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:f7:10:10:ed:1a:60:68:97:2b:51:28:19:7a:20:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
        Validity
            Not Before: May  5 15:01:08 2025 GMT
            Not After : May  6 15:01:08 2025 GMT
        Subject: CN=f3c782dbf303f7bb26cd4956628796b69b9eaeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:40:88:b6:ce:c3:50:c7:93:32:54:8a:b2:
                    44:97:59:2f:a6:96:da:12:20:d3:49:19:29:4f:8a:
                    75:87:53:45:7e:fe:e9:fc:fc:e0:1a:79:b7:11:a3:
                    73:fb:7a:5a:60:e6:38:7f:f7:e6:f1:71:62:c8:8a:
                    ad:c5:42:af:3d:43:ee:1d:4e:1c:6a:10:c7:b9:f1:
                    eb:0f:d5:6e:da:eb:82:f7:59:41:1f:3a:4d:09:2c:
                    3d:ab:cc:3f:c5:45:c0:2d:27:35:91:cb:28:1e:6c:
                    cc:2e:b2:d4:63:00:fa:e1:50:6c:95:6f:c6:3f:0d:
                    37:a1:ee:9d:58:46:bc:29:af:71:a0:1b:35:0d:a5:
                    63:bf:8d:18:dc:72:9d:5d:28:fc:19:61:04:06:a3:
                    93:0a:2e:7f:2a:80:99:56:1a:00:6f:af:b1:57:bf:
                    7c:c0:3a:9b:60:49:08:66:70:26:a1:21:77:c4:d7:
                    50:e7:36:28:7f:0a:6c:ab:9b:41:9a:f5:c3:25:c0:
                    3a:a2:d0:ea:62:2a:1f:0a:9f:93:58:fc:c0:a9:dd:
                    ae:9d:b2:bb:e7:90:22:b3:f2:f6:89:72:48:37:55:
                    0a:e7:98:af:13:50:5d:c9:cc:a5:6b:e6:9e:2b:2f:
                    ea:5c:e8:fd:6b:08:55:1a:76:5c:ae:72:89:cb:56:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C7:82:DB:F3:03:F7:BB:26:CD:49:56:62:87:96:B6:9B:9E:AE:EE
            X509v3 Authority Key Identifier:
                keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:d6:27:20:ab:46:52:79:e3:f4:d3:ab:35:84:60:f8:5d:b6:
         8e:09:82:9f:72:1f:12:3c:aa:de:e9:bc:94:47:96:eb:86:fc:
         04:a7:93:d8:25:33:9b:13:77:13:ca:d3:b3:f1:90:9e:94:2a:
         94:fa:6f:df:69:f0:f6:01:bd:ef:cd:ea:56:4c:7a:9f:a8:ef:
         8c:ea:5e:86:0e:6e:e7:bb:ba:3e:1b:fb:67:7c:f1:b1:83:5c:
         d6:16:9d:02:a7:dd:95:9b:68:9a:b7:80:4e:d7:13:15:09:15:
         64:cf:5c:88:37:10:a4:00:93:16:12:19:62:5d:05:63:be:f7:
         42:d6:a0:61:a8:92:0c:25:d1:74:f1:bd:29:d3:f6:2e:93:8a:
         fc:eb:3e:aa:6e:b8:bf:88:a7:82:88:b1:9b:81:93:a3:7a:a0:
         66:4c:f4:af:0e:4b:9e:77:2b:05:2c:5f:b6:ee:70:6c:9b:4b:
         0e:66:ae:09:92:87:8b:88:b5:88:e1:64:6d:4e:19:0a:c3:d3:
         82:f6:50:11:b9:9f:06:9e:99:0b:22:8e:61:5d:df:bb:4c:90:
         99:d1:3b:07:ad:c2:e1:74:35:42:2c:4c:84:34:d8:c1:0f:aa:
         09:14:8b:05:69:13:5b:ca:9d:28:1a:dc:7c:f5:2d:e8:a1:9d:
         da:85:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:38 2025 by rpki-client