Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File:                     _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier:          j4ne59fOF7Z9VPa04alanlNeFMcnKj1docvOzZmpLKQ=
Subject key identifier:   A8:88:B9:4B:36:93:D0:C2:E4:72:A3:A9:39:57:F0:A4:32:FA:40:74
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer:       /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial:       0196CC4E70D6EE4DEE1BC75114A1AAF81BF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number:          12A1
Signing time:             Wed 14 May 2025 01:00:14 +0000
Manifest this update:     Wed 14 May 2025 01:00:14 +0000
Manifest next update:     Thu 15 May 2025 01:00:14 +0000
Files and hashes:         1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: c/jgsBnM9Mudt7LWvsYdwZXc11NRB12//AiE+LVqwOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 01:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:4e:70:d6:ee:4d:ee:1b:c7:51:14:a1:aa:f8:1b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
        Validity
            Not Before: May 14 01:00:14 2025 GMT
            Not After : May 15 01:00:14 2025 GMT
        Subject: CN=a888b94b3693d0c2e472a3a93957f0a432fa4074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:6b:ae:22:3a:fd:ee:99:6f:c7:23:8a:be:
                    ff:85:14:a2:c4:a2:aa:3d:7a:05:51:35:aa:ee:8d:
                    2f:a3:09:8a:92:7a:d5:e0:c7:c5:e7:d7:f3:68:48:
                    09:32:ad:f6:bf:49:80:8c:51:c7:8c:ac:38:8e:07:
                    92:ef:29:10:e2:34:e4:24:d2:df:88:88:42:17:75:
                    d3:c8:90:c6:4b:0e:55:cd:ba:3a:ae:ad:74:a0:27:
                    3b:13:18:06:de:31:b8:21:29:ee:e4:44:ec:23:ae:
                    3f:f9:1c:6b:17:5e:fd:6e:8a:7d:44:71:20:eb:94:
                    35:3b:70:d5:8b:4b:69:55:92:1c:50:e6:80:e8:63:
                    ff:c3:39:d1:ac:d7:b6:c3:83:6e:3b:35:26:61:b8:
                    88:a4:19:f9:67:a2:de:79:a1:50:ad:24:5a:99:32:
                    c1:9a:9f:b6:c1:56:52:9a:24:51:03:aa:31:8f:f4:
                    90:b5:6d:19:8f:6b:d6:a3:ac:51:f3:05:d0:02:d6:
                    da:0b:53:af:b0:ba:5f:6c:7a:3f:b5:e0:df:43:4b:
                    5c:75:e7:00:08:51:5e:59:fa:03:8c:ef:a3:f6:cf:
                    a7:f3:28:f8:bc:79:50:9e:b3:50:20:f5:86:28:0d:
                    38:fc:5a:18:71:77:29:d2:28:21:7b:d9:98:2a:44:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:B9:4B:36:93:D0:C2:E4:72:A3:A9:39:57:F0:A4:32:FA:40:74
            X509v3 Authority Key Identifier:
                keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:97:41:37:d9:63:73:40:6c:ed:be:72:59:d5:a6:64:5e:03:
         2e:04:62:67:bd:d7:8d:87:2b:d4:dc:03:ad:75:fc:bb:12:a0:
         80:67:3c:9a:98:6d:e7:4b:5b:f3:1d:12:da:3d:33:3f:43:49:
         ca:d6:26:b6:35:d8:5b:ae:ea:06:37:bf:ba:a0:29:3e:34:1f:
         62:ed:62:7d:cd:2d:85:75:d7:a0:20:73:71:e5:72:53:d0:3e:
         a7:e0:2e:93:ff:77:0c:47:fa:76:3f:28:05:5a:5a:c9:ba:0d:
         71:5a:3e:4c:81:ce:5e:e2:8e:fe:20:80:1c:fc:aa:b4:75:1d:
         02:3f:c0:bf:b8:94:2d:c6:35:be:ff:16:2f:0c:f0:a3:df:ee:
         08:4a:5c:41:a5:db:f6:fc:81:cb:19:12:27:68:83:e1:37:8a:
         32:cb:08:3d:39:0b:d3:b1:2c:6c:7c:98:65:af:49:1f:77:36:
         e4:89:13:c1:9e:99:89:26:00:6f:08:bb:86:b2:16:7b:f5:aa:
         bd:88:b1:be:69:94:5b:a3:2a:f5:98:e3:e0:f6:f6:c4:b7:ea:
         05:1b:83:c4:57:21:06:8b:9f:d6:c0:32:91:31:90:85:a2:3a:
         c9:84:1a:69:a2:e3:5e:e9:ae:a2:dd:91:48:4d:a5:6c:4b:7a:
         ed:e1:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:44:48 2025 by rpki-client