Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
File:                     EBKHknrXsdtHmuWrkquHxKT69JY.mft (raw, json)
Hash identifier:          ACqHr4RNthzDwSDv5XtW4HhZPi5djhKzjAZOssJZpSE=
Subject key identifier:   47:A3:30:47:8E:5A:DF:F0:1D:57:C3:51:9B:BE:32:3B:0F:57:E6:6A
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Certificate issuer:       /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial:       0196C5709C8AD90EE3AFB7AF948C636997E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 17:00:13 +0000
Manifest this update:     Mon 12 May 2025 17:00:13 +0000
Manifest next update:     Tue 13 May 2025 17:00:13 +0000
Files and hashes:         1: 4QR_9ICDY1eAjAMQinzDvd_fSbM.roa (hash: QOGIl5yTiA09+cvbQSor4wKyODpGweFUOGDGmoa5Fkw=)
                          2: 4TPUxBZQjPMFC7b1mfrFjCvLGlY.roa (hash: JkcUiwxVUZ6Y1IABb79mPduZ40ATbeXmGRW1UsM28Lg=)
                          3: EBKHknrXsdtHmuWrkquHxKT69JY.crl (hash: Lr0Y7YuRn+ePDdTYo0J4aO3mAkJg8m84AJOnuqsSqtA=)
                          4: Wo-dX3lQK__8wGgqhbqIC_egjRY.roa (hash: Kje1K6kIBEP6yfvrAyyBJragoqmu73LHVFRq0DMX108=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:70:9c:8a:d9:0e:e3:af:b7:af:94:8c:63:69:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
        Validity
            Not Before: May 12 17:00:13 2025 GMT
            Not After : May 13 17:00:13 2025 GMT
        Subject: CN=47a330478e5adff01d57c3519bbe323b0f57e66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:53:eb:ca:ef:1f:89:95:26:f9:c0:58:aa:
                    0b:ee:53:fc:52:d8:30:34:d0:a1:c5:f9:7c:5f:45:
                    67:d7:82:5a:23:b6:5f:7e:29:0a:f9:dd:16:1f:76:
                    2c:b5:93:dc:c9:45:6f:a1:66:50:30:d0:b1:c1:ac:
                    5a:3f:0b:62:f7:27:31:b1:10:e5:92:5d:60:64:96:
                    c5:ee:69:e0:6e:fe:80:41:f3:0a:92:5e:ad:2f:87:
                    9e:04:17:dc:b0:dd:56:be:0f:29:ab:4a:dc:ce:b2:
                    45:52:3b:fe:17:63:8c:04:a7:ac:f5:fb:83:3f:b7:
                    5e:45:72:10:ca:d0:d0:e8:9b:86:e0:77:11:c3:df:
                    d9:52:14:34:4c:47:b9:60:6b:06:da:0e:5e:8e:ce:
                    8d:dc:c0:66:59:80:78:4a:98:53:3b:a8:93:03:cb:
                    4f:5e:6c:dd:00:04:a6:a9:50:82:bd:ee:65:61:36:
                    30:27:6a:22:76:8d:5e:59:0d:57:5f:54:59:e5:93:
                    bc:9a:b7:fe:e3:77:e2:91:da:4d:9f:51:7c:c0:48:
                    85:a8:7c:60:41:35:84:35:1a:1a:8f:64:d8:48:67:
                    47:b1:52:f6:ef:1b:58:d3:2b:ec:4a:75:22:ac:37:
                    05:be:4c:62:7e:86:5d:c9:60:29:3d:e3:c3:87:d7:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A3:30:47:8E:5A:DF:F0:1D:57:C3:51:9B:BE:32:3B:0F:57:E6:6A
            X509v3 Authority Key Identifier:
                keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fc:4e:21:15:86:7d:d1:42:84:72:56:a5:31:b4:4e:2e:54:
         5e:11:b8:98:24:7a:62:54:ad:83:db:08:ee:86:aa:f0:c4:b0:
         ce:69:ab:2a:c7:a1:6f:a6:04:78:15:96:ca:f9:f6:b1:99:de:
         51:ca:df:35:6d:14:e5:66:2d:f7:a3:89:f0:f8:cb:b6:a2:45:
         32:6c:9f:b0:f4:b8:33:e5:78:f0:56:16:fd:84:6b:b4:50:77:
         4c:a3:54:99:16:fa:5b:48:db:d3:c5:13:be:a3:b3:66:ce:3e:
         0c:65:0f:78:7a:8c:1d:64:94:76:97:05:f7:5c:3a:bb:04:38:
         b0:30:d6:b1:fd:c7:35:e6:c8:f0:94:1b:e0:e2:7d:74:79:7d:
         2f:57:d8:1f:9b:ec:36:3f:d3:47:67:14:e3:bd:64:ab:fb:95:
         df:41:27:50:80:54:12:27:be:1a:5c:fe:d7:29:f2:5a:8d:31:
         77:7f:65:9b:a4:98:2b:15:c5:91:4f:1b:d4:8a:c9:c0:ce:e5:
         d4:8f:0b:22:ba:93:8e:db:9e:f8:00:0b:c4:e0:38:b2:3f:bf:
         59:de:80:c8:d4:83:f8:cf:63:30:e7:7e:26:26:bb:d5:ba:93:
         59:79:56:39:dc:42:be:75:c4:08:71:cb:29:cc:dc:7b:f3:e8:
         fa:de:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:47:24 2025 by rpki-client