Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File:                     2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier:          NrMKrtq/nwRGkz7l6ujduZX10R/5Ljq3IpmLbwSjiV0=
Subject key identifier:   D7:29:ED:56:66:86:0F:D8:BF:0F:AF:9D:EF:9B:12:6A:A2:98:8D:E6
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer:       /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial:       0196ABE82EF5C705C801559B24A8BE76A927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number:          02ED
Signing time:             Wed 07 May 2025 18:00:42 +0000
Manifest this update:     Wed 07 May 2025 18:00:42 +0000
Manifest next update:     Thu 08 May 2025 18:00:42 +0000
Files and hashes:         1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: Os6a3nZTE9fl9wYyrdmA4SMscT/fL+hLTNn9HdhqjC0=)
                          2: MnAFAkCtgzLcYcNFwN10QWcGsK8.roa (hash: 6b6kNF5nIgi+BcUotmCWsx7IX4qtT26omA/Wf9SJHJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e8:2e:f5:c7:05:c8:01:55:9b:24:a8:be:76:a9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
        Validity
            Not Before: May  7 18:00:42 2025 GMT
            Not After : May  8 18:00:42 2025 GMT
        Subject: CN=d729ed5666860fd8bf0faf9def9b126aa2988de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:c8:d9:54:e1:b1:ce:fa:e2:0f:79:0d:4c:
                    95:47:16:fd:81:92:25:f5:03:b8:83:c4:01:30:28:
                    ca:ae:fd:1d:36:2e:12:7e:a1:6d:7b:6c:cf:29:3c:
                    31:43:31:0a:43:43:c3:38:e4:c7:b5:6e:ca:48:78:
                    c0:52:61:a4:59:13:72:cb:92:0b:8f:10:58:01:32:
                    3d:43:bd:d2:8b:44:e1:97:b8:9b:41:8d:ba:a0:0c:
                    7c:46:bb:96:17:44:e7:56:74:5c:1d:a0:0e:3a:2f:
                    0f:81:bd:11:ad:2b:6c:26:0e:5e:64:d9:0c:52:37:
                    42:51:70:fc:bf:70:63:97:d5:6c:f2:21:0d:70:88:
                    77:94:32:a1:57:8a:85:7f:26:e1:27:d5:26:31:1b:
                    e6:f2:a1:5f:a2:1f:c8:b7:27:5a:a6:0a:40:72:93:
                    4b:77:82:cc:cc:ed:b7:a1:1c:0b:09:1f:5e:f4:b6:
                    d1:e8:f6:07:aa:51:8f:41:94:bd:c3:56:f2:aa:91:
                    29:13:1f:b2:2b:3b:99:9c:5b:2d:1f:81:23:8b:b9:
                    92:d5:c4:74:e1:d2:24:70:49:02:1f:f1:31:d9:42:
                    da:b1:22:ba:eb:ca:ec:22:42:e7:8d:9b:91:26:04:
                    01:85:fe:5f:ce:27:92:a9:e9:c5:4c:f4:9d:78:3c:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:29:ED:56:66:86:0F:D8:BF:0F:AF:9D:EF:9B:12:6A:A2:98:8D:E6
            X509v3 Authority Key Identifier:
                keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8e:92:10:c5:30:ce:1f:f9:d1:e2:b5:68:dc:d9:7f:5e:4a:
         67:45:dd:da:8d:34:d5:45:da:d2:dd:ea:ef:a4:16:70:bc:6e:
         6c:ef:b2:1c:d4:40:ba:b8:0b:c0:34:fc:0f:7b:fa:4c:2e:74:
         4b:7a:ef:16:92:e6:d1:03:44:12:23:ce:6e:9d:05:c3:18:d8:
         25:67:e2:32:3d:c1:4b:f8:6c:2b:3d:b4:ee:59:0b:8e:b3:4b:
         59:de:13:a1:ea:f5:cc:8c:c6:10:c8:2a:df:93:67:12:2e:4b:
         36:5b:fe:c1:8e:fd:66:0e:f4:39:9e:5a:d9:00:6b:c3:a2:91:
         82:27:5a:7b:82:53:e8:59:f1:71:da:4c:dd:3e:9a:bc:34:92:
         08:37:7c:51:58:66:58:e2:e8:bf:d3:c6:96:99:bd:f2:5f:09:
         bf:b1:40:b4:db:f6:0b:bc:af:4e:b6:ec:81:f8:ec:3b:62:c1:
         ba:c4:ec:81:48:92:15:7b:cf:2e:b9:e2:51:7f:d0:5f:50:97:
         71:f3:ae:cf:61:85:a1:7c:a8:21:5e:40:62:26:e7:ec:ae:20:
         5e:56:a2:ec:cf:99:b7:07:1d:c3:aa:55:75:5b:a1:10:52:bf:
         12:bc:15:95:eb:4a:76:f3:96:51:0b:80:f7:82:8d:a9:6a:92:
         04:73:48:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:35:33 2025 by rpki-client