Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File:                     EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier:          mbSjgQALVilXOrX9xITLCElaRSNlLBXY9JKi5PqxT3A=
Subject key identifier:   7B:98:B1:4E:B7:69:E0:6C:A8:06:ED:32:E6:02:AE:E0:04:A6:D8:2D
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer:       /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial:       0196A79DC1886CC1A81D975E2B6463A39035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number:          152A
Signing time:             Tue 06 May 2025 22:00:55 +0000
Manifest this update:     Tue 06 May 2025 22:00:55 +0000
Manifest next update:     Wed 07 May 2025 22:00:55 +0000
Files and hashes:         1: 3B54N1RzqRAgAHkYRgNdqkdOh5M.roa (hash: sve8I1LgrBKICchu1Eds5qUShF2pQrbxFBAqnwDuFVs=)
                          2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: lTcPMFHkaU1s+Yz6mYKkWVMdtVNqjW4iCeJlEDjcBY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:c1:88:6c:c1:a8:1d:97:5e:2b:64:63:a3:90:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
        Validity
            Not Before: May  6 22:00:55 2025 GMT
            Not After : May  7 22:00:55 2025 GMT
        Subject: CN=7b98b14eb769e06ca806ed32e602aee004a6d82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:1e:b8:f6:e2:fe:76:0c:43:08:9a:de:02:
                    9d:d3:dd:bd:8b:47:94:ed:a7:69:9f:5e:b4:d6:11:
                    12:a2:26:c1:ba:94:b1:d7:3f:36:74:61:a9:31:24:
                    39:00:83:eb:76:d4:01:1c:07:80:6e:f1:b8:af:61:
                    47:01:4b:ce:6a:a4:20:79:74:c9:a9:71:35:ca:c8:
                    12:0a:4f:5d:c1:a4:6a:a8:9c:cb:eb:91:c6:68:b8:
                    47:d1:49:95:ab:ad:f4:d1:7e:1e:68:95:48:e2:d6:
                    5a:42:0b:15:b2:99:4c:62:87:f3:41:d2:5b:a3:05:
                    b7:75:46:37:82:55:3b:60:8f:bf:53:9d:de:2b:ff:
                    70:01:59:21:ff:a9:30:b9:c1:65:f2:f6:d7:41:5e:
                    ee:dd:8e:90:cd:cd:24:bc:d1:48:69:17:f1:fb:8f:
                    8b:65:61:d7:ec:e9:ad:a2:69:32:af:09:85:f1:04:
                    2d:bf:c0:62:f1:50:39:00:75:f0:46:80:cb:69:54:
                    1c:e3:e6:16:02:91:ab:b1:37:78:1a:71:1a:5c:ea:
                    cf:e5:bd:c6:0e:06:50:46:b7:3b:7b:2a:bd:f3:5f:
                    25:76:06:24:2d:31:3f:e3:8b:5c:c2:b7:3b:7f:67:
                    e7:77:50:97:11:10:93:eb:a0:3c:98:cb:b2:52:b2:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:98:B1:4E:B7:69:E0:6C:A8:06:ED:32:E6:02:AE:E0:04:A6:D8:2D
            X509v3 Authority Key Identifier:
                keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:78:47:cb:0a:7f:7c:60:af:4f:04:7e:57:07:d2:df:d6:db:
         64:7e:ca:d2:a5:f8:1b:6e:bd:30:71:b3:89:97:93:10:64:8a:
         b2:2f:aa:94:59:9c:85:76:77:3f:a7:1e:17:00:0b:de:86:98:
         b0:4d:3a:46:6e:fa:48:b7:0d:f2:c2:44:22:9f:96:46:af:21:
         69:06:49:d4:76:bb:4a:55:3d:98:c1:81:cc:96:57:2e:1a:d8:
         a7:76:01:ec:bb:26:45:3d:ae:63:42:ff:69:d8:d7:bc:61:34:
         38:8d:e4:0b:b2:0f:29:ea:49:be:f9:72:d1:0b:40:70:f7:4f:
         aa:76:c0:c6:c2:b9:5e:a7:9a:01:a9:af:15:6a:9e:f4:78:ba:
         43:de:74:8a:d5:e2:1a:19:ef:02:ea:f2:09:40:4a:c0:a5:4b:
         12:4e:61:af:16:54:e7:56:fd:bc:da:b3:db:e3:5e:f6:44:58:
         41:5e:d2:ff:7e:b6:80:78:3a:47:6f:86:71:aa:15:43:b0:ba:
         41:e2:03:91:c2:10:66:73:58:a9:96:d5:5d:f1:28:2e:c1:40:
         5e:7a:78:0d:48:e2:5c:b8:0e:9a:29:6f:91:a1:3e:c8:05:15:
         8c:c5:73:ef:05:69:64:0a:89:20:40:59:52:78:91:6b:8d:df:
         61:0c:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:24:14 2025 by rpki-client