Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
File:                     eVoYZBqRazBgdNHhH9CxDp39xDA.mft (raw, json)
Hash identifier:          M/k05LO9YKJVoTKFnxStCJYueinZZdEx1t5yMzF35ZI=
Subject key identifier:   84:F9:CE:13:B0:B1:01:65:8B:BC:FA:F1:7A:1D:88:1D:AB:60:E7:C5
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Certificate issuer:       /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial:       0196A9549B9D6E2E6CFC8952F64CEB8B8DCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
Manifest number:          072F
Signing time:             Wed 07 May 2025 06:00:16 +0000
Manifest this update:     Wed 07 May 2025 06:00:16 +0000
Manifest next update:     Thu 08 May 2025 06:00:16 +0000
Files and hashes:         1: 3O6Hfmbr30Ak6WicBkkKlx5hysk.roa (hash: kcj0ENONASwkAQnmBjvrTNy0GRh8JWD6AlfD+TxgS4I=)
                          2: eVoYZBqRazBgdNHhH9CxDp39xDA.crl (hash: HaVSFbadhe/coiM+9Ex9hK2wfyGBNWGakKgIjeNg0vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:54:9b:9d:6e:2e:6c:fc:89:52:f6:4c:eb:8b:8d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
        Validity
            Not Before: May  7 06:00:16 2025 GMT
            Not After : May  8 06:00:16 2025 GMT
        Subject: CN=84f9ce13b0b101658bbcfaf17a1d881dab60e7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:87:2d:7c:eb:9f:d2:22:b1:75:4c:44:b8:
                    5e:20:90:82:62:96:34:00:5f:e6:28:5d:db:a0:f6:
                    a8:f7:12:7f:02:18:3a:4a:58:83:90:6e:bf:ad:bf:
                    31:1f:91:2f:d1:d5:72:17:97:23:26:fb:b1:3d:80:
                    b0:d2:20:18:75:b7:e0:bb:ea:d6:73:88:54:a3:fa:
                    e5:6c:89:6a:88:2b:2c:f1:9e:9b:0c:3c:3d:50:57:
                    1c:c1:cc:c4:7e:5b:55:2b:5e:58:d1:3f:f7:32:03:
                    f5:9f:64:09:e8:8e:3a:c4:bb:b1:29:52:82:2e:74:
                    4d:7b:48:f3:b8:c9:4d:a0:71:8b:ef:7f:c9:bf:07:
                    0b:a7:23:25:55:94:e9:ca:af:0e:d5:f0:72:c1:8b:
                    89:2b:3f:50:83:18:52:06:a0:01:c9:ac:97:e4:9d:
                    32:b6:3c:1c:99:a1:63:b5:62:22:3e:f4:1e:f3:50:
                    df:80:b6:c5:c2:a0:d7:5f:84:58:5a:6a:45:1e:bf:
                    ca:87:86:d7:ca:ac:b8:b3:a2:48:41:c5:03:62:b0:
                    d4:04:7a:e9:ae:6c:1e:3f:f7:e7:2a:65:1a:9c:59:
                    d8:49:fe:50:57:70:32:27:82:b8:c2:b4:df:d1:d5:
                    12:21:44:64:9f:20:63:c0:ad:bf:34:d1:d6:cc:1e:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F9:CE:13:B0:B1:01:65:8B:BC:FA:F1:7A:1D:88:1D:AB:60:E7:C5
            X509v3 Authority Key Identifier:
                keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:43:1e:6e:da:57:18:9f:2e:bd:69:34:f1:0a:3d:7b:6f:25:
         3d:8f:b5:ef:7a:cf:72:63:94:26:2f:7b:be:d3:5f:96:dd:da:
         26:cf:d7:46:d3:f3:22:80:94:cf:f0:25:6c:c0:47:ee:b4:11:
         79:25:f5:88:81:13:d9:f8:13:fc:b0:11:ea:3c:82:33:bf:04:
         4b:be:05:75:28:e0:cf:86:29:12:7d:a6:f7:47:ac:d8:02:7d:
         96:48:79:f9:30:ee:62:f2:d7:e4:15:92:7d:ed:5f:98:69:25:
         61:6d:d6:a5:6f:7e:f0:e0:84:eb:ca:8c:0b:f9:20:ec:df:fd:
         8d:7d:ad:6c:22:36:f2:ea:62:8e:c6:a4:a4:3d:61:a6:a4:95:
         58:4d:f3:0b:93:71:38:c4:04:d4:15:6c:cc:d0:a6:fa:f2:95:
         10:87:ac:30:9a:c7:c8:64:f6:82:03:43:37:17:25:58:85:e4:
         96:90:8d:c4:05:b4:d6:75:c7:66:f7:71:7b:7d:ef:cf:41:04:
         22:ed:ad:eb:ad:0b:83:c8:71:18:52:8e:6d:dc:4b:b1:69:34:
         e8:41:bd:f0:4c:b7:9c:e1:9f:4a:ea:6d:73:e5:c2:04:2c:59:
         d1:12:73:47:5a:47:5d:3c:66:62:a2:54:55:c0:a1:86:1b:d7:
         15:6d:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:41:02 2025 by rpki-client