Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
File:                     EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft (raw, json)
Hash identifier:          nkc7FTt0/lqoeS0zD4JAc54iq18SSPsjjwA9Llb5mjk=
Subject key identifier:   34:C1:BA:1F:4E:87:BE:BF:D2:C2:94:7F:46:CD:20:BD:86:DA:48:3B
Authority key identifier: 13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
Certificate issuer:       /CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Certificate serial:       0196B6D97FCCF41EE48A6AD634BABAAC8F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
Manifest number:          0994
Signing time:             Fri 09 May 2025 21:00:29 +0000
Manifest this update:     Fri 09 May 2025 21:00:29 +0000
Manifest next update:     Sat 10 May 2025 21:00:29 +0000
Files and hashes:         1: EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl (hash: Ji5AcATQeenfreO1BVSNOKr4MNcIchzW6Vq7vaUBiA4=)
                          2: R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa (hash: oSyFhN1ovW7xy9oFAp6jlzZPhvsjlMjehmNfek88Rzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:7f:cc:f4:1e:e4:8a:6a:d6:34:ba:ba:ac:8f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
        Validity
            Not Before: May  9 21:00:29 2025 GMT
            Not After : May 10 21:00:29 2025 GMT
        Subject: CN=34c1ba1f4e87bebfd2c2947f46cd20bd86da483b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:c3:84:8f:23:07:37:be:31:4c:90:35:6c:
                    ee:34:cd:56:b8:b8:c2:26:a5:eb:dd:cc:42:6c:76:
                    97:44:ea:8d:b4:b7:bc:99:80:16:a6:b3:08:54:a0:
                    27:71:b2:41:9a:2f:36:38:75:25:77:ca:1d:11:fa:
                    51:86:d0:84:2b:15:93:50:fc:8d:b0:8f:b2:10:89:
                    a9:62:13:f6:b3:e6:af:37:b2:4b:ba:39:34:0c:c9:
                    fa:ca:4e:91:b4:85:38:93:d8:92:d2:63:7b:7c:0c:
                    65:a3:62:2b:2e:17:0c:39:9f:61:74:b3:73:21:5f:
                    6d:70:05:44:a0:c7:80:cd:f3:ba:34:05:12:8b:66:
                    de:c1:bf:81:f7:05:ee:cb:87:b5:51:62:e0:b1:74:
                    85:c0:92:b7:76:6f:59:9c:28:bc:18:30:77:d8:17:
                    39:ac:75:28:a3:d9:40:84:97:0d:9d:c4:11:8e:55:
                    0a:05:47:09:b2:a8:b8:e1:82:db:99:93:45:ec:e6:
                    9d:39:ac:59:39:49:ec:82:8f:f4:bb:a4:1b:b5:56:
                    a3:02:54:f8:b1:d7:1e:57:b2:17:7b:20:b9:f1:a8:
                    b5:50:73:42:03:86:a3:82:6f:42:f1:57:de:aa:4f:
                    2e:84:f9:75:2d:7f:fd:03:14:66:5b:f9:0e:c8:ed:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C1:BA:1F:4E:87:BE:BF:D2:C2:94:7F:46:CD:20:BD:86:DA:48:3B
            X509v3 Authority Key Identifier:
                keyid:13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:12:5c:aa:5e:00:f7:13:3c:10:1a:a4:5e:07:8b:fd:af:2f:
         85:54:32:95:45:6d:ab:87:9d:c6:a2:43:15:14:25:79:63:1b:
         1d:fe:41:9e:c6:9f:74:50:72:92:f3:9c:24:f3:0f:af:9a:2c:
         34:cc:f5:96:c2:40:bb:0c:36:36:c0:61:97:2b:1a:13:8c:5e:
         0f:db:0d:bc:cf:b5:b4:2c:28:84:94:8d:00:d8:a7:da:4f:22:
         b3:54:49:c9:39:24:45:6c:f3:b5:d1:6f:86:f8:cd:f9:a4:84:
         60:9f:52:67:cd:e5:b0:9f:e8:35:b5:59:0d:f9:0f:a7:e0:30:
         2a:71:20:75:ce:42:53:ea:63:9e:11:dd:fa:1d:36:05:71:30:
         fc:4f:db:ad:4b:59:cb:37:e7:f5:12:14:d0:6d:1a:3b:29:cc:
         93:19:b3:3a:14:62:bf:a5:e5:d3:fb:b6:cb:09:cb:9c:ea:8c:
         95:0f:cc:af:21:ed:02:dd:c8:b2:f2:87:67:f2:83:47:6e:8b:
         c9:52:fe:45:34:5e:9f:7b:e6:fa:19:ae:bb:fd:84:4d:14:b7:
         2d:5e:f6:c3:c9:0a:c1:bd:89:ed:0e:ee:86:62:fa:08:0a:68:
         bd:82:20:1d:7a:0c:e8:0a:6e:25:05:eb:02:98:b7:c1:b7:42:
         c3:35:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:27:49 2025 by rpki-client