Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File:                     eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier:          RzwPtu16j4WiEmChaOtQfM4Kl5zJ194G3YG8my7pmA0=
Subject key identifier:   76:7F:A3:20:D8:8F:55:0E:7A:1A:49:D9:B5:A4:D5:37:99:33:C8:81
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       0196C83ADE38FAC754692A8D7BFC7AC051FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number:          153A
Signing time:             Tue 13 May 2025 06:00:23 +0000
Manifest this update:     Tue 13 May 2025 06:00:23 +0000
Manifest next update:     Wed 14 May 2025 06:00:23 +0000
Files and hashes:         1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
                          2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: 6TcAAg0GiD2Gs29IixTyznPrCBy8t3UJ4pWnb8gzA/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:3a:de:38:fa:c7:54:69:2a:8d:7b:fc:7a:c0:51:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: May 13 06:00:23 2025 GMT
            Not After : May 14 06:00:23 2025 GMT
        Subject: CN=767fa320d88f550e7a1a49d9b5a4d5379933c881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:79:9f:2f:39:27:ad:14:9d:65:00:3f:1c:
                    73:6b:6a:e4:87:0b:3d:ba:df:c7:aa:21:f9:35:2b:
                    0e:e6:bc:7d:bd:de:ca:17:86:fe:95:79:5a:03:f9:
                    f6:a7:ec:ae:d9:25:d5:a6:10:d5:a2:5d:3d:49:6d:
                    6f:a7:63:c1:ed:5a:13:16:93:8f:16:66:84:80:83:
                    fc:dc:e3:60:46:3f:53:7e:74:1a:71:ce:6c:ad:02:
                    5c:46:ca:2b:a8:97:cd:de:33:31:20:5f:e1:1c:18:
                    9a:8d:30:b3:94:e2:e1:c5:50:1c:5f:12:5f:31:1e:
                    cc:3f:1a:2e:47:59:d9:ad:b8:f0:34:04:7d:1e:cd:
                    90:84:54:03:6b:6a:35:a3:27:15:43:fc:3f:38:e0:
                    41:34:9a:d3:29:df:fb:71:67:ac:bd:b4:c9:af:73:
                    44:51:6e:f8:11:f4:5a:0c:28:a0:5d:96:55:5f:f9:
                    ff:7b:81:5d:a3:66:72:3a:3d:56:19:fa:22:8c:57:
                    04:06:65:91:d0:77:ef:e7:0b:d6:24:fe:d6:07:93:
                    5e:11:8c:01:46:d6:51:f4:20:f4:0a:e1:10:87:46:
                    28:7c:93:c5:87:74:ba:eb:1a:5b:8b:18:74:c2:f8:
                    09:1d:f2:d5:a6:37:84:9a:8c:cf:8d:96:45:67:88:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7F:A3:20:D8:8F:55:0E:7A:1A:49:D9:B5:A4:D5:37:99:33:C8:81
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ec:1f:74:2a:df:f4:ee:8a:e1:e1:c4:52:99:01:fc:a3:97:
         aa:96:a7:7c:af:0c:78:48:83:21:d0:22:e5:78:02:c6:7a:8c:
         f3:88:ac:7a:9e:94:c2:12:1a:93:c1:0d:bc:5e:91:7c:63:ca:
         1b:ba:17:86:46:4d:93:b0:03:3e:ce:ea:67:3f:03:52:20:06:
         93:42:6d:91:b2:75:65:e3:c8:7a:f9:92:ac:3a:29:10:2f:21:
         c3:5a:70:f9:cf:93:46:41:b5:23:c4:42:ea:f4:d6:90:77:b7:
         70:80:3d:d0:a5:c4:bc:96:dd:e7:97:2c:3d:0d:81:15:af:fa:
         4d:04:b7:a7:4a:20:17:10:e5:ac:cb:5c:cf:59:c1:90:d6:8d:
         9b:10:03:52:f5:f9:82:47:b8:cc:8d:ef:d0:1b:75:53:3a:6b:
         10:72:24:4a:ff:e6:62:ab:04:5f:35:89:4e:48:9f:3f:ed:0f:
         05:3d:3b:b6:61:fe:87:28:74:fb:e0:91:1b:54:55:4c:4c:93:
         b1:df:ab:df:ff:f1:c7:69:e7:04:c8:8b:ab:28:de:50:ec:77:
         f8:b4:36:b2:7b:f8:02:92:f4:20:9c:da:86:83:a5:c6:c0:ef:
         c5:53:a8:96:d1:b2:3a:ad:73:d5:ed:36:42:70:6c:63:fe:b0:
         94:37:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:39:43 2025 by rpki-client