Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          unbmtXjkkLRjEqYcqz3j4ce36lqZmy13LyzNF7acpjQ=
Subject key identifier:   12:CC:80:64:21:10:09:70:76:9A:27:20:9F:47:1E:8E:B3:8D:4D:65
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       0196B6A3114D6F8FC9A458E3A83B9195BC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          0B0C
Signing time:             Fri 09 May 2025 20:01:02 +0000
Manifest this update:     Fri 09 May 2025 20:01:02 +0000
Manifest next update:     Sat 10 May 2025 20:01:02 +0000
Files and hashes:         1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: FiuSpydl5NOJvNQFd8y/qiAlb0UzmpLFvUFltdBGdxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:a3:11:4d:6f:8f:c9:a4:58:e3:a8:3b:91:95:bc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: May  9 20:01:02 2025 GMT
            Not After : May 10 20:01:02 2025 GMT
        Subject: CN=12cc806421100970769a27209f471e8eb38d4d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:26:17:2d:04:61:e3:bf:f9:7e:4a:63:e6:
                    e0:e1:c6:4f:d5:a1:cf:3b:75:e9:7a:56:9d:b0:4c:
                    ca:5f:7e:fb:65:98:e2:84:d7:e1:ca:b6:42:0c:b2:
                    84:3e:77:25:17:2f:22:6e:86:6e:1d:a9:1f:f7:b7:
                    c3:b6:9c:af:c5:26:80:1b:e4:9d:6f:07:40:06:36:
                    6b:be:18:e5:39:03:3c:b0:76:ac:3b:0a:27:37:e8:
                    d3:8a:9b:f8:fc:5e:8e:23:29:92:ac:e5:a4:9e:00:
                    7f:8a:2b:42:5d:71:dc:d5:da:cd:2b:b2:11:0a:21:
                    d9:1f:5f:30:f8:ee:80:6a:36:34:34:0a:7c:4c:fa:
                    34:c2:22:7a:1b:54:89:6f:1a:0b:57:24:47:65:86:
                    7e:08:a8:93:53:32:12:44:63:d6:a3:85:13:47:81:
                    32:a9:e1:2b:c1:4d:a7:51:8c:91:37:1d:20:50:7f:
                    0b:1e:49:8a:60:4b:c7:b4:0c:d8:79:95:68:f8:93:
                    93:fb:ea:2a:69:61:70:cd:e7:dc:03:ac:8d:93:b1:
                    98:7b:74:47:e9:0d:5f:f8:d8:48:cc:75:3a:61:8c:
                    a4:cc:8a:52:0b:e5:0b:a2:a4:e7:d3:70:f4:03:8f:
                    8d:db:e9:e2:00:18:45:ea:f7:3b:bb:80:cf:b3:f7:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:80:64:21:10:09:70:76:9A:27:20:9F:47:1E:8E:B3:8D:4D:65
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:69:03:54:52:3b:70:ca:00:a7:e9:84:52:9e:19:c3:d5:6c:
         b6:88:2b:8e:4a:4d:27:2d:79:cb:84:6a:3e:ec:77:c0:ac:23:
         dc:7a:94:fe:98:fa:e2:50:92:de:35:41:6c:d0:53:3a:63:c9:
         fe:a5:7c:4e:3f:3f:5e:bc:21:49:02:4b:b5:b9:ee:ad:87:07:
         ec:b5:a2:67:11:54:60:d1:ab:67:9a:3c:3b:64:e8:d5:90:d7:
         ce:7b:b7:c5:6f:6f:f8:e4:fd:0f:63:6c:71:9e:48:82:45:22:
         ab:88:5c:ff:b5:9e:e0:6f:2e:16:27:85:94:24:ca:db:da:dc:
         88:fc:5f:d1:ea:57:1d:99:c4:2e:43:57:89:f2:50:2c:68:85:
         63:0d:c1:d8:b8:92:6c:98:14:ed:f8:ac:65:44:c3:0e:37:8d:
         4d:f5:a9:e8:1a:15:23:d9:8b:ed:ca:15:ef:72:f8:a2:59:33:
         51:68:b9:ca:dd:9d:95:11:4c:b3:ae:0f:bf:31:70:20:ca:0a:
         c4:93:d7:80:ee:e6:48:9f:25:98:e2:41:95:1e:43:42:b7:f8:
         52:d2:96:40:ea:ca:af:f5:8c:6d:6c:8e:c2:4d:72:a5:f6:87:
         ce:e4:eb:cf:91:5d:9b:44:a1:3a:0d:43:49:1f:a7:38:39:2d:
         c8:3c:4f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2oxFNb4/JpFjjqDuRlbw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz
ZTllZjkwHhcNMjUwNTA5MjAwMTAyWhcNMjUwNTEwMjAwMTAyWjAzMTEwLwYDVQQD
EygxMmNjODA2NDIxMTAwOTcwNzY5YTI3MjA5ZjQ3MWU4ZWIzOGQ0ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0EmFy0EYeO/+X5KY+bg4cZP1aHP
O3XpeladsEzKX377ZZjihNfhyrZCDLKEPnclFy8iboZuHakf97fDtpyvxSaAG+Sd
bwdABjZrvhjlOQM8sHasOwonN+jTipv4/F6OIymSrOWkngB/iitCXXHc1drNK7IR
CiHZH18w+O6AajY0NAp8TPo0wiJ6G1SJbxoLVyRHZYZ+CKiTUzISRGPWo4UTR4Ey
qeErwU2nUYyRNx0gUH8LHkmKYEvHtAzYeZVo+JOT++oqaWFwzefcA6yNk7GYe3RH
6Q1f+NhIzHU6YYykzIpSC+ULoqTn03D0A4+N2+niABhF6vc7u4DPs/frPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLMgGQhEAlwdponIJ9HHo6zjU1lMB8GA1UdIwQY
MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt
ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw
LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGkDVFI7
cMoAp+mEUp4Zw9VstogrjkpNJy15y4RqPux3wKwj3HqU/pj64lCS3jVBbNBTOmPJ
/qV8Tj8/XrwhSQJLtbnurYcH7LWiZxFUYNGrZ5o8O2To1ZDXznu3xW9v+OT9D2Ns
cZ5IgkUiq4hc/7We4G8uFieFlCTK29rciPxf0epXHZnELkNXifJQLGiFYw3B2LiS
bJgU7fisZUTDDjeNTfWp6BoVI9mL7coV73L4olkzUWi5yt2dlRFMs64PvzFwIMoK
xJPXgO7mSJ8lmOJBlR5DQrf4UtKWQOrKr/WMbWyOwk1ypfaHzuTrz5Fdm0ShOg1D
SR+nODktyDxPLw==
-----END CERTIFICATE-----
Generated at Fri May 9 23:52:06 2025 by rpki-client