Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          xKkdluLiZzEa64YYU/cWEYTRMnXCVCfR2FUG3Xas534=
Subject key identifier:   EA:92:FA:DE:DB:80:4A:8C:BA:15:13:02:04:AA:68:1E:8C:5C:2D:43
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       0196C5A84451371028BCE533E309E8605C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          144E
Signing time:             Mon 12 May 2025 18:01:01 +0000
Manifest this update:     Mon 12 May 2025 18:01:01 +0000
Manifest next update:     Tue 13 May 2025 18:01:01 +0000
Files and hashes:         1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: BlGTb5nzJLOw8OpNcWpzmgGWg5B/GBpB716QCgj0sKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a8:44:51:37:10:28:bc:e5:33:e3:09:e8:60:5c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: May 12 18:01:01 2025 GMT
            Not After : May 13 18:01:01 2025 GMT
        Subject: CN=ea92fadedb804a8cba15130204aa681e8c5c2d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:c7:0d:dc:3c:8c:fa:68:b8:9c:3b:38:0d:
                    d9:69:58:30:68:2d:a8:5e:0b:0e:73:5e:b2:09:f6:
                    e7:8e:1d:96:4a:6e:7c:05:c5:de:01:e9:74:7d:ba:
                    34:20:6a:e7:1f:f7:5e:b2:87:14:be:45:07:94:f4:
                    fa:bd:29:9e:d5:2b:51:d0:61:0f:8b:31:d2:2a:51:
                    0e:64:de:2b:1f:2b:5e:a4:76:00:28:cf:f2:44:3c:
                    9e:a7:81:e0:07:7b:9b:73:12:4c:18:08:75:5e:c8:
                    21:72:81:08:5f:6a:32:c4:03:ba:fb:9a:6d:d8:b4:
                    cf:c2:d3:e4:b3:c0:f3:43:40:8c:c4:57:2f:27:4d:
                    e5:86:88:13:52:21:67:36:bb:d3:4f:96:b5:4f:c8:
                    7a:1e:84:ab:5e:9c:e1:8c:c9:a2:b8:fb:c8:e7:40:
                    a8:a5:be:a9:c9:96:dc:55:e4:af:7e:49:3a:39:2c:
                    7e:02:a6:d6:d0:81:ed:28:ef:26:2a:40:14:4c:5c:
                    44:82:4d:b6:91:3a:86:00:ad:b6:98:a2:8e:41:9b:
                    4b:a6:b1:95:3f:cf:25:9a:13:16:1a:f8:1e:e2:e2:
                    02:d6:3b:14:72:44:c3:61:1d:fa:f4:a9:21:cb:68:
                    70:53:1c:a0:ba:42:47:b6:43:d4:5b:6b:a5:7a:7e:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:FA:DE:DB:80:4A:8C:BA:15:13:02:04:AA:68:1E:8C:5C:2D:43
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:3e:c4:32:ba:12:e7:0d:df:5c:b5:48:14:68:38:70:33:
         36:5f:d1:5f:65:07:b0:07:cd:f2:af:6d:8f:e5:26:f1:b8:b9:
         61:73:d3:ee:3a:37:21:29:9f:e5:40:cb:45:42:b9:fb:5d:5f:
         d2:21:93:19:a2:79:fd:18:53:50:d2:e9:bb:e8:d3:4e:90:b6:
         5b:95:19:14:97:7c:fd:32:2d:88:f6:53:9e:a1:17:07:e6:fd:
         7a:58:d4:9d:67:6f:83:4f:64:37:5e:0d:f1:5e:ec:a0:02:43:
         90:c6:3a:34:d8:8f:1b:4e:5b:05:0e:78:de:cb:d5:14:5b:f0:
         b4:9d:bd:6e:00:74:00:16:56:01:42:91:a7:25:4e:8a:4f:62:
         13:33:9e:7a:f6:ce:aa:2d:37:52:27:13:1e:78:3a:8e:82:82:
         02:c0:57:45:9c:8b:ea:f6:7a:2e:c1:36:6c:5d:33:bc:9b:cd:
         00:cb:ca:14:66:33:cc:a4:85:e0:9e:cb:2f:bf:98:77:48:29:
         81:3c:24:30:32:37:6f:cd:27:e7:70:ba:00:56:f9:eb:b6:d5:
         84:18:c3:cc:30:16:31:5d:8d:cb:8b:64:32:5b:18:10:f8:97:
         49:6b:e4:b4:09:e5:26:be:89:71:8a:83:c5:7b:10:f6:4b:e2:
         2c:c6:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:02:51 2025 by rpki-client