Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
File:                     ejiftI-wXUgfHyORlMU30Vs1cAk.mft (raw, json)
Hash identifier:          9iowtOU9PWJ2iDJi30tPfeU+5MvTZGm64njsvxBz6ys=
Subject key identifier:   81:4B:45:2B:F6:D9:EC:53:47:3E:A9:13:00:01:0D:04:2E:FB:82:6A
Authority key identifier: 7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09
Certificate issuer:       /CN=7a389fb48fb05d481f1f239194c537d15b357009
Certificate serial:       01976DE2D7322E6EE755A1CD7BE2E488074F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
Manifest number:          0C32
Signing time:             Sat 14 Jun 2025 10:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 10:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 10:01:12 +0000
Files and hashes:         1: ejiftI-wXUgfHyORlMU30Vs1cAk.crl (hash: Sfb5Secc14B7buQO9sPJewrohT+qlp3C5NLsLx+LvHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:d7:32:2e:6e:e7:55:a1:cd:7b:e2:e4:88:07:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a389fb48fb05d481f1f239194c537d15b357009
        Validity
            Not Before: Jun 14 10:01:12 2025 GMT
            Not After : Jun 15 10:01:12 2025 GMT
        Subject: CN=814b452bf6d9ec53473ea91300010d042efb826a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:95:1c:8a:29:2f:03:f4:ff:97:01:d7:a9:
                    9f:94:1b:cc:fd:76:33:12:cf:a2:c1:16:41:19:4f:
                    72:0a:0e:0d:68:7e:38:1e:ca:c4:b9:21:79:1a:0c:
                    87:49:3c:64:6f:dc:43:aa:42:ef:79:77:b1:de:21:
                    5f:0f:80:20:f3:43:a8:71:42:4a:83:21:ad:aa:8d:
                    4c:1c:6e:ec:84:96:20:d8:92:3a:a9:b6:69:45:25:
                    93:bb:79:fa:63:76:fc:18:36:85:31:55:41:3f:53:
                    fb:16:ce:23:7f:ba:21:46:93:af:47:6d:db:fd:d3:
                    e7:a8:7d:3b:90:db:c7:b7:c2:da:dd:23:03:29:3d:
                    51:e5:c6:66:63:62:75:8a:b3:68:7e:47:13:7f:fe:
                    31:ab:1a:be:c6:a7:f6:9c:7e:55:88:6b:18:07:c4:
                    c0:16:0b:13:a0:fc:3b:28:69:ea:27:2f:17:46:b0:
                    52:7f:f5:bb:bf:64:6b:b5:7f:a3:7d:69:e4:d4:5f:
                    44:ff:e0:26:65:cb:00:7b:09:0c:b3:63:b7:3b:ce:
                    ed:c4:3e:d4:a9:2d:3a:c1:63:80:62:ae:15:43:70:
                    72:b8:14:fb:1d:49:f8:fd:af:fb:f0:d7:d8:e6:70:
                    c6:3f:3b:a4:8a:ca:53:2e:ec:cc:ab:58:1a:ab:15:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4B:45:2B:F6:D9:EC:53:47:3E:A9:13:00:01:0D:04:2E:FB:82:6A
            X509v3 Authority Key Identifier:
                keyid:7A:38:9F:B4:8F:B0:5D:48:1F:1F:23:91:94:C5:37:D1:5B:35:70:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejiftI-wXUgfHyORlMU30Vs1cAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/eb1064-6d26-4555-9fa5-a1a08ebf4eea/1/ejiftI-wXUgfHyORlMU30Vs1cAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:f1:97:e6:47:72:f0:ef:46:4b:71:df:05:49:19:47:af:
         03:3a:2c:c1:ab:aa:97:bb:4e:1b:fe:78:90:ad:75:0d:34:47:
         76:0e:19:56:d1:97:90:c6:5c:1e:8e:6f:09:f0:49:e8:30:76:
         3f:a3:76:17:bf:bd:79:36:bb:6c:1d:e7:ba:eb:ca:00:69:32:
         7d:cc:b8:16:3f:05:9a:44:a0:97:19:cd:15:c8:2a:3a:20:2e:
         e7:b4:d5:be:70:32:86:61:75:83:0d:79:c6:ef:a9:89:67:72:
         c5:62:14:24:49:92:96:64:af:9f:cb:00:bf:8b:c7:39:1e:9b:
         2f:a3:80:83:5b:14:78:ec:ab:a2:83:e3:2e:07:08:5d:bd:7f:
         b8:f0:a4:c5:88:93:08:1d:f2:22:9f:ed:cd:ba:fc:a4:ca:8e:
         6c:cd:37:b2:b4:54:f7:bc:43:7c:ad:ba:23:cd:3d:90:a1:94:
         4d:0c:7b:7e:6b:95:ab:17:ea:cc:d7:e3:e7:c7:fa:36:fc:46:
         d3:63:0a:ca:e8:74:10:9c:2e:0e:2f:d8:7d:31:83:31:af:01:
         6c:6c:bb:40:6e:fe:db:4d:08:0a:6d:2e:b3:3b:e3:d1:35:e2:
         2c:96:42:fc:2a:98:1d:57:ce:5e:b5:2e:f8:75:a0:98:c7:50:
         13:38:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:07:48 2025 by rpki-client