Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File:                     ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier:          16OuHSLrF8CKDZfoMoYWUHwC9qNgLW1DAcBkSZYp6as=
Subject key identifier:   1F:66:27:29:6A:CF:B5:D1:22:2D:70:D5:18:55:4A:9B:5E:F7:F7:80
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer:       /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial:       01977309A7A92581B26D315D52622DF866FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number:          158F
Signing time:             Sun 15 Jun 2025 10:01:41 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:41 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:41 +0000
Files and hashes:         1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: u2+jQot8YGuaJp03QngYGRILcbFpUV+3NZRDCYGJKm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:a7:a9:25:81:b2:6d:31:5d:52:62:2d:f8:66:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
        Validity
            Not Before: Jun 15 10:01:41 2025 GMT
            Not After : Jun 16 10:01:41 2025 GMT
        Subject: CN=1f6627296acfb5d1222d70d518554a9b5ef7f780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:c4:44:49:18:92:46:62:ff:64:ad:c7:d6:
                    f5:be:1a:57:87:90:f0:fb:c7:a0:bd:9b:01:68:f1:
                    39:40:35:03:96:83:c2:c1:4b:3e:d6:2e:64:38:25:
                    7c:0a:cc:40:74:a5:8f:28:d0:f2:64:69:01:a5:65:
                    8a:62:05:96:23:45:b0:10:89:96:58:c9:27:6d:7f:
                    4f:15:2a:1d:7b:9a:f8:53:c1:88:74:a3:0e:fc:a2:
                    84:9a:07:d8:c1:b8:b2:05:bf:18:4a:8b:9e:bf:f1:
                    73:ab:ed:37:9d:69:ce:51:cc:82:cf:c3:88:02:df:
                    0a:4d:05:4c:00:8d:ac:0c:c3:0a:5a:b7:7e:45:43:
                    bb:d4:c9:85:3f:73:0e:ed:df:c5:37:a3:9d:79:dc:
                    a0:ca:0c:e4:c1:74:ec:90:5d:7c:84:ef:0b:a1:cb:
                    e4:31:dd:2d:a7:a7:e1:c5:9c:b6:10:70:ae:c0:58:
                    0d:2a:e0:4f:35:65:de:8a:db:a6:4d:34:40:95:de:
                    fc:c4:33:84:b6:8b:4d:ff:98:63:ea:73:f4:f1:e5:
                    b6:1c:d8:4d:1e:83:64:14:6e:2d:e0:eb:70:23:19:
                    72:91:29:9f:85:37:f3:bf:d3:70:1e:68:f6:be:13:
                    c6:1e:16:a9:97:6e:86:ee:48:90:1a:aa:7f:57:00:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:66:27:29:6A:CF:B5:D1:22:2D:70:D5:18:55:4A:9B:5E:F7:F7:80
            X509v3 Authority Key Identifier:
                keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:36:8f:ec:c4:4e:16:f1:3e:f7:2c:21:25:49:94:80:2a:cf:
         26:ce:2d:89:a7:8a:db:0d:6c:c5:e9:52:6a:7d:8e:13:0b:96:
         b5:77:f5:c3:13:b7:64:f5:41:c1:4f:85:61:08:b5:6c:1b:4a:
         e5:f0:e2:82:55:1d:b9:13:11:39:f2:27:24:2e:4c:da:8c:7c:
         45:d9:38:88:3d:c3:f5:f3:2d:2b:b8:84:af:68:77:e0:10:40:
         ef:36:07:2e:c9:31:cb:91:a9:db:f4:95:c3:c9:53:f8:81:fb:
         36:65:54:77:74:37:e0:4a:e6:c8:bb:e9:44:08:f9:f8:59:d5:
         5e:9d:30:23:27:43:d1:49:b2:49:2e:24:da:90:62:21:90:de:
         cc:25:59:05:fe:32:87:c0:20:b3:67:75:9a:70:79:fa:33:1d:
         e3:a7:8e:c7:99:a9:89:71:91:1c:78:e0:b8:6a:07:1e:95:ff:
         d5:fa:a9:4b:6a:a9:89:1c:a7:e2:8a:b0:01:99:8a:64:14:24:
         3b:db:dd:f4:12:65:b2:dc:f3:71:aa:ca:72:11:b6:1c:fc:0d:
         b8:4d:82:9e:25:08:e1:f2:58:fa:2d:1e:23:79:fa:bf:79:74:
         ab:63:54:93:b7:34:1e:a2:b5:6a:91:15:e2:80:ed:e4:b1:a0:
         9c:fc:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:15:24 2025 by rpki-client