Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File:                     SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier:          dKjaxqqrNGqvwdG/aGI3LBeUOCTwhicAU6xwdTTUWgw=
Subject key identifier:   50:7B:E4:BC:2C:A9:22:48:2B:09:BC:43:9E:3C:77:E9:DB:02:B0:65
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer:       /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial:       01976EBDC2788F051AA1A25DFB6B5CDB717C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number:          1598
Signing time:             Sat 14 Jun 2025 14:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:18 +0000
Files and hashes:         1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: 3jy4xhQ0y8XjyVQ+kV5L2IuAI8KSZbu5QZJO3J2aRLw=)
                          2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:bd:c2:78:8f:05:1a:a1:a2:5d:fb:6b:5c:db:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
        Validity
            Not Before: Jun 14 14:00:18 2025 GMT
            Not After : Jun 15 14:00:18 2025 GMT
        Subject: CN=507be4bc2ca922482b09bc439e3c77e9db02b065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:69:5f:2a:88:75:c8:a5:cd:79:c8:07:70:
                    1d:e3:69:83:c7:4b:ed:81:d5:d5:af:c3:46:de:c1:
                    23:43:b5:22:6c:91:60:51:73:37:b7:ae:2d:40:fe:
                    b9:81:75:a0:5a:4c:c7:80:83:48:a6:99:d7:4a:54:
                    5f:ca:cd:0f:b1:a1:e0:17:d0:16:d9:8c:ec:f1:bb:
                    fd:87:1b:3c:10:a9:f8:6b:38:1e:ef:22:72:62:e6:
                    f3:78:14:c2:83:88:29:9a:e1:78:6c:2d:d7:44:19:
                    97:49:f0:08:e1:03:3c:91:b6:39:e2:f4:bc:85:c4:
                    40:64:e5:61:ed:b3:00:83:8a:ba:57:5d:9b:b0:82:
                    1b:18:40:56:b4:35:a6:20:32:f8:a2:48:fb:ee:d5:
                    50:60:41:42:a9:32:23:36:24:8e:d5:f7:64:2b:68:
                    a0:ef:02:f1:d9:66:55:99:b6:a7:d9:46:8b:26:1d:
                    14:98:a8:f6:fd:eb:44:fa:fe:2d:24:90:42:31:a2:
                    94:26:5a:18:b4:95:3d:da:a2:46:c9:d7:2c:1e:b8:
                    ef:84:8e:61:3f:8f:f0:4a:7f:42:96:fc:97:6a:85:
                    5c:96:e0:42:76:8c:18:fc:71:51:67:d2:97:6b:ca:
                    11:09:fa:00:8a:f4:b1:53:2a:7d:31:c3:01:b6:a3:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7B:E4:BC:2C:A9:22:48:2B:09:BC:43:9E:3C:77:E9:DB:02:B0:65
            X509v3 Authority Key Identifier:
                keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:5e:a0:a9:ec:a0:31:be:f3:97:51:f9:d9:cb:45:3c:b8:
         af:2c:23:d3:25:37:8b:42:e2:3a:b5:c0:2a:3f:c7:39:f7:b4:
         58:e3:29:1b:0b:09:ef:a6:02:f6:e9:18:b1:2f:d5:ae:4b:e8:
         d5:28:2e:00:d2:a7:c3:46:df:e6:da:fc:41:74:2d:42:79:40:
         6e:90:ba:0b:6e:5d:b6:cd:8f:6f:25:1a:0f:a6:66:40:68:a0:
         9b:7a:5e:a2:2c:27:9d:05:56:fa:6b:ce:61:0e:7c:80:89:08:
         0e:6f:48:9d:48:93:fa:a9:65:df:da:f6:da:95:01:b8:92:fa:
         19:7f:37:38:37:9e:70:03:be:d1:d4:fa:8d:c5:70:e9:3a:81:
         7d:65:bd:0c:c2:ea:56:39:7a:75:d3:6e:fe:fb:4a:85:23:4d:
         2e:35:15:f3:1d:91:83:c7:79:28:62:33:6b:4d:c4:d5:96:c0:
         3e:91:4c:12:4a:6f:02:56:04:9b:8d:32:cd:9a:3b:86:15:b8:
         3b:9d:43:b0:53:c0:5c:e5:f2:bb:18:61:3b:93:fa:1d:d9:7f:
         67:89:13:3b:4c:90:b9:2a:ab:3c:d1:a3:f1:8f:62:e0:cc:c1:
         04:24:c7:c6:4f:bf:87:e1:5c:fb:fa:0c:6c:20:ef:14:f9:7f:
         fd:67:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:07 2025 by rpki-client