Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File:                     ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier:          dCEvEU63tpS7odf7iHuS6RhgIl1HCIBOSRb5jIRo6p4=
Subject key identifier:   49:1B:53:37:9D:00:CC:86:08:EB:A3:30:7F:6F:43:1B:EB:8B:ED:FD
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer:       /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial:       01976F2C32EAF41EF23A074CEF62780F1AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number:          1340
Signing time:             Sat 14 Jun 2025 16:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:56 +0000
Files and hashes:         1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: ZOhjzP06NYHP8+1ht0Q03nyrOJA5oEmCJ/ZG5h33O0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:32:ea:f4:1e:f2:3a:07:4c:ef:62:78:0f:1a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
        Validity
            Not Before: Jun 14 16:00:56 2025 GMT
            Not After : Jun 15 16:00:56 2025 GMT
        Subject: CN=491b53379d00cc8608eba3307f6f431beb8bedfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:9e:37:e5:78:d1:ba:92:8f:83:6c:b5:e7:
                    6a:ba:13:f5:1f:9f:4e:0a:e5:af:f2:f3:fd:7b:85:
                    6e:b4:19:7a:b5:b6:5a:86:f4:5d:af:32:d6:ef:65:
                    29:9f:09:49:fa:9a:4b:d2:4b:f9:5b:55:fb:9a:f1:
                    97:a2:46:2c:5a:1d:fa:32:dd:db:f4:90:96:f6:28:
                    87:69:55:6b:69:66:67:b0:07:1f:be:a8:06:63:93:
                    6d:73:14:dd:6b:6c:04:93:d8:1e:c0:35:42:66:03:
                    da:8f:fc:07:c2:bb:ae:dd:32:57:b6:5b:99:4d:b6:
                    97:cd:33:60:bb:dc:f1:6a:87:39:fc:17:ef:f9:9a:
                    94:12:03:f0:73:97:94:d4:b4:9a:5f:7f:65:66:8d:
                    55:63:12:d8:09:32:e5:07:a3:36:d6:5a:0e:82:8e:
                    03:d5:81:33:06:0a:33:35:82:60:e7:73:42:b7:fa:
                    b6:94:8a:1d:ae:aa:d1:39:dc:02:3a:32:68:9d:90:
                    1b:92:81:64:d1:65:23:be:c5:97:b4:ed:17:7c:c0:
                    a9:fc:7f:e2:1b:ab:41:33:7a:ec:cc:c6:78:ca:9c:
                    0b:fb:7a:56:fc:75:89:27:b3:d4:fa:7d:2a:53:3a:
                    63:b8:c1:52:1c:dc:32:fc:e7:9b:6d:a1:06:9a:55:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1B:53:37:9D:00:CC:86:08:EB:A3:30:7F:6F:43:1B:EB:8B:ED:FD
            X509v3 Authority Key Identifier:
                keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:21:0c:db:82:d5:92:cb:b1:0a:25:46:cb:4b:ea:90:18:b6:
         e6:2a:68:7f:9a:29:99:27:14:ca:89:05:11:be:e5:25:4e:52:
         91:28:ea:95:a1:2f:4c:d8:3a:f1:b6:3a:03:cf:1b:a2:8a:04:
         d7:dc:e4:1c:b9:db:9a:13:92:4d:21:8f:95:3e:10:08:4c:91:
         fa:95:b2:f5:07:5d:f0:4a:e1:86:bd:be:54:b8:5e:8c:6c:35:
         1d:8a:54:0a:62:0d:81:0e:02:da:70:ca:63:dd:11:71:9d:20:
         d1:bb:5b:9c:65:8b:62:d4:e8:61:f9:59:25:95:f4:ad:30:c7:
         85:c8:21:7d:74:e3:ec:95:59:3a:69:96:86:30:79:04:31:37:
         f2:ce:de:14:e3:a4:d4:92:4d:4b:32:44:d0:ab:03:53:d2:03:
         9f:09:bd:7d:6b:06:bc:f3:40:b0:1e:a5:0b:aa:30:66:b8:4f:
         88:ec:41:0c:56:a2:4f:b0:6b:a3:39:23:64:07:06:82:51:4f:
         bf:2a:e1:a0:96:03:e4:fc:65:b3:78:b8:a7:29:4f:3e:73:7d:
         cb:5e:f0:02:ab:b2:35:43:7a:48:5c:e9:89:fe:ce:27:96:06:
         63:56:0b:12:57:f4:a5:db:41:87:da:b4:5f:28:01:a4:a6:cc:
         d2:4d:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:00 2025 by rpki-client