Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File:                     ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier:          vsrcUseagZj9F+uo5y3K8mYBLyOS0wbNFhXexOsQZek=
Subject key identifier:   E9:FE:4B:DF:A6:88:7E:ED:E5:80:23:59:A6:9B:5B:84:72:0B:1E:01
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer:       /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial:       0197699795613B6DDE72A9680D20AA7D8410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number:          0C6E
Signing time:             Fri 13 Jun 2025 14:00:31 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:31 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:31 +0000
Files and hashes:         1: DUeztC_9OSU5_baS7RpA8PIrChA.roa (hash: nC0NIfkO+km6NTJ5hH8jMs/CXJYU2lhmZlogyR2BxZI=)
                          2: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: a+1bX+ObjyJKNDlaXI65iJxA6BlX4QGiPZNzg7PYXQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:95:61:3b:6d:de:72:a9:68:0d:20:aa:7d:84:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
        Validity
            Not Before: Jun 13 14:00:31 2025 GMT
            Not After : Jun 14 14:00:31 2025 GMT
        Subject: CN=e9fe4bdfa6887eede5802359a69b5b84720b1e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:76:d6:38:c7:36:0a:03:13:b6:0d:1d:f9:
                    d8:9f:e7:74:08:04:62:df:e4:8d:52:de:e7:4d:80:
                    9b:69:dc:b6:1f:9e:22:80:01:f5:c6:53:2c:a9:d8:
                    32:17:d3:1c:fd:e5:1d:bd:e3:5e:c8:04:0f:fb:8c:
                    4b:1a:3b:7f:81:c2:0c:93:ed:d4:5d:a6:45:41:3d:
                    ea:80:d2:0c:a7:3b:7f:fd:54:29:d9:53:74:0e:c8:
                    d3:57:c6:1f:4a:b8:29:ac:b9:ce:99:09:f4:0a:9f:
                    94:ca:e4:1e:30:df:4f:0a:e4:87:ec:cb:37:1d:cb:
                    58:a8:ea:0d:f7:37:9c:f6:45:0a:cf:2c:0d:08:e1:
                    97:7b:cb:a6:40:31:67:3d:d4:d8:fa:4e:ce:4c:85:
                    26:eb:81:9b:07:95:e7:bb:6a:f3:af:d9:5b:d3:96:
                    a6:2a:51:7c:91:30:9c:9b:cf:55:62:4b:69:66:16:
                    f3:3e:6c:c3:da:21:ba:5a:00:aa:4c:25:e2:10:a3:
                    4c:13:fb:98:04:10:8f:34:20:ec:ba:48:e9:c0:ec:
                    14:29:22:6e:b7:9b:99:fb:d2:bc:42:2a:1d:3e:0a:
                    d1:1c:da:7e:b6:f4:b1:a8:d9:54:be:9b:d5:c1:2c:
                    6b:ac:26:15:9a:96:05:56:86:db:44:0a:2e:d5:fd:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:4B:DF:A6:88:7E:ED:E5:80:23:59:A6:9B:5B:84:72:0B:1E:01
            X509v3 Authority Key Identifier:
                keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:76:79:80:0c:9e:c8:1d:ec:54:f6:50:e7:61:ce:9f:91:45:
         51:18:9a:4e:e4:08:04:22:85:21:c0:4d:88:ed:65:41:bf:6b:
         8c:a7:e4:7b:14:c3:d5:de:e8:1f:4e:ef:bb:9f:a8:30:e4:97:
         4b:e1:2e:08:57:a0:05:60:75:35:de:51:79:98:bf:98:0d:7a:
         50:59:6a:83:82:bf:4f:66:0d:71:16:9e:63:4f:67:99:7a:e1:
         9c:d6:50:74:00:04:d4:07:1b:65:c9:38:e8:0e:dc:35:1a:04:
         31:87:c2:f2:22:1a:ae:fa:db:c4:03:e6:06:cc:ab:36:36:54:
         f8:20:d1:c7:ed:f1:cc:57:14:28:46:d5:1d:a3:b2:2d:b8:82:
         58:d7:06:e3:7c:09:17:7e:73:01:ed:d2:a4:37:d1:24:01:9f:
         b9:11:f9:35:bd:b1:b4:3b:79:ab:6d:86:bc:79:de:ad:28:f4:
         c4:88:7a:fd:c7:90:23:92:25:03:e3:e7:ad:c1:24:db:b2:07:
         f1:9f:fb:e9:dc:a2:7e:de:87:b7:43:c2:d9:a9:0c:9f:15:34:
         33:50:cd:3d:a0:97:dc:7f:94:fd:c3:6e:76:bf:bb:2f:d3:16:
         12:f8:7f:b0:2a:7a:bf:00:ab:45:8b:4b:51:73:6b:5c:b9:31:
         f6:64:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:22 2025 by rpki-client