Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          rIg/c7afc9mfx+SUihKG7g2HWoMSV0aoqd+uJEv/lJM=
Subject key identifier:   3E:F9:61:DA:4B:A8:11:A5:06:96:09:23:7D:EB:DF:D0:A8:CD:B6:23
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       01976C6239E47103667E2B1DDC1A2B62CA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          0C59
Signing time:             Sat 14 Jun 2025 03:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:06 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: uL4GIVfZK7hGj1tTzZ8y9lMUfPhSo7okGayfzPaideM=)
                          2: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (hash: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:39:e4:71:03:66:7e:2b:1d:dc:1a:2b:62:ca:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: Jun 14 03:01:06 2025 GMT
            Not After : Jun 15 03:01:06 2025 GMT
        Subject: CN=3ef961da4ba811a5069609237debdfd0a8cdb623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:0c:2a:28:11:8c:9a:b5:df:58:76:b7:e5:
                    39:0b:4d:e5:c9:3d:a4:0c:2d:b1:20:2a:21:7a:be:
                    6a:03:66:fb:a2:7d:80:e9:9c:b2:fe:69:0e:67:80:
                    f4:a3:62:66:e9:8b:0b:46:54:33:43:01:a1:74:ad:
                    72:09:f4:3c:7f:6f:26:5c:94:13:bc:98:a3:fd:7d:
                    c2:10:35:b0:ab:8c:d5:4d:cd:31:ef:88:da:22:a0:
                    a3:17:b3:bd:21:d6:ea:9e:6a:bd:fc:fc:41:d5:59:
                    41:c7:4f:3b:50:43:33:a3:4c:01:d3:19:e8:cd:27:
                    3a:4c:7c:78:ec:ac:e9:56:28:51:31:7c:22:50:b3:
                    b0:70:fe:83:16:30:1d:37:ab:03:23:7e:4b:38:b7:
                    f1:6c:25:a6:fc:fd:04:41:5a:ca:cc:9d:bb:83:9b:
                    bc:8f:cf:30:d5:f0:28:17:79:2c:0d:d7:79:70:3d:
                    0e:75:a2:55:4a:20:80:02:14:0f:b6:5e:b9:24:b8:
                    ad:e6:7d:7c:6a:c2:06:17:bf:e9:7a:5b:06:a7:d6:
                    31:e5:7a:d7:ea:d8:fb:54:88:55:d4:1e:f7:39:12:
                    5e:b8:f1:94:52:87:1b:d1:c3:29:8d:49:6d:40:b3:
                    7a:9c:4e:4c:8b:d1:19:6b:44:8e:21:61:cc:f7:cc:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F9:61:DA:4B:A8:11:A5:06:96:09:23:7D:EB:DF:D0:A8:CD:B6:23
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:ca:a8:4e:38:d5:48:27:1a:cb:e2:e8:c0:03:d0:81:03:84:
         d4:97:f4:80:6c:86:0d:aa:8a:70:f5:bb:1a:e0:8a:52:77:29:
         94:1f:cb:28:2c:84:52:c6:08:cc:dc:03:8c:96:9d:47:e7:da:
         a9:90:da:0a:52:9f:bd:5f:64:a9:05:ed:1a:4e:81:93:72:b4:
         9d:f1:d9:70:7b:9b:ac:79:fd:8e:da:7c:41:45:c5:88:2d:ae:
         bb:fc:89:5d:84:d2:5b:f5:fa:da:87:bc:b9:26:3f:49:48:3b:
         dc:f1:a1:ee:aa:e7:4a:99:ff:13:30:6f:d7:58:de:99:19:98:
         2f:1c:97:43:4c:28:4d:d1:14:c5:b2:f9:a3:da:fc:e2:cd:7f:
         34:09:e4:47:04:6c:b3:06:70:cf:fe:dc:e0:18:dd:9b:4f:12:
         35:9f:d6:43:82:d7:41:0a:ed:93:74:f3:8a:90:8e:74:c9:bc:
         35:12:69:33:34:88:f3:fc:bb:2f:18:d5:70:0d:77:dc:97:e8:
         86:ba:fc:1e:08:48:12:58:f8:26:07:43:fd:90:9e:57:3c:bf:
         e6:09:9c:3d:e1:ca:5d:03:01:b8:93:79:06:d3:3d:76:7e:16:
         da:a2:8a:ce:9a:f0:a0:2b:c6:57:e6:88:3d:d2:12:ac:05:80:
         ad:58:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:43 2025 by rpki-client