Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File:                     Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier:          JrJUyAOs3+CBO5w6Fu33hi7JQAsbDSs5o/9knMw4kh4=
Subject key identifier:   57:08:38:D4:07:27:27:7A:16:5A:9E:39:8E:0E:DC:25:C7:FC:94:73
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer:       /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial:       019776E5540AC68CA4723F1A0982F6F7BD48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number:          0DFC
Signing time:             Mon 16 Jun 2025 04:00:30 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:30 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:30 +0000
Files and hashes:         1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: 7eQQlT8z6t/HiOCwWnsXjga85vPYN47VbzuR/og6U10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:54:0a:c6:8c:a4:72:3f:1a:09:82:f6:f7:bd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
        Validity
            Not Before: Jun 16 04:00:30 2025 GMT
            Not After : Jun 17 04:00:30 2025 GMT
        Subject: CN=570838d40727277a165a9e398e0edc25c7fc9473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:1f:d1:45:ed:69:de:7c:15:4e:32:a8:a1:
                    50:f2:a0:b3:a5:5f:2a:86:1a:57:47:53:74:2f:2b:
                    8b:73:9a:26:5c:5b:c1:15:ba:0f:9a:21:07:94:68:
                    6a:b3:2f:e4:8e:d5:aa:77:ed:ff:23:21:49:a9:86:
                    2c:e5:95:cd:6c:d0:c2:63:ad:7a:aa:31:29:ae:dc:
                    d6:b8:f1:0f:a6:1a:5d:1f:73:ab:75:8a:e4:8c:38:
                    f3:ac:b1:97:cb:da:c1:2f:50:94:c5:49:b2:c2:f0:
                    1e:85:3d:eb:51:a0:2f:29:3e:c1:f3:12:84:c1:54:
                    7c:30:38:dd:b7:37:67:51:11:b8:82:ca:37:33:42:
                    3c:dc:56:5f:3c:c4:e2:46:51:03:7f:ff:9f:e5:80:
                    58:2e:be:4b:7a:d9:5d:d7:a4:87:43:00:35:24:7d:
                    27:10:5d:9f:74:e6:c1:04:a8:d9:4d:1b:a0:5f:e5:
                    72:9d:56:69:e4:75:3d:e6:9e:78:8a:37:29:b1:3d:
                    05:b8:0e:73:7c:e5:cf:b2:12:64:5e:a2:be:8a:04:
                    48:7c:a9:d6:11:14:08:b3:14:fa:ae:36:d8:33:84:
                    a8:9e:d5:54:c5:bd:1f:e7:4f:7b:5a:bc:7f:24:2a:
                    47:44:d4:21:d1:09:fd:38:fb:e5:6a:86:d4:7c:c2:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:38:D4:07:27:27:7A:16:5A:9E:39:8E:0E:DC:25:C7:FC:94:73
            X509v3 Authority Key Identifier:
                keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:44:3d:5a:6e:40:d4:3f:3e:d9:52:df:3b:4c:26:52:1e:b9:
         b4:ad:71:fa:1a:c2:73:67:4f:70:1b:74:55:41:75:9b:3e:e2:
         5e:3f:b6:13:bb:be:66:9c:a2:52:99:28:22:58:09:98:26:67:
         d9:e6:6a:de:20:f7:da:9b:3a:39:0c:68:35:3f:8b:27:d7:af:
         f6:ea:01:fa:9a:e1:bd:3f:0c:e3:6a:f3:3b:f2:c0:c3:6f:02:
         ed:d3:9b:23:e6:02:e4:e0:01:6b:fd:5d:33:5e:42:29:95:39:
         d7:a3:cd:36:04:a6:11:62:2e:d3:cd:e7:5d:ba:97:54:23:ab:
         8c:cd:11:5e:d1:c1:43:fb:ca:3f:06:86:5d:a3:97:e2:24:94:
         cc:d3:04:f1:d6:9d:e7:07:76:45:f4:b9:98:1f:5b:f2:6c:de:
         9d:c7:72:f5:d3:fe:7f:be:f8:3c:1e:c0:36:4b:dc:7c:28:81:
         c9:70:f7:be:f0:ce:c6:55:94:d8:c1:72:d4:87:6c:c3:ad:ba:
         ea:13:15:cb:d9:38:82:b4:c5:f4:66:b6:96:76:00:05:e6:55:
         a1:c3:e5:2a:ad:35:39:eb:65:e6:8a:ef:ab:cc:25:6f:2e:10:
         60:cf:19:80:26:1f:f1:4b:9e:1d:cc:9a:d3:c6:76:26:13:b8:
         82:d1:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:53:58 2025 by rpki-client