Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File:                     0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier:          IerJhu9LoCUrgFuTLbpiLgAquE2qAONaq4S0m5AOu60=
Subject key identifier:   47:0F:9B:59:15:4C:2D:F6:57:2B:72:AC:4E:87:C4:89:7C:30:93:04
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       019776777583150FE6D9D981B885CFAA9DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number:          10BB
Signing time:             Mon 16 Jun 2025 02:00:29 +0000
Manifest this update:     Mon 16 Jun 2025 02:00:29 +0000
Manifest next update:     Tue 17 Jun 2025 02:00:29 +0000
Files and hashes:         1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: qJwtpQyemdOmWNJKIb5woOVtCWrgP88q7YZSbt0Lwaw=)
                          2: ickIIpxDa66Zw5SNhJ159yjnJm4.roa (hash: Ip9TbNQZyJFwTGktaixn0vXs7mVP4NezsqJqAycz9sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:77:75:83:15:0f:e6:d9:d9:81:b8:85:cf:aa:9d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: Jun 16 02:00:29 2025 GMT
            Not After : Jun 17 02:00:29 2025 GMT
        Subject: CN=470f9b59154c2df6572b72ac4e87c4897c309304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:fd:e4:0d:e7:37:21:b4:42:f3:5c:c3:b5:
                    af:a8:9d:79:b4:84:25:9a:73:43:14:c4:01:0f:8f:
                    ed:1d:00:89:e0:d3:b1:d6:79:48:d7:c4:99:ea:26:
                    4e:ac:fa:cf:0e:28:4e:70:8e:4f:e8:38:1b:e5:e4:
                    31:f4:c8:d7:43:99:12:66:0e:f8:13:78:ab:01:2e:
                    bb:0f:cb:31:c1:fc:f9:98:c9:15:3c:ec:85:c7:a1:
                    3a:7f:70:aa:73:f3:5d:d4:8a:0a:9e:7f:05:83:c5:
                    73:bb:36:03:75:40:69:ce:e2:91:17:84:29:79:8a:
                    bb:42:01:61:fe:62:60:03:18:62:c0:46:28:c1:83:
                    ec:af:75:82:07:d0:47:8e:c6:03:6f:ba:c1:c8:11:
                    50:5f:31:25:99:ea:d2:a0:80:64:d4:22:f9:84:63:
                    a8:66:26:3d:8b:c7:e1:78:c4:1b:28:bf:b1:e3:17:
                    7b:25:68:5b:4b:f7:f4:06:38:b9:53:5f:0e:78:4a:
                    96:12:c4:76:34:95:4e:3f:ec:7a:c7:9a:7c:7e:4b:
                    b2:41:f9:1f:f0:ea:d2:70:b0:aa:27:e6:ad:8e:e7:
                    cb:c0:b1:9f:b8:28:a3:35:e7:4f:46:13:89:dd:59:
                    14:a8:43:04:a4:41:c7:eb:0a:51:27:d6:12:db:02:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:9B:59:15:4C:2D:F6:57:2B:72:AC:4E:87:C4:89:7C:30:93:04
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:41:3b:7c:af:30:95:16:d1:7c:9e:8e:3d:e7:e0:18:7c:47:
         30:29:a1:f4:12:ab:ec:31:73:cb:2b:10:f2:45:ef:7a:d6:99:
         57:a6:05:89:03:a2:59:af:7b:29:35:c1:c7:b7:04:3b:fe:74:
         1d:f0:97:63:28:6c:ac:9a:07:7b:ad:86:77:13:ba:91:f1:ac:
         ef:cc:a7:fa:c8:fc:99:48:9e:8c:8e:2e:f3:38:7d:39:81:24:
         7c:6f:67:88:03:9e:ce:84:c7:8c:0c:fd:2e:af:34:a0:0e:85:
         11:1e:01:d5:28:67:14:fb:00:d9:ed:12:e0:03:e3:9d:c8:c4:
         95:bb:87:c9:ff:64:d2:2c:e1:01:ac:18:d0:ee:85:4a:92:5f:
         a3:22:8c:4b:74:5d:42:03:ea:c0:85:07:31:01:d5:89:17:44:
         06:84:3d:f4:e8:43:15:e7:27:cc:97:53:f1:a2:49:77:e8:7e:
         88:71:69:e0:c8:99:d7:7b:0f:78:1e:3b:87:d1:e1:83:f1:7e:
         1e:5d:42:ad:fd:09:08:b2:1b:10:08:15:45:ed:04:e1:4f:01:
         19:95:1a:c3:de:c0:92:68:25:58:ad:a2:d6:51:8b:f4:2e:de:
         53:b6:14:d8:c0:6a:4a:f2:3e:e4:14:e5:44:1f:4a:11:18:09:
         0c:b5:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:14:34 2025 by rpki-client