Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          VkLGVX0juceKxWv866Gkuvhi6abgWGsH1tfjN6kWVio=
Subject key identifier:   95:77:F7:8E:8C:52:93:3C:B7:A1:2B:AB:03:0E:CC:14:94:FD:79:DE
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       01976C2B3E8EA0D3EA7F0660594A126A2135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          1214
Signing time:             Sat 14 Jun 2025 02:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:02 +0000
Files and hashes:         1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: EZdNe6Lx4hmnbtPs6lJ+5rjPuPho9gxIczpq40i4yRY=)
                          2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:3e:8e:a0:d3:ea:7f:06:60:59:4a:12:6a:21:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: Jun 14 02:01:02 2025 GMT
            Not After : Jun 15 02:01:02 2025 GMT
        Subject: CN=9577f78e8c52933cb7a12bab030ecc1494fd79de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:10:6e:9e:ac:72:ad:14:87:e6:5a:5c:47:
                    49:5f:b3:37:31:93:06:f2:06:2c:20:77:b5:4e:e5:
                    94:97:60:30:aa:f1:97:0d:66:6a:80:d1:10:23:77:
                    3e:5c:8c:c2:5c:46:23:44:40:4a:bc:dd:24:e4:a7:
                    7e:10:b5:09:d3:d4:6c:e6:96:72:60:84:3c:c3:1f:
                    02:0b:f4:f4:2c:0d:49:3e:2c:2b:ec:5b:20:ca:f7:
                    1c:c2:0a:02:70:e6:fc:7c:24:f9:72:b9:61:e9:5b:
                    07:e0:0c:27:46:6c:20:c2:10:21:94:17:f6:a9:38:
                    ee:5f:7f:eb:62:b5:a7:ea:8f:64:ff:f4:5f:df:53:
                    b8:7e:f0:60:e1:7c:73:1a:a3:2f:5f:aa:c9:3e:f0:
                    01:dd:63:fb:b9:8f:99:ea:e2:79:ca:d2:96:20:98:
                    87:15:64:04:59:bf:b6:1c:e1:62:68:f0:40:c5:7c:
                    c0:21:6f:55:dc:65:0a:2e:02:99:60:0d:a1:9a:06:
                    64:8a:8d:96:98:a5:ec:0b:e1:73:0c:dc:12:4a:6e:
                    8d:49:13:49:c2:48:46:6d:13:4e:19:84:dc:c8:3d:
                    d2:f5:a3:9f:43:9e:7c:1c:eb:a2:2e:4f:29:06:ef:
                    ec:34:9d:dd:d8:63:cd:4e:ca:fe:a1:07:6b:07:81:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:F7:8E:8C:52:93:3C:B7:A1:2B:AB:03:0E:CC:14:94:FD:79:DE
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f2:56:4a:48:4b:2b:cc:7c:55:f7:63:1f:7b:9c:49:f2:ad:
         68:af:94:7a:36:0b:05:88:d5:fc:65:6c:70:71:8d:80:49:b9:
         ab:30:20:79:15:30:2d:13:54:5a:11:41:48:8c:48:7e:ad:71:
         2f:77:16:c8:63:a5:0d:82:94:dd:9b:e2:15:43:2d:a6:91:73:
         d0:bc:aa:02:0f:2b:4a:e0:71:e1:29:c0:e5:64:19:1b:de:30:
         a9:4e:17:62:86:9c:c9:a0:8a:38:c9:52:ad:98:14:bd:86:e1:
         cc:7e:eb:0e:7b:36:f9:a3:26:da:40:96:a0:b6:46:96:fb:a2:
         20:9a:8d:0c:2d:35:b4:98:60:49:ca:a8:12:cb:b7:06:26:f3:
         69:01:7e:fc:9e:34:d8:0f:2b:0e:9e:a2:02:3d:7a:b5:1a:f8:
         64:7c:b2:b4:21:a6:0b:f3:29:12:05:bf:4a:a5:4c:a7:c4:5c:
         e9:10:b3:3b:28:1e:ea:d3:4d:fe:44:9a:f2:a0:00:52:6e:a2:
         5d:93:22:e5:79:62:df:e7:7d:d7:15:9b:18:0c:02:67:34:e0:
         0b:23:81:45:01:c6:eb:b2:b8:9c:e9:96:80:4c:db:60:fd:6f:
         de:c2:08:04:33:c0:4b:39:01:71:a5:e2:99:0d:8b:fd:4d:8d:
         cb:ab:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:41 2025 by rpki-client