Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          PAb81JW4kUBGKk4sw1xULaIq007LHD8rd02eF7gJwIg=
Subject key identifier:   08:47:EE:75:D1:A7:BF:77:AE:72:C4:38:02:91:E9:5C:69:D2:06:14
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       019774C034C03C2CB726453744B81AA27602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          1595
Signing time:             Sun 15 Jun 2025 18:00:42 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:42 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:42 +0000
Files and hashes:         1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: qh0TZUrbtbhWTh4vk/0o32jgQts5nCGJoc4vcHawrWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:c0:34:c0:3c:2c:b7:26:45:37:44:b8:1a:a2:76:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Jun 15 18:00:42 2025 GMT
            Not After : Jun 16 18:00:42 2025 GMT
        Subject: CN=0847ee75d1a7bf77ae72c4380291e95c69d20614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:55:ac:ac:0f:87:8e:8f:48:d6:fe:b9:95:11:
                    dd:74:ec:04:20:45:d2:08:8c:09:66:b0:fd:62:bb:
                    23:66:65:cc:d8:83:88:7f:13:db:dd:14:eb:11:84:
                    cf:09:5d:96:41:d5:aa:5a:31:8e:12:9a:df:fe:2f:
                    90:3c:98:67:4f:60:7c:f8:fd:ec:74:cc:1f:43:dc:
                    1e:5c:c3:b1:20:a3:11:a1:ab:21:d5:fc:72:60:fc:
                    03:76:62:f8:d5:d6:e6:0b:68:29:d1:62:5b:62:e6:
                    d1:12:56:f4:8a:d0:6b:a9:93:0a:42:b5:78:5c:71:
                    95:7b:ee:a6:dd:f9:52:31:77:ba:51:ca:aa:03:37:
                    6d:a2:ce:f2:e2:69:51:b3:6b:72:13:59:2b:15:9b:
                    aa:61:8f:b9:9d:ae:1c:72:e7:1f:62:ae:e2:df:64:
                    0d:31:63:ea:83:58:a6:a3:4e:a2:85:93:38:ab:63:
                    34:93:37:08:20:dc:97:b9:a9:2e:9d:da:6f:56:55:
                    bf:99:45:a1:01:b5:04:48:a0:3c:b6:7a:70:ce:06:
                    d3:43:6d:51:f3:a1:d1:b5:0d:cf:ae:0c:77:1a:05:
                    59:25:1e:cf:9e:52:30:95:f6:2c:45:ee:15:5b:7f:
                    b0:ca:f3:7c:c9:ae:8d:eb:74:a5:8d:af:9f:27:08:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:47:EE:75:D1:A7:BF:77:AE:72:C4:38:02:91:E9:5C:69:D2:06:14
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:a9:b4:1a:cf:eb:4f:77:1a:b3:0e:5f:7c:f7:4a:66:61:
         85:7e:c5:fc:5e:51:67:b9:74:85:0e:66:e1:4a:0b:f6:34:24:
         4a:82:d7:42:4e:c9:00:5d:57:0f:c7:d8:a0:8e:a1:a9:f6:c3:
         cc:a4:eb:83:3c:75:0f:6f:17:db:87:c7:3a:95:c0:c9:68:94:
         2f:e5:91:7c:d0:20:de:e7:6c:30:f7:61:2d:bd:66:a6:76:b7:
         ec:69:1e:c8:6c:95:f0:99:55:47:1e:6e:6e:67:b2:78:94:4c:
         fe:db:19:98:be:ca:d4:52:5b:2c:7f:ed:54:78:f1:69:d5:69:
         c7:b6:ba:3b:ad:0b:81:c6:e8:20:cc:b4:45:26:d7:c3:c0:c7:
         86:62:16:57:0d:5f:63:ed:71:2b:17:05:1c:86:65:5d:74:56:
         70:73:bf:e6:1e:77:63:24:52:9a:32:52:d1:cd:f4:74:7c:5c:
         c0:06:a1:a6:f0:90:d0:75:11:5a:32:6b:d2:66:47:cd:ec:a7:
         14:d2:65:84:e0:ed:9d:35:86:49:09:7e:73:15:30:61:53:03:
         98:20:08:68:e3:aa:cc:9c:06:ae:36:1d:27:0a:b5:02:73:35:
         7f:c1:5b:ec:e2:17:5c:c0:25:32:93:de:0c:ef:f2:39:4b:ee:
         70:f1:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:03:22 2025 by rpki-client