Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          e1UF0v6YHnHIs85FkshUtfVbrgCjHnTy5avtAqxT4eQ=
Subject key identifier:   F0:AC:74:4C:22:8C:F9:DC:A7:45:64:38:5D:80:5C:72:74:D7:4C:04
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       019777C1B862C14E859CB8E4D0F2BE861BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          0D27
Signing time:             Mon 16 Jun 2025 08:01:13 +0000
Manifest this update:     Mon 16 Jun 2025 08:01:13 +0000
Manifest next update:     Tue 17 Jun 2025 08:01:13 +0000
Files and hashes:         1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
                          2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: nWVIww/zHHXLO4KhVUiytCVAk0cbhSHlBXpzaN8ppas=)
                          3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
                          4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c1:b8:62:c1:4e:85:9c:b8:e4:d0:f2:be:86:1b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Jun 16 08:01:13 2025 GMT
            Not After : Jun 17 08:01:13 2025 GMT
        Subject: CN=f0ac744c228cf9dca74564385d805c7274d74c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:4a:a9:e2:10:54:68:03:2f:7c:0c:91:b1:
                    78:7d:3b:b0:28:26:92:e0:99:82:7c:75:fd:f5:5b:
                    9b:0b:08:6f:c3:a3:c0:80:a0:b4:81:69:4d:ae:d8:
                    8d:7c:e4:6a:59:af:7e:d9:4c:c8:63:7a:4b:80:dd:
                    d3:ea:59:91:da:fc:95:42:7a:0d:99:a5:fd:52:c1:
                    a3:39:c3:cb:f4:08:5c:95:76:9d:e1:45:eb:38:3c:
                    25:0c:e4:07:3d:9f:94:6d:83:88:2d:fd:4e:e7:99:
                    0c:69:74:8f:8a:27:dc:b1:95:a8:39:a9:89:8c:d5:
                    d0:d4:26:35:5f:13:48:04:61:0e:f2:d7:12:45:1f:
                    8b:27:a4:fc:de:55:2b:a9:c9:b6:9f:c3:b4:fe:8a:
                    46:79:33:85:e4:b2:ad:98:cf:40:29:c6:36:25:ed:
                    d7:8c:76:29:aa:0e:5f:01:45:41:6c:d7:ab:a1:14:
                    2b:02:53:96:45:2a:db:83:c9:b3:1a:a3:39:c5:85:
                    0c:0c:2b:a3:49:c7:31:9a:64:a2:11:3e:61:19:01:
                    3f:d3:2c:0d:e1:6d:ea:6a:bd:ac:14:b4:79:48:16:
                    83:4c:c1:01:06:1e:f1:e4:6b:41:b0:00:36:89:86:
                    a0:5a:54:15:df:25:68:56:b3:d3:49:4b:a1:73:5e:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AC:74:4C:22:8C:F9:DC:A7:45:64:38:5D:80:5C:72:74:D7:4C:04
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:10:e3:df:65:53:fc:91:7a:a5:28:0f:e8:f9:a4:2e:55:ff:
         3d:e0:6f:9c:04:3b:c8:5e:11:ca:ff:62:82:3c:bf:7a:84:36:
         03:65:91:64:db:92:26:67:7a:92:3e:cf:41:4e:d5:c3:de:27:
         e3:43:23:dc:b4:dc:54:87:a6:9c:9a:14:05:1d:15:f1:e5:c1:
         0a:55:12:d7:95:de:ed:75:d6:48:6a:8e:0d:26:b3:05:c1:d9:
         9d:f6:07:05:ca:6b:de:60:57:72:03:1b:ca:68:2a:2f:c6:9d:
         41:78:dd:3f:9d:15:3c:6b:23:40:34:07:f8:93:1a:84:87:95:
         06:0d:16:c5:da:5a:b7:dd:b1:54:ed:2d:cb:b6:14:5a:2d:86:
         da:27:64:e2:b8:22:0a:c7:f3:78:eb:b0:51:c4:8d:c4:36:14:
         57:e8:eb:3e:42:bc:22:ca:41:9a:f5:ac:27:46:a9:9a:c6:04:
         ca:3e:7e:c4:19:16:54:2a:8d:4d:d5:98:fb:c4:dd:5a:ec:e6:
         7a:ca:67:85:03:7c:1a:ce:f4:78:2f:52:fd:a4:91:fd:d5:7b:
         e8:d6:46:d5:5d:bc:91:f6:9f:df:88:1c:00:42:42:91:98:2b:
         b0:36:d1:fa:06:40:5e:e1:11:c9:e9:37:d6:ef:00:60:3a:ef:
         74:10:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:16:54 2025 by rpki-client