Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
File:                     614owu_zzzXDwcw9Z7qj3wUFX5k.mft (raw, json)
Hash identifier:          InWaX6cWT/bvQW7rhQMdMTJl7xKLJ39Gmwuj6k+OPuo=
Subject key identifier:   44:A0:E9:99:A0:C0:7E:BE:28:5A:18:F0:CE:AC:DD:78:1D:0C:B7:A2
Authority key identifier: EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Certificate issuer:       /CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Certificate serial:       01978E1362F9B14FFFEDB3A848049239C84B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
Manifest number:          15A0
Signing time:             Fri 20 Jun 2025 16:02:04 +0000
Manifest this update:     Fri 20 Jun 2025 16:02:04 +0000
Manifest next update:     Sat 21 Jun 2025 16:02:04 +0000
Files and hashes:         1: 614owu_zzzXDwcw9Z7qj3wUFX5k.crl (hash: 8IH/M/5WYr3sGCNLjoQFltyj7ApFaNj7zHx1tEtJBJg=)
                          2: eNqrwTVXkwV2eehov2BiD26ibTI.roa (hash: udLq0w8AI0t67Q1kVv/LIKA6aE1Zr7prABYVZQQ1D4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Jun 2025 13:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8e:13:62:f9:b1:4f:ff:ed:b3:a8:48:04:92:39:c8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
        Validity
            Not Before: Jun 20 16:02:04 2025 GMT
            Not After : Jun 21 16:02:04 2025 GMT
        Subject: CN=44a0e999a0c07ebe285a18f0ceacdd781d0cb7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:7e:78:32:70:3d:1a:bd:9b:c5:ae:4c:c5:
                    a6:37:2a:1e:ea:9c:de:8a:e9:82:47:2c:b8:16:2e:
                    37:f0:60:6c:23:7b:ca:e3:d3:61:2f:db:ca:47:db:
                    30:39:50:28:c6:88:ae:24:d3:4a:64:0a:00:a4:43:
                    7f:a0:12:70:bb:4f:1b:a6:58:d0:50:77:12:13:92:
                    39:86:05:e9:12:b4:b3:39:49:85:d4:ea:9b:c3:3d:
                    a5:0f:71:34:6e:74:35:f9:b3:d4:7e:02:ba:77:d9:
                    c7:72:c0:2b:47:ad:05:23:22:e3:75:c6:5f:d7:48:
                    64:f7:5b:29:77:64:c3:e7:20:ba:c0:f2:2a:df:55:
                    1c:28:c0:b5:c9:32:3f:89:ec:a5:6f:58:22:92:49:
                    73:83:07:52:a9:e2:02:7b:60:e5:16:09:79:b1:25:
                    d7:91:7d:15:1d:ea:36:c9:be:d9:a1:c5:7f:6f:90:
                    83:1b:7c:37:b3:85:e5:51:ba:20:63:d8:5b:8d:a8:
                    f6:0b:04:b1:3b:2b:10:cf:01:bd:34:c1:49:49:25:
                    02:18:45:f3:7c:66:bb:b2:e3:39:c4:b0:42:85:40:
                    2c:7b:b2:3e:eb:8e:1c:d4:0a:12:35:c7:6f:4d:88:
                    b5:40:8d:31:69:fe:52:d0:db:42:12:14:13:cd:ba:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A0:E9:99:A0:C0:7E:BE:28:5A:18:F0:CE:AC:DD:78:1D:0C:B7:A2
            X509v3 Authority Key Identifier:
                keyid:EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:e5:c5:34:bf:96:2a:1c:c5:0a:71:99:a6:af:4b:c9:ef:
         17:a9:83:69:01:f9:00:48:b9:76:88:df:43:78:30:12:c7:da:
         e8:76:dd:60:9b:56:09:6c:4e:89:11:3c:e3:d4:05:05:52:90:
         4f:ef:5c:01:c7:de:ac:57:7f:f1:ad:2b:d2:f6:db:19:d7:43:
         e1:6a:e6:59:b8:9e:3d:89:13:a0:bf:2c:cc:3d:bb:b6:7d:25:
         e2:2d:ee:7f:b1:26:0b:49:04:d6:43:cf:83:a5:f8:c3:c6:58:
         e0:c4:ec:84:ed:76:e1:80:7c:51:01:81:3f:c3:3c:2e:f5:85:
         9b:fe:ac:9f:2e:29:a0:97:73:bf:eb:ef:f8:6b:53:34:6e:d7:
         b4:f6:80:0a:b6:eb:04:28:6a:90:6a:6e:3c:25:fc:76:51:e4:
         f5:d4:70:de:42:f0:b7:81:95:b3:b3:53:26:f2:49:51:7a:4d:
         79:36:58:9a:1e:62:4d:16:2b:0a:81:8a:18:5d:1d:16:1a:5e:
         81:c7:13:5c:be:63:b5:be:08:f9:64:ee:db:0c:10:b4:2b:89:
         0b:9d:98:8e:f9:f8:47:13:fe:2d:de:43:23:8c:04:e5:32:b3:
         e0:72:21:fa:d4:45:fa:30:cb:50:b1:6c:72:cb:1c:f9:2d:3f:
         b5:e3:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:26:09 2025 by rpki-client