Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          kZXjQ7Yk8smKv2fXLobg16n1QCyYk4/X2aaeQLc+Ikc=
Subject key identifier:   EC:D8:A0:48:9C:1A:8B:B9:4B:8B:C2:2F:01:AD:C8:21:C2:DB:B9:B3
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       019771BF72C3402335099080646506BA5096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          1099
Signing time:             Sun 15 Jun 2025 04:01:01 +0000
Manifest this update:     Sun 15 Jun 2025 04:01:01 +0000
Manifest next update:     Mon 16 Jun 2025 04:01:01 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: s2rooDi+goS1MNU5lGLXXhSsMo/5rnFb2L6VZk0wJHI=)
                          2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:72:c3:40:23:35:09:90:80:64:65:06:ba:50:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Jun 15 04:01:01 2025 GMT
            Not After : Jun 16 04:01:01 2025 GMT
        Subject: CN=ecd8a0489c1a8bb94b8bc22f01adc821c2dbb9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:f2:26:a9:e5:21:31:12:68:fd:b2:c2:cb:
                    d5:af:6d:ef:66:3c:c8:15:6e:ec:40:8f:47:f7:d7:
                    96:bb:3a:84:be:00:c4:c9:95:6d:6c:42:98:60:7a:
                    5c:2f:5b:9f:87:a0:a3:0b:1f:8f:06:d1:d8:01:40:
                    9b:c5:1a:27:99:d6:5d:b5:86:a7:d0:41:40:cd:1b:
                    3d:94:bf:a7:1f:8c:99:fd:80:1f:b7:5c:12:5a:b4:
                    5c:c1:c3:68:07:3d:56:90:0f:fa:fb:eb:35:87:d5:
                    8d:4a:8e:e8:bd:34:db:b6:30:f5:66:b7:ef:a3:b2:
                    12:b6:63:ea:9c:90:e4:61:4b:bc:15:75:b6:7b:d5:
                    35:6f:6d:81:75:f8:a1:5d:40:61:49:d5:5a:41:3d:
                    d6:8e:86:cb:ff:13:26:80:70:6d:9e:40:21:e6:8f:
                    a8:53:86:81:69:f1:91:e7:7d:82:a5:57:7b:39:27:
                    36:0f:7f:6b:3c:d8:f2:84:9f:40:17:54:0d:c5:e1:
                    d0:fb:d0:94:e0:7e:a7:3f:65:b6:5c:5b:03:79:cc:
                    00:36:4b:7a:b5:7d:d0:10:59:de:8e:7c:9f:37:93:
                    75:35:8d:87:e7:79:1b:ab:a2:60:6f:e5:c9:46:e1:
                    32:64:66:25:2e:da:5a:15:b3:15:63:90:d7:22:c7:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D8:A0:48:9C:1A:8B:B9:4B:8B:C2:2F:01:AD:C8:21:C2:DB:B9:B3
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:f5:88:a1:9c:e1:ea:77:e1:d5:56:12:de:75:ae:27:4d:
         d4:ad:66:54:df:c3:6b:0d:55:ff:dd:e7:96:00:8b:f6:00:95:
         24:bf:ab:92:63:e4:48:3e:0d:07:54:bb:6b:2f:b3:db:e5:02:
         66:05:25:ed:f4:44:3f:a6:ea:e5:68:ee:c5:e3:c8:97:28:35:
         a5:9b:0f:48:8b:7d:65:85:d4:e4:6e:8c:ed:87:46:05:d3:9f:
         5e:e4:8b:7e:38:e7:0e:03:6b:7e:e1:56:a0:df:a6:7f:de:5a:
         ce:13:38:1b:3c:99:65:88:e9:46:b6:bb:ed:5c:93:38:4c:67:
         67:fa:ec:50:86:a2:a5:15:39:a9:f5:ba:4a:1f:21:43:e8:85:
         11:1c:40:73:47:fd:31:f4:67:cb:68:9a:ed:db:15:06:8d:fd:
         7d:a7:77:3f:98:81:8e:48:77:1f:5f:74:48:aa:cd:49:a7:d3:
         0b:75:41:4e:ae:59:db:b6:65:b2:a4:ac:1d:e5:88:fe:e9:ea:
         6e:ed:ac:86:95:10:64:06:2b:2a:2a:72:d6:8f:5f:64:04:12:
         05:e3:e1:3b:1e:f9:45:ae:eb:4b:c1:0c:4e:9e:75:aa:28:f5:
         10:60:df:a4:13:35:cc:bd:ba:84:d3:68:33:3d:79:f5:97:02:
         7b:5c:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:16:14 2025 by rpki-client