Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          doEyFrYEXIMM1pf6/5d6ObYEWMD9ArTGBuSH273sE7M=
Subject key identifier:   D7:A1:D5:3F:01:E4:71:86:04:47:8F:C1:9D:04:E7:6D:19:6A:B0:2C
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       01976F62AEB111D4CF935376EEE2058298A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          1521
Signing time:             Sat 14 Jun 2025 17:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:27 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: OT47aMXmV4yeDpDgxPz2HgGS/PacuwJIREJLND7+m7k=)
                          2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:ae:b1:11:d4:cf:93:53:76:ee:e2:05:82:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Jun 14 17:00:27 2025 GMT
            Not After : Jun 15 17:00:27 2025 GMT
        Subject: CN=d7a1d53f01e4718604478fc19d04e76d196ab02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:f7:51:4d:a6:9d:11:31:57:31:69:ac:f1:
                    37:04:96:49:b9:35:f3:1f:6d:c6:25:8e:50:da:ba:
                    ed:75:78:ee:e3:b4:e8:49:4d:91:33:7d:e6:70:1b:
                    40:19:2c:e1:a0:51:f9:19:62:c7:7f:de:01:41:61:
                    01:15:e0:f7:cc:88:6b:70:31:af:63:3c:33:1b:5a:
                    b7:38:be:c8:56:e8:f5:b4:b9:25:a2:94:5a:9c:6c:
                    d3:5a:b1:45:3f:25:b2:f9:e7:08:96:a0:c2:e2:cf:
                    37:0e:99:a2:e7:2b:cd:65:82:7d:10:5a:f5:95:79:
                    50:b4:72:5d:02:99:99:93:61:da:a7:21:1b:ea:70:
                    bf:9d:d8:81:32:96:49:b5:c3:97:eb:37:c6:02:eb:
                    f6:e2:56:ac:f3:49:8c:a9:9e:4a:12:05:03:0e:7e:
                    3e:1f:68:cd:a3:bc:d1:a9:a3:89:94:08:7d:bb:8a:
                    ae:da:cf:b3:de:49:46:de:68:ed:11:1c:04:fb:44:
                    23:c1:c6:5a:04:d1:6d:f3:2e:05:f0:a9:41:e3:6b:
                    0f:d6:01:70:ef:e6:42:04:13:0f:eb:1a:ca:04:35:
                    95:4e:65:56:a8:e3:84:96:93:fe:fc:77:39:da:27:
                    65:75:b8:4c:29:15:18:6b:43:0c:c4:34:d8:5a:01:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:D5:3F:01:E4:71:86:04:47:8F:C1:9D:04:E7:6D:19:6A:B0:2C
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:30:7e:05:0e:76:82:ca:7d:89:66:10:88:82:e3:19:a0:65:
         d0:3d:e5:91:5c:c1:b1:5c:bc:f5:60:ca:14:78:cc:49:ec:5d:
         1f:46:5b:db:44:48:74:12:49:db:60:51:f7:c4:43:5f:c9:dd:
         12:c9:5a:ad:64:34:d9:63:e0:98:ef:9a:01:50:97:ff:43:ee:
         0b:c3:40:c6:a3:fc:39:8e:8e:66:e2:3b:87:41:c1:81:d4:fe:
         29:c4:f1:72:c9:92:17:cf:80:5d:1f:6b:26:24:c1:8f:5b:5d:
         e9:5a:67:4a:22:eb:1d:77:c4:16:5e:81:79:dc:79:a9:2f:94:
         00:84:dd:1b:60:5f:da:e0:21:cf:e6:63:0f:8c:dc:02:78:88:
         af:07:21:c1:ef:36:ec:a5:43:47:a1:ee:2f:38:c5:8d:b8:84:
         71:1d:94:02:84:64:cb:20:c9:2f:ae:14:a1:25:41:10:31:58:
         6c:d3:9b:09:6f:4d:25:7a:d1:eb:fa:b0:52:6f:05:65:e0:9b:
         af:4c:2d:55:ca:c9:48:2d:24:ee:ad:f7:b0:41:73:c3:66:b7:
         3c:85:7d:2b:25:49:ed:8f:87:d7:c9:f1:89:35:25:31:6a:4e:
         32:cd:80:7e:3f:ee:77:90:93:32:3f:89:b2:b0:33:80:81:bd:
         49:01:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:55 2025 by rpki-client