Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          2VuEZ2cMeNJSURbstdFlaJ6vyj46yaICN8sqao5Xmr8=
Subject key identifier:   00:40:FB:E1:3F:99:0B:FB:F9:8B:66:10:F7:F4:38:1C:22:78:63:4B
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       019773ADDE65DC78E1E5D787DD10D5A786DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          0394
Signing time:             Sun 15 Jun 2025 13:01:03 +0000
Manifest this update:     Sun 15 Jun 2025 13:01:03 +0000
Manifest next update:     Mon 16 Jun 2025 13:01:03 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: s1P58ohVdtVzwW6j8e4RPQw9b4PIURC0kzfNVR9pHIs=)
                          2: qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa (hash: 8gjFPbJW7dVwtI9fHswSjjysn5cF6HSMFKylRSUUDrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:ad:de:65:dc:78:e1:e5:d7:87:dd:10:d5:a7:86:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Jun 15 13:01:03 2025 GMT
            Not After : Jun 16 13:01:03 2025 GMT
        Subject: CN=0040fbe13f990bfbf98b6610f7f4381c2278634b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:25:5a:c5:79:b1:7a:13:a9:72:03:cf:84:
                    2d:68:f1:59:a8:13:c3:e9:7e:c8:f5:57:21:9f:b6:
                    5f:41:ab:1d:9f:3f:d1:b6:55:42:82:ab:1f:1a:4f:
                    a1:a4:cd:7d:96:be:e1:8d:99:72:c5:9c:23:54:ca:
                    ab:d2:fa:4f:eb:61:00:96:01:86:ab:6f:92:70:83:
                    23:13:e1:eb:59:f9:c2:0f:86:a9:23:e7:eb:30:f3:
                    fb:ab:7b:92:90:43:08:87:36:ed:7e:1f:f2:83:c5:
                    84:ef:2d:c0:bb:98:3b:2d:c1:2b:3c:c6:3d:5e:3c:
                    27:5b:0d:1d:18:8e:4c:3a:33:e2:2f:aa:2a:53:fc:
                    b9:cc:ab:85:5b:36:b1:60:5c:d0:b9:89:0d:9f:a3:
                    e8:ef:d9:48:86:2c:63:5d:5a:e0:e9:7d:56:13:dc:
                    50:68:de:21:be:ff:a1:d8:61:e0:55:2b:89:f0:e9:
                    3d:5b:d4:36:c5:65:48:6c:0d:68:50:ca:f0:4a:45:
                    41:6f:66:5d:1b:73:be:01:30:64:21:1d:1e:d0:a2:
                    81:95:35:ab:0f:f2:4d:01:60:d5:8a:b9:a8:b3:9d:
                    fb:52:b1:ca:ec:0e:45:4f:68:c9:92:40:d0:26:4d:
                    2a:83:2a:92:94:2d:7a:43:17:99:b8:de:c3:16:fd:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:40:FB:E1:3F:99:0B:FB:F9:8B:66:10:F7:F4:38:1C:22:78:63:4B
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:45:30:70:1b:c7:2b:86:e5:20:d4:2d:0a:39:26:ae:b4:48:
         11:54:89:0f:b3:17:d9:29:68:24:17:55:31:ce:28:0b:1d:d0:
         bf:1f:87:5e:3a:b3:b0:ae:8e:5c:74:6c:0a:4e:77:c9:e7:c4:
         de:9f:ee:eb:55:6d:2b:90:8f:49:b4:aa:d2:c0:2c:be:1c:1c:
         d2:88:a7:66:2b:67:1c:de:3c:61:4a:db:cb:0d:7a:a3:11:41:
         17:74:d4:f9:15:01:29:5f:96:6a:85:a0:57:ba:b5:40:68:e8:
         7c:2a:23:1f:a1:56:84:dd:9b:85:ea:6e:f5:36:4f:f7:a8:b3:
         ec:08:1e:b9:29:cb:a1:13:9e:8a:3d:d2:a0:c4:56:74:bc:09:
         1e:9f:3f:55:78:98:1f:d6:26:ab:7a:3b:a6:37:7f:69:55:74:
         53:c7:ec:9e:da:0b:3b:28:2f:41:0f:18:3a:cb:04:63:84:d9:
         c6:06:47:1b:e2:34:21:ff:7d:10:d5:4a:7f:35:3a:8e:98:e1:
         9d:35:de:0a:d7:db:ec:9a:d3:d2:75:e1:5f:ab:f6:bd:57:d0:
         fe:4d:ed:4b:2f:70:ad:02:f3:26:e0:d1:26:2d:e7:13:b5:00:
         05:6d:35:86:80:d8:f2:ec:0b:eb:bf:cf:08:d0:0b:5f:1d:f4:
         20:37:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:40:18 2025 by rpki-client