Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File:                     e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier:          CjKQ7oHs5FkarYDb2haHd3FHI0A4Ybs/43izfBaMa3A=
Subject key identifier:   7A:FE:79:E0:F4:B0:7F:11:D2:1B:85:B0:13:5E:42:23:7D:88:C8:4D
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer:       /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial:       01977753818AAC31FB4AD4604E685D05DA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number:          1524
Signing time:             Mon 16 Jun 2025 06:00:50 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:50 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:50 +0000
Files and hashes:         1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: YWxtf/ScZMMEJzi7vupzopO3FnHbJqGP+4JlVZdTMzY=)
                          2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:81:8a:ac:31:fb:4a:d4:60:4e:68:5d:05:da:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
        Validity
            Not Before: Jun 16 06:00:50 2025 GMT
            Not After : Jun 17 06:00:50 2025 GMT
        Subject: CN=7afe79e0f4b07f11d21b85b0135e42237d88c84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:e1:50:f1:bf:8c:dd:f7:1c:0d:32:04:02:
                    bb:94:69:7b:18:5b:25:5f:1d:f7:9c:39:8d:1e:05:
                    ea:c2:89:b0:07:39:4a:5b:40:52:3b:4b:a9:61:b6:
                    8a:c7:41:b0:b5:d3:93:b2:c7:19:57:88:ac:28:31:
                    c7:27:e3:dd:2a:67:53:d7:05:c3:d9:01:53:93:4a:
                    d3:1b:58:41:ce:2f:c3:dd:1f:08:73:bf:07:0e:e4:
                    61:9f:69:e6:35:7a:5c:cb:5e:72:ab:b4:c8:d8:c8:
                    a7:6b:4a:d4:59:45:01:d2:b3:ef:97:98:9e:65:1c:
                    d7:c3:58:b4:8c:09:94:d5:4f:5c:42:4c:d3:ef:ec:
                    f0:94:c9:2b:a3:6d:d4:02:ab:a1:72:9a:71:63:a2:
                    56:26:dd:5f:8e:5a:11:2d:1c:46:ea:60:44:1f:09:
                    a1:54:1d:f5:04:91:09:36:e5:27:89:ee:5b:07:30:
                    9c:54:06:82:30:4b:9d:66:b9:1d:1e:26:c1:68:53:
                    56:ca:5b:1c:7e:9c:59:ac:8f:b2:83:42:b0:14:cc:
                    5f:e8:71:3e:6f:72:eb:1e:57:fc:f3:3c:18:4d:f3:
                    0d:12:ce:05:09:6f:71:99:d3:96:88:ae:a1:d2:0e:
                    ae:61:2d:7f:cb:6f:e7:9a:ef:da:c9:0d:2e:8f:7e:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FE:79:E0:F4:B0:7F:11:D2:1B:85:B0:13:5E:42:23:7D:88:C8:4D
            X509v3 Authority Key Identifier:
                keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ee:71:05:f2:9c:6d:ec:4c:41:57:5f:61:b7:e3:90:18:ce:
         25:33:34:c1:72:b9:1f:04:bb:17:43:55:79:3b:d9:1a:3d:32:
         33:2a:65:50:4b:21:49:50:96:f3:05:b9:9d:01:45:63:22:dc:
         50:e8:26:5f:c5:01:40:7b:7a:2c:0a:e6:aa:f5:18:25:d3:fc:
         f3:dd:68:3c:b6:dd:4e:82:1d:5b:43:4f:a0:a7:1f:5e:b5:13:
         c3:bc:8f:6a:59:e7:f6:13:ba:5c:99:83:c5:6e:4c:27:f6:12:
         d7:66:ce:26:b0:42:88:8f:20:79:9b:dd:fc:cd:7b:35:6b:91:
         23:d5:32:20:c3:8a:5e:d9:7f:b2:16:58:46:af:84:08:fa:83:
         ff:01:28:f7:aa:d6:8a:f9:39:0a:c8:77:22:69:a4:ca:60:93:
         a3:46:c2:87:e3:4d:71:09:51:d6:91:dc:6e:57:d2:eb:5a:69:
         00:a1:34:40:13:ef:8b:1a:42:8b:44:87:52:65:6e:b7:32:00:
         4c:70:4b:90:9f:41:5a:74:24:c3:89:c3:c1:7d:20:95:dd:4b:
         a6:57:d0:97:e1:7d:0b:6a:ab:27:36:89:dc:33:c6:92:9f:a0:
         71:5a:dc:cb:82:ea:48:ab:a4:d7:1d:4a:93:d5:c8:6a:2f:31:
         e6:16:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:24:12 2025 by rpki-client