Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File:                     IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier:          jh4JvQ1oeiMRhtixH1fY2uiTr6o9EQqdwgAJAFODotY=
Subject key identifier:   52:91:72:26:86:C5:E9:45:50:F2:8E:20:7C:48:45:EA:A0:A1:7F:71
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer:       /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial:       01976C2B1098609E1C8672D2631997E1A93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number:          063C
Signing time:             Sat 14 Jun 2025 02:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:50 +0000
Files and hashes:         1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
                          2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: 42I+PV9y9UE/BIWt5WRioJ4xM1RUL14TP8+87enyriI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:10:98:60:9e:1c:86:72:d2:63:19:97:e1:a9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
        Validity
            Not Before: Jun 14 02:00:50 2025 GMT
            Not After : Jun 15 02:00:50 2025 GMT
        Subject: CN=5291722686c5e94550f28e207c4845eaa0a17f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:f2:81:ac:93:6e:7a:91:d5:34:b3:b9:96:
                    c7:c7:87:24:23:88:64:46:7a:5a:2d:c2:ff:56:5d:
                    8b:96:f6:84:94:c3:94:35:4f:9a:33:51:9c:38:3a:
                    88:aa:2e:26:fb:d1:be:3a:c6:14:eb:e0:a9:f7:05:
                    7d:e4:1e:2d:0a:91:69:ad:f4:d9:0b:34:28:61:b6:
                    6f:2b:18:aa:68:2c:0e:2c:7c:52:37:ad:76:9e:e6:
                    5a:d0:80:0a:71:7c:dd:10:85:0e:fa:3c:5e:ea:e1:
                    42:a0:91:ca:b8:7d:2d:39:6b:7b:34:a1:d6:39:51:
                    dc:20:9a:07:38:0f:88:45:2e:c1:8a:7d:d0:01:7f:
                    a7:ea:6e:ab:5b:37:3a:65:81:7c:ac:8d:d5:29:bf:
                    13:d3:f3:2b:fc:2b:41:d8:a8:f6:54:d0:bd:d7:c6:
                    5a:4a:17:ac:b7:ae:da:02:73:3e:04:2b:b0:b2:5c:
                    61:75:13:60:51:19:a6:5a:f7:ff:3a:29:e7:8c:5c:
                    97:df:52:32:6d:11:30:fc:93:2d:6a:5e:9a:f0:ae:
                    cc:1e:f3:ac:4e:13:1d:16:e7:d0:8b:85:61:a9:e7:
                    32:b7:56:b3:56:01:8d:e3:c9:d6:65:0c:25:79:c1:
                    d5:ee:30:c9:eb:7b:12:33:75:a2:b9:d6:76:c4:e7:
                    20:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:91:72:26:86:C5:E9:45:50:F2:8E:20:7C:48:45:EA:A0:A1:7F:71
            X509v3 Authority Key Identifier:
                keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:52:25:b4:9f:64:4f:27:6e:68:cf:9b:00:44:8e:64:20:
         72:f5:6e:a2:e7:07:8c:04:eb:5d:ce:03:a1:dd:83:b2:b7:66:
         fa:cf:fc:74:ff:fd:a0:49:95:75:e3:76:8c:a3:9d:de:c7:70:
         60:0c:47:4c:26:84:d9:c3:07:16:cb:a2:80:84:4a:18:fb:25:
         bd:84:59:4c:97:51:a0:8e:cc:f5:fa:f2:e6:7d:60:60:50:b0:
         2f:cc:4a:c5:9b:0c:2c:f7:9d:73:d6:4d:d7:71:56:d3:94:5c:
         a7:ea:45:c7:50:45:ef:55:94:dd:b0:63:99:a1:ad:9b:3b:2e:
         0c:29:dd:22:f8:66:49:0b:fe:7c:8c:aa:02:b3:57:15:cf:92:
         7f:79:3a:27:fe:e1:f5:37:cd:f5:e0:52:e6:17:cc:47:79:55:
         23:ce:af:3e:c8:5f:9a:c1:9f:f8:35:dd:03:2a:b0:ec:ee:b0:
         3e:2c:89:ca:b3:80:65:a3:73:0f:0a:bd:4d:81:8b:f1:08:e6:
         49:72:75:ea:b7:6b:f2:67:20:d7:f5:ed:60:77:0a:c3:46:ec:
         43:b6:2a:96:16:b8:11:d3:5f:7f:33:fb:6b:e7:da:24:16:d9:
         71:7e:1c:cf:3e:cd:21:4f:91:4c:ac:5f:a4:d0:99:c7:43:88:
         c0:7b:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:46 2025 by rpki-client