Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          T/NQFwq1Wwo/FvwJquUhmVdROmLj1Vmfm01vF3j5oNk=
Subject key identifier:   C2:89:6D:58:9F:94:67:36:15:95:FC:04:3B:C6:3B:68:32:D9:55:39
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       01976F2BB46537A0778176FFA202AF201620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          01D7
Signing time:             Sat 14 Jun 2025 16:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:24 +0000
Files and hashes:         1: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: DZ76SPM9fvAIcRhWlNzCyo+g3bcge1narly5Yyakta4=)
                          2: ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa (hash: KSKzI9P0WUD8e51fYFO9/Pub+6R71g7f3EQIV1FBw9c=)
                          3: PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa (hash: yqj+o3D869BdUEpdNxfbAfsWgWZ/Cc+Y5gzfpaAYQRA=)
                          4: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:b4:65:37:a0:77:81:76:ff:a2:02:af:20:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Jun 14 16:00:24 2025 GMT
            Not After : Jun 15 16:00:24 2025 GMT
        Subject: CN=c2896d589f9467361595fc043bc63b6832d95539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:d4:9d:58:79:aa:df:d0:3c:75:81:7a:21:
                    60:11:2b:28:24:5b:51:48:d0:89:44:c8:aa:dc:3f:
                    a4:b7:3b:69:39:09:30:f6:28:6b:25:30:29:b7:64:
                    fe:b9:b1:f8:2c:21:f9:2e:6a:c6:37:45:3c:80:c2:
                    6a:82:05:82:2d:3f:10:b8:b2:34:21:68:ab:79:63:
                    c7:8c:16:1b:2a:cc:ba:6a:f6:39:5c:d6:5e:09:bd:
                    89:b5:f7:b0:93:22:34:a5:c7:46:3b:b7:76:19:d2:
                    6c:01:1b:fa:eb:ac:72:e6:c8:64:24:ae:4c:81:fe:
                    45:52:d3:c7:fe:0a:39:c7:06:12:ca:9f:23:fb:e5:
                    bd:62:de:a9:a0:e0:c2:10:50:a7:d7:17:ed:cf:a4:
                    e1:44:4c:0d:87:4a:ca:9e:31:bb:90:1d:9f:c4:6a:
                    00:ff:90:78:ea:1d:94:bd:1c:de:84:64:0b:35:01:
                    a6:ca:a2:18:85:cb:45:af:ee:5c:54:d6:29:d8:ab:
                    ca:e6:d5:1b:05:0c:32:26:21:00:81:58:a4:af:6e:
                    94:04:ce:9c:cc:1f:ba:6e:94:a3:20:68:66:65:a4:
                    13:f5:b1:f6:94:58:1d:fe:cd:56:09:a7:80:c0:62:
                    29:ba:b0:3e:47:e2:82:62:84:b7:d0:39:c2:52:94:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:89:6D:58:9F:94:67:36:15:95:FC:04:3B:C6:3B:68:32:D9:55:39
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:ec:6f:52:f4:cf:29:fc:8a:80:3c:e2:2a:e9:02:4b:4e:
         b9:f6:9c:1c:c4:01:94:2e:c0:5d:c6:aa:4d:b7:a4:6e:f0:26:
         5b:19:a5:07:b1:c9:4b:c0:4a:22:7e:67:a9:8b:5e:2f:ea:71:
         b8:d3:72:95:cf:78:53:6a:8c:fc:6d:e6:b7:b1:62:38:15:11:
         37:f5:c8:e2:8b:6d:ac:55:f5:ea:b5:3e:09:06:97:5b:87:b8:
         01:e5:51:c8:75:19:67:35:a9:ce:96:ad:73:fa:5c:f3:20:ba:
         89:5d:10:e4:60:8b:56:7b:ec:22:d0:34:37:44:51:78:da:81:
         ca:83:4c:c7:d5:82:04:a5:b4:62:3c:e1:36:eb:22:bb:5a:be:
         57:81:a8:43:05:0e:f3:82:17:82:71:20:ca:af:10:e7:ea:60:
         e4:53:e8:33:a5:e1:16:97:d5:cd:1b:86:20:20:d6:9f:df:ac:
         26:4a:f5:d7:d4:83:43:fe:20:98:68:fc:ce:12:93:f0:66:5c:
         4f:66:52:99:cd:22:d6:5f:6b:36:81:b5:98:7f:1c:d9:d0:a2:
         e2:07:8a:18:0b:c7:0d:5e:f6:f2:d3:75:88:27:85:7e:4b:cc:
         24:2b:cd:e0:c3:c8:cf:49:37:87:09:3d:2e:0e:d9:ab:63:88:
         5b:68:b7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:23 2025 by rpki-client