Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File:                     gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier:          LOtZAj/M3oL/dNax0Qo8VzUe1Fbxz3GXG13CxJ+3geM=
Subject key identifier:   5B:22:01:A7:72:9A:4B:90:70:54:A5:7B:08:DB:02:F9:FB:4F:66:B1
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer:       /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial:       0197722D1EE4963031FE7A37EABCEA599573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number:          0964
Signing time:             Sun 15 Jun 2025 06:00:49 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:49 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:49 +0000
Files and hashes:         1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: n8wAUxFyozetKGDgtT8Tk0vO2vxZat0WYgPgT1QaYxo=)
                          2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:1e:e4:96:30:31:fe:7a:37:ea:bc:ea:59:95:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
        Validity
            Not Before: Jun 15 06:00:49 2025 GMT
            Not After : Jun 16 06:00:49 2025 GMT
        Subject: CN=5b2201a7729a4b907054a57b08db02f9fb4f66b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:14:ce:5c:66:36:e9:a2:f1:3b:81:0d:77:
                    52:d7:2a:cd:c2:89:4b:ff:5a:2d:b6:d5:5c:d2:a5:
                    36:6f:57:1e:5e:78:b4:02:8a:77:c7:78:c5:34:9e:
                    a3:23:b0:70:46:37:57:88:0a:92:63:06:53:4f:83:
                    64:8d:56:87:d5:04:a3:be:20:ed:fb:e4:5f:07:9c:
                    d5:9b:97:2a:d3:b4:90:6e:8e:18:65:9e:3a:30:f4:
                    c6:ed:64:c1:32:75:66:16:b1:14:70:b1:7a:51:3e:
                    2d:49:2f:dc:62:d5:4a:c0:d8:a7:d4:59:4f:e4:4d:
                    9b:27:b2:5b:63:61:82:bd:b6:b5:1d:c4:84:25:c5:
                    6f:ed:a9:e5:88:03:3a:77:d7:c9:f3:50:91:8f:c5:
                    5d:dd:47:52:71:44:65:29:33:5b:75:dc:f6:98:b2:
                    46:7f:69:11:72:a2:e8:d6:8c:58:e7:94:2e:1e:61:
                    ce:75:01:f7:5b:7d:31:af:6b:be:39:6f:89:72:e1:
                    a6:24:58:e7:5f:2d:33:bd:02:0e:75:d6:7f:ab:9c:
                    10:f4:c9:ac:21:a3:f6:e5:bc:88:43:d5:5e:59:50:
                    49:a0:93:94:84:e8:83:63:06:19:ea:9e:51:fc:d7:
                    01:28:00:83:2b:81:11:fe:0a:fa:a6:b3:e2:e6:08:
                    ba:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:01:A7:72:9A:4B:90:70:54:A5:7B:08:DB:02:F9:FB:4F:66:B1
            X509v3 Authority Key Identifier:
                keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b4:2e:e5:23:25:c8:4e:77:bb:1f:e4:d7:33:81:ce:81:ab:
         77:fa:9d:b6:95:27:c7:73:5b:6f:ee:3b:86:24:73:ca:4b:5b:
         bc:b5:1a:9e:f3:2f:87:01:a7:3b:21:77:65:41:bb:b4:13:47:
         1d:72:c3:53:38:4e:b5:bb:71:cd:8f:7f:34:9a:e2:52:37:1e:
         d0:20:ab:3a:45:94:1b:f5:9a:af:d7:f4:4b:62:2a:80:c0:5f:
         78:62:dd:e8:31:2e:e9:94:84:d8:51:03:9c:cb:2a:c4:c0:38:
         20:10:f4:6c:73:ca:0b:d0:cc:91:eb:26:a4:16:2d:ba:3f:17:
         12:e5:56:1b:a3:fb:9e:6d:89:b9:09:cc:a0:fa:d5:44:9c:41:
         52:c7:29:93:a8:e4:93:20:8a:90:2b:f4:f7:60:01:d4:3d:7a:
         43:a8:01:3d:76:15:2e:1e:cf:26:9f:b5:88:b7:22:45:f9:6d:
         db:12:0d:7b:c0:7d:84:16:2e:d6:fa:27:99:bd:f1:68:3c:73:
         ed:8b:15:e2:b7:ed:c8:a3:70:21:ce:0f:3f:bf:ce:c4:52:f5:
         aa:d6:ee:41:15:6c:27:c7:2c:d7:8e:ea:25:38:a2:8b:87:c0:
         fb:a3:c1:10:b1:43:b4:23:38:aa:34:5c:a9:6c:a6:c3:21:4d:
         ab:a1:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:37 2025 by rpki-client