Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File:                     z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier:          dEHkmVfLXvsaZXkIg58vgqAl4Ex+bW8VwpoeVd5dtFA=
Subject key identifier:   E8:5F:CD:79:E8:7D:96:9B:38:F7:40:AC:14:56:3E:3A:F0:CD:17:07
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer:       /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial:       019776E6A5F332AE5A39DE8932E34F949469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number:          1145
Signing time:             Mon 16 Jun 2025 04:01:56 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:56 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:56 +0000
Files and hashes:         1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: k2Yxy0s/u+2yYjFICfDALmHAxXo5+DdfvajuUagg8cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e6:a5:f3:32:ae:5a:39:de:89:32:e3:4f:94:94:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
        Validity
            Not Before: Jun 16 04:01:56 2025 GMT
            Not After : Jun 17 04:01:56 2025 GMT
        Subject: CN=e85fcd79e87d969b38f740ac14563e3af0cd1707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:c7:cf:51:f9:61:93:4f:65:4b:ac:05:f7:
                    e2:18:09:88:9c:ad:23:ea:ae:ff:44:be:13:60:3e:
                    f2:cd:d6:1b:57:14:71:af:79:bd:8c:b8:cc:07:89:
                    a8:2e:06:45:20:da:7e:90:e6:94:93:ce:d4:10:55:
                    dd:bc:b9:bd:7b:f9:f3:1b:7b:63:ae:89:8c:8b:39:
                    15:eb:01:0c:64:aa:6d:a9:77:2e:7f:a9:d7:11:ee:
                    f1:dd:83:2e:8a:8e:55:b0:c6:ed:d9:7e:b4:e9:31:
                    fe:70:86:ef:4e:f9:05:79:ea:d5:ee:7c:df:b6:54:
                    38:9f:ed:f5:76:4d:b8:b1:47:27:6d:4f:08:6e:c8:
                    c2:cd:9e:39:64:82:ed:2a:10:14:5b:57:1e:f7:2d:
                    f2:34:0d:96:95:df:a8:18:6c:01:e8:2f:48:ab:e3:
                    87:07:ec:35:eb:95:4a:a7:cc:ed:7c:37:15:00:b7:
                    19:4e:3a:1c:2a:0a:7d:b2:cb:17:5a:98:26:17:85:
                    45:16:a8:19:6a:3b:57:90:ad:c6:31:f8:36:29:13:
                    77:25:81:ff:af:08:09:0b:49:59:5f:67:10:43:53:
                    0c:3d:c8:3c:44:60:1b:70:7a:0e:9c:14:34:27:60:
                    b2:30:76:e3:ad:65:e6:bd:48:d7:ef:15:47:a6:af:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5F:CD:79:E8:7D:96:9B:38:F7:40:AC:14:56:3E:3A:F0:CD:17:07
            X509v3 Authority Key Identifier:
                keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:08:66:56:f5:cf:22:34:89:ab:ab:55:fb:8e:38:34:2c:08:
         9e:17:12:ce:15:0c:38:8d:60:4a:26:22:ce:ac:c7:5d:8a:51:
         28:67:27:38:9a:7d:b2:7b:32:eb:9e:41:0e:84:38:ff:87:f7:
         b5:e8:b0:7d:c3:48:2b:b3:24:6e:78:7a:1d:18:71:61:43:82:
         51:19:67:8f:b0:d9:92:79:13:35:91:07:80:d0:a7:58:85:55:
         46:db:e8:f1:75:c8:56:72:01:8e:21:14:68:3a:bc:47:e4:f1:
         fd:9d:b4:cd:ca:54:d7:22:2d:d5:a2:d6:04:85:7f:8e:64:50:
         97:b1:d3:05:d6:bc:20:c2:5d:15:0f:10:ce:8f:61:bf:5d:a7:
         87:6a:6a:d6:84:12:c4:99:72:60:60:8c:d0:28:dc:fb:b3:51:
         e4:2d:2f:c7:7a:57:fe:01:39:63:78:04:a4:ec:4a:2f:36:43:
         58:df:04:3d:ef:0c:be:01:48:2c:ce:6f:ea:8b:dd:ac:18:80:
         42:6f:b5:c3:06:bc:31:14:82:3f:b5:5f:46:0e:39:c1:e8:aa:
         42:d0:fd:23:0f:c0:8b:1e:24:07:85:15:f6:f2:d3:c9:4c:26:
         b0:bc:31:e1:e0:7b:e1:35:f0:65:26:6f:49:a6:33:aa:77:a3:
         ac:43:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:10:00 2025 by rpki-client