Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File:                     EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier:          8BIv6kLP7Crm/dsqXMOlFKVdST+PxXgADy9gbH0upL8=
Subject key identifier:   ED:E4:5D:56:C9:C9:3E:CE:20:C7:B4:D2:99:56:82:55:24:54:D5:5D
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       01984966866573486C1E9EB0A72E8E29DFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number:          0CE9
Signing time:             Sun 27 Jul 2025 01:01:52 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:52 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:52 +0000
Files and hashes:         1: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: ul3TlCzGh2h+1t4/Mz/2+iiZ0lVIlmVCd5Q5gal5MBM=)
                          2: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (hash: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=)
                          3: RArINz0YD-h2_8foRhBrlcIVL0Y.roa (hash: q/5avSOefV4RUqs3homJnrmXlOea+3kRE2If6GjN/D8=)
                          4: bMZAGJiSL37RYjG0omxqUzfw6RQ.roa (hash: GC8GdghFTzQFHElrcSiH/7+b0UQBvz9Pyt1qThrmjO4=)
                          5: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (hash: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=)
                          6: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (hash: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=)
                          7: p1DQi1u18C75Ohux7URg7YfrGs8.roa (hash: INt16ax1DFlOoo29QJUQDnOPGS2CLSORfkcRk285y/0=)
                          8: xEHBG-sDPVKJ9XXxM6Z9mKuo0U0.roa (hash: G3jD6yODhofSNU3PUJZMmjQCNj42WLMnZ0Laof6Aj28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:86:65:73:48:6c:1e:9e:b0:a7:2e:8e:29:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jul 27 01:01:52 2025 GMT
            Not After : Jul 28 01:01:52 2025 GMT
        Subject: CN=ede45d56c9c93ece20c7b4d2995682552454d55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:1a:29:e4:13:42:1f:ee:77:58:59:49:d8:
                    85:0c:f6:6a:ca:82:21:4a:fb:b8:88:d8:04:a9:bf:
                    c8:9e:40:b2:2b:d2:b1:da:35:5f:59:f6:80:22:a8:
                    ce:c6:f9:b1:6e:0f:f1:b3:bf:f4:70:87:7e:56:7e:
                    5d:81:ce:95:f7:d3:46:e6:43:b2:d2:92:04:40:b8:
                    11:06:66:e0:7a:33:ca:43:b0:e4:70:ce:a8:d2:6a:
                    d6:77:86:ab:fb:1f:8b:30:f9:e2:6d:17:2a:a2:9b:
                    d1:8d:ac:43:a0:0f:87:2a:82:f2:b9:8f:59:cf:dd:
                    80:95:a2:9a:a6:60:76:b0:a1:4b:cd:64:84:6b:24:
                    4d:69:30:96:86:5f:b3:b9:b1:40:58:0c:3b:5f:91:
                    17:e6:75:a9:7a:8b:0a:2d:65:20:87:dd:eb:57:a7:
                    c4:2d:13:6f:4b:ca:27:4f:2a:e7:b1:92:c2:e6:e0:
                    a4:dd:e7:3a:85:4c:82:72:99:5d:26:7f:f6:15:e9:
                    a3:e2:40:b3:cf:23:dc:e5:b7:15:da:11:4e:7d:7a:
                    c7:b4:05:a2:a3:e8:fa:a6:a5:52:d0:70:df:08:33:
                    77:c1:62:12:49:d5:50:68:f6:93:d7:52:6c:84:d3:
                    83:d2:7b:72:3c:5a:41:5d:49:30:c3:43:87:5c:ba:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:5D:56:C9:C9:3E:CE:20:C7:B4:D2:99:56:82:55:24:54:D5:5D
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:2f:7f:87:a9:ce:5e:fc:4e:bc:3d:0b:2f:4c:45:ee:1c:
         3c:88:c5:63:6d:8b:7e:b9:5b:62:24:20:fc:d1:50:74:1c:8d:
         2a:92:54:a5:a9:d7:3d:6e:fe:ca:d9:72:25:85:91:78:9a:98:
         88:14:50:95:69:1f:69:e4:e5:0d:78:66:e0:66:68:6a:2a:0c:
         39:11:42:6e:9c:72:02:74:95:26:f4:f4:d4:48:c7:2a:fb:f1:
         bd:e2:30:47:21:47:85:ea:81:6c:bc:00:2f:42:2e:70:10:a6:
         4e:fa:70:39:4f:f9:c2:e4:fe:bc:93:0d:ca:37:ea:02:45:2f:
         85:f6:ad:d4:af:06:84:24:e1:1d:8c:e9:f5:58:7c:90:8f:ea:
         2e:f0:3e:d9:7c:ba:c4:34:fe:43:26:b1:52:85:7a:90:73:59:
         b8:ae:0a:de:b7:09:a6:c9:a7:d9:0b:16:5d:30:de:bc:8c:59:
         e5:b3:25:f9:93:33:bd:b9:c9:0d:b3:ef:bc:e1:a0:6e:7e:38:
         ac:78:72:ba:68:11:b6:e0:1c:c5:9a:43:64:87:f5:3f:c9:a7:
         4a:a5:f3:80:05:2a:66:75:37:d2:1a:54:18:70:d1:20:6a:81:
         e1:b8:44:13:21:46:5e:be:34:96:6d:36:43:af:44:48:7b:75:
         9b:80:ad:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:15 2025 by rpki-client