Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File:                     eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier:          Pqb/vXSzWU2J4hMfdQpOO7rNSLo/Bjz+zDmYmt0emkk=
Subject key identifier:   97:55:C8:8C:59:59:6D:A7:0C:A9:4A:F0:CD:74:FA:2C:07:90:3E:D0
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer:       /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial:       0197470B9521634146F9AD24682F9B1E286C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number:          42
Signing time:             Fri 06 Jun 2025 21:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:30 +0000
Files and hashes:         1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: Iz0NoKisdgD2rHFDAnfdBXQalX2dGySSc9fPaCiHGLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:95:21:63:41:46:f9:ad:24:68:2f:9b:1e:28:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
        Validity
            Not Before: Jun  6 21:00:30 2025 GMT
            Not After : Jun  7 21:00:30 2025 GMT
        Subject: CN=9755c88c59596da70ca94af0cd74fa2c07903ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:df:1a:5b:42:11:3c:f9:b8:1e:4a:08:08:
                    10:f0:8c:38:d8:32:b0:c5:f8:45:2b:c2:b0:38:a8:
                    f2:3f:b5:00:29:17:fc:43:f6:4d:39:49:b2:b0:32:
                    38:cc:9e:55:f4:ea:f2:bf:77:80:b2:53:6f:a9:9e:
                    ec:e7:a3:5f:f6:f5:e6:5e:0e:eb:88:fe:83:1b:d3:
                    e2:98:17:c5:f7:6f:26:e8:a4:84:3e:98:71:f6:1f:
                    37:df:84:bb:a4:8f:bd:8b:aa:cb:77:07:31:2e:65:
                    0f:08:7b:9a:d5:39:b8:1f:bf:ee:67:d8:24:de:ae:
                    d1:49:cd:9c:e9:ea:40:b7:65:db:ad:c0:60:ad:d5:
                    62:fb:a4:16:f2:b0:4f:1c:02:5c:a1:5d:39:6a:3d:
                    92:72:b7:5e:25:0b:fa:17:81:44:79:44:90:de:fa:
                    ff:a7:1f:fe:e6:96:3a:71:a4:f5:4b:fe:cd:78:c9:
                    d7:91:ae:ec:4b:e8:f8:68:4e:2d:d2:e8:58:d9:b6:
                    99:ef:07:43:12:47:cd:57:4f:61:34:3b:d3:6f:c1:
                    07:51:3b:1c:1d:0c:0b:65:06:78:7b:ce:a3:60:57:
                    d5:84:a1:aa:0c:e8:d0:c0:6b:76:04:6d:88:a4:68:
                    8a:45:93:d8:f6:8b:33:46:9a:b9:53:eb:9c:4e:b2:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:C8:8C:59:59:6D:A7:0C:A9:4A:F0:CD:74:FA:2C:07:90:3E:D0
            X509v3 Authority Key Identifier:
                keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:ae:02:da:fc:43:03:fc:6a:ae:93:4e:63:df:aa:02:c0:
         42:95:34:de:65:b9:2f:46:82:19:3f:e9:56:29:9c:fd:ed:32:
         91:44:4c:f7:8e:08:b5:12:65:bd:a8:7b:ea:71:d5:07:0d:f2:
         ab:a9:37:4a:db:aa:b7:01:80:ef:ac:39:56:d8:d4:22:97:e6:
         22:f7:23:e4:13:c1:0b:1e:d9:c5:cc:5f:49:72:fb:4b:12:a5:
         30:0e:20:d1:5d:24:dc:09:a2:f6:77:a3:52:b1:da:0b:d2:0a:
         00:c9:7a:eb:60:ad:66:85:70:d0:ab:9d:d6:bb:58:55:5a:51:
         ec:ce:e1:55:8a:f9:c1:f7:c5:43:5c:03:18:35:ab:c1:6e:9b:
         25:3b:fe:85:1f:5b:1f:5c:51:08:74:a9:b3:fb:1a:63:61:f1:
         61:a3:47:f2:c5:8e:a6:f2:fa:06:42:92:5d:b4:a2:36:0e:5f:
         a9:ee:ac:cb:fb:28:5e:40:21:05:b6:f2:ec:fa:9a:24:dd:ac:
         0c:67:9c:6f:01:e0:f1:bd:e8:e6:5b:4f:72:93:ec:f8:62:84:
         0d:0c:43:0c:d1:a3:47:7c:b2:51:f1:a6:57:e3:14:9d:b6:ab:
         64:f1:12:a3:e4:2e:22:97:9f:6a:f6:19:f0:70:1d:50:c2:09:
         46:ba:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:08 2025 by rpki-client