Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          Ux867lcRBovtGc+m8DGoQtACvKaNzgjUC1IJGDgOvXQ=
Subject key identifier:   0E:54:F3:3C:04:C0:23:19:27:BB:4D:95:86:FB:C6:15:26:71:91:3E
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       01975800322FF09B9954759C6535A10CB998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0D9B
Signing time:             Tue 10 Jun 2025 04:01:37 +0000
Manifest this update:     Tue 10 Jun 2025 04:01:37 +0000
Manifest next update:     Wed 11 Jun 2025 04:01:37 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: 2OmWqb9jcJT/ysTWi9A/fEBU6UjoaZpgfNl59Ib4xo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:00:32:2f:f0:9b:99:54:75:9c:65:35:a1:0c:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Jun 10 04:01:37 2025 GMT
            Not After : Jun 11 04:01:37 2025 GMT
        Subject: CN=0e54f33c04c0231927bb4d9586fbc6152671913e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:71:0d:c8:2b:bc:5e:ca:33:57:a0:d9:2c:
                    2a:2c:96:2b:5b:ab:d6:60:01:01:8e:56:34:cd:55:
                    74:9b:cb:bd:f1:9d:a2:6c:c2:68:84:3d:ca:ce:df:
                    cf:d2:dd:66:9a:bd:92:37:39:bb:07:a3:de:20:7d:
                    7e:09:97:0c:51:08:71:ab:9a:3f:36:e9:46:6a:5f:
                    5c:68:19:1a:fb:8f:65:11:f6:19:b3:f8:ec:a5:1e:
                    c6:9f:db:83:6c:90:5f:43:c6:7f:22:cc:73:b6:74:
                    b3:87:33:13:72:ed:9b:b8:86:30:a8:6c:90:03:a5:
                    61:86:ae:c8:ae:f7:65:39:37:43:82:da:ba:aa:21:
                    76:3a:67:c3:f5:05:d6:16:66:e7:35:db:86:9b:2a:
                    26:5c:ff:72:11:6d:87:58:f3:8b:cd:cd:2f:18:a4:
                    c5:02:36:82:34:96:39:22:1b:af:29:0b:8e:d0:2d:
                    ea:64:31:2c:25:c8:37:13:4e:17:c4:42:ba:b7:f6:
                    64:38:8d:2e:61:57:bf:99:c8:ec:71:a0:58:6d:7f:
                    d9:7f:5c:8f:e5:fc:eb:77:78:6a:0b:cd:d1:b6:5d:
                    c2:98:b7:91:f3:58:92:0f:93:38:a3:0d:51:86:11:
                    5a:e4:b7:bc:83:25:52:9a:40:c7:f8:c4:94:c8:a1:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:54:F3:3C:04:C0:23:19:27:BB:4D:95:86:FB:C6:15:26:71:91:3E
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:02:67:64:52:44:33:c8:09:7f:46:de:ec:32:40:ce:dc:
         78:11:43:ad:f9:bf:27:dd:08:81:a8:ef:ee:78:38:17:c3:40:
         54:52:50:52:0c:62:58:94:e4:f9:9a:6c:af:b3:19:63:8a:7c:
         95:72:df:fb:8e:bf:82:cf:55:e6:1e:91:3c:8f:49:95:d8:7b:
         79:74:a0:7a:ba:b8:85:9f:85:ab:0e:d5:58:76:1f:fa:a2:99:
         02:1f:07:af:ae:bc:27:e9:4b:65:66:ba:b5:c1:a6:68:7f:a5:
         61:f8:17:a9:4a:a7:cd:c6:8e:60:25:b9:9b:ee:d8:2f:aa:24:
         bd:49:75:cc:0c:8f:6b:e8:78:6d:ee:f3:76:ed:7b:48:7e:40:
         5c:82:86:be:e8:39:bf:28:59:7a:bb:1b:86:72:d0:d0:ce:54:
         f6:7e:58:7e:45:b1:14:a8:df:8f:d9:4c:de:5f:39:ce:c3:01:
         24:bd:68:a5:89:3c:6a:eb:b0:54:93:68:7c:05:03:c1:20:4f:
         9a:1a:85:61:08:50:18:e4:6a:81:ad:ac:e4:04:2a:10:f5:e8:
         a3:ea:2c:4c:92:b5:ba:4c:af:d2:c1:2d:c5:bd:c5:14:0a:6a:
         ac:ec:5c:eb:83:cf:5c:7e:c8:68:b0:c8:0c:75:ce:18:cd:a9:
         09:82:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:14:23 2025 by rpki-client