Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
File:                     eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json)
Hash identifier:          faTd53fWWsKfSgVvEoz2Nb1moCMN9PannhCw7OD/Y8U=
Subject key identifier:   DB:E1:2A:09:AD:A1:8B:81:26:A7:7A:A2:CF:14:3F:90:B2:97:C3:BA
Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Certificate issuer:       /CN=7b243b732e564690482cc825199f8b591b01f6f2
Certificate serial:       01974A7B7D084C005C7BE080F2515B35E618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
Manifest number:          1120
Signing time:             Sat 07 Jun 2025 13:01:36 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:36 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:36 +0000
Files and hashes:         1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: f9LoYGTHSqAnNgMDCiThiw05RWh7lhrDCyxnH/6KSbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:7d:08:4c:00:5c:7b:e0:80:f2:51:5b:35:e6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2
        Validity
            Not Before: Jun  7 13:01:36 2025 GMT
            Not After : Jun  8 13:01:36 2025 GMT
        Subject: CN=dbe12a09ada18b8126a77aa2cf143f90b297c3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:d2:38:1e:49:a0:13:e9:2e:eb:4a:5a:02:
                    a3:c2:ca:0f:75:eb:23:61:ea:7b:0b:d8:e1:f2:61:
                    22:37:41:2f:9f:fe:bb:83:60:1c:32:62:b6:5a:bb:
                    63:2a:90:71:4f:49:c0:f4:ca:40:6d:ce:40:6a:32:
                    55:fd:e3:8c:da:3a:72:58:b2:b4:e4:47:b7:10:a4:
                    17:90:45:5c:81:53:7d:9c:ea:c9:08:80:90:e8:e5:
                    aa:97:11:71:f7:ec:65:29:ce:e3:74:53:38:ae:1f:
                    05:89:b9:45:72:b8:a3:53:9a:36:64:4b:94:ab:c2:
                    67:df:3f:ac:ef:7c:8d:90:26:91:d2:3d:75:8e:84:
                    50:f0:79:bb:e5:32:14:ae:35:b4:e2:6c:32:2b:88:
                    9b:34:58:55:99:c4:82:78:41:ac:51:46:b3:bc:62:
                    68:92:30:2b:14:b3:23:6c:7b:18:3a:51:c7:a4:b5:
                    67:66:8c:83:ca:f2:1d:80:20:04:f2:60:7d:c3:9d:
                    e0:48:ce:aa:11:03:74:b1:8c:68:ab:be:ca:bf:5d:
                    db:f1:ef:a1:01:47:fb:46:9e:7d:29:8e:61:2a:17:
                    42:05:23:7f:b3:f3:c9:44:ec:fa:7c:ee:04:2a:d0:
                    dd:8c:c3:de:3c:cc:7e:95:65:5d:25:40:0d:37:9f:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:2A:09:AD:A1:8B:81:26:A7:7A:A2:CF:14:3F:90:B2:97:C3:BA
            X509v3 Authority Key Identifier:
                keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:43:a8:31:64:fd:2a:1e:cc:81:84:4f:88:16:b1:96:ea:57:
         03:82:ce:32:d4:8a:8d:db:d0:0d:84:8f:7a:41:bd:ac:3d:75:
         dc:26:68:6e:59:af:9e:c9:4e:08:62:6c:d7:12:c2:66:29:66:
         5a:9b:e6:95:3d:7a:a3:a5:8e:4c:33:d2:af:d7:f1:61:d9:79:
         6d:95:e0:ae:4b:52:92:93:c2:45:2e:4f:2a:c1:3e:e7:fb:af:
         59:18:23:e0:89:f8:b0:63:47:76:95:54:d4:44:ea:c8:ac:df:
         9c:a7:5d:4c:e2:8f:8d:e9:39:09:7b:7e:e2:a0:6d:9c:fd:30:
         79:25:29:88:b2:45:c1:cc:c4:c3:1a:01:7a:bc:81:10:2b:39:
         bc:3a:09:8b:9e:35:3c:37:3d:86:a2:d5:5a:b2:f5:2f:8d:4a:
         c1:c4:c2:a1:70:aa:7a:c2:2c:bc:3c:74:1e:41:88:94:0d:5e:
         11:9c:50:21:2c:15:31:fe:e0:42:af:f3:09:f7:2f:a3:b6:23:
         bf:20:f2:ee:6e:d8:ac:d0:7a:e9:6e:c5:d3:fa:d2:f6:ed:c9:
         be:38:ec:78:00:f4:f0:07:f9:28:87:ae:d7:8c:68:4b:b8:d7:
         54:1b:2a:ea:65:52:9f:95:8e:ae:a8:ac:c5:63:8e:ea:b4:9b:
         36:13:fb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:56 2025 by rpki-client