Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          W1weZxC6OPaTNQZwi79pXxE+oYDs7nw6Xk5TNAGlgto=
Subject key identifier:   CE:7C:B4:99:B4:66:FB:62:96:0B:84:50:24:EB:F5:19:F3:7C:83:DC
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       019747B07ADBF51F2468DB70973B2C219EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          09C9
Signing time:             Sat 07 Jun 2025 00:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:37 +0000
Files and hashes:         1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
                          2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 2QL63mD7DX+N536aTj/pVZd7ot/uHtU217y1yEmyBSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:7a:db:f5:1f:24:68:db:70:97:3b:2c:21:9e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jun  7 00:00:37 2025 GMT
            Not After : Jun  8 00:00:37 2025 GMT
        Subject: CN=ce7cb499b466fb62960b845024ebf519f37c83dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:6f:89:2d:47:50:de:8d:66:a4:c8:ba:80:
                    77:f9:21:69:52:e1:cc:35:ec:1e:2f:25:03:9b:72:
                    d2:f2:a1:2b:25:7f:e7:64:7a:90:9d:c0:07:4e:39:
                    fe:07:af:ce:12:6c:e4:a2:17:a9:e9:d6:44:0b:fd:
                    27:8d:ae:66:aa:3c:af:ac:66:19:a7:18:49:05:c9:
                    af:cb:7e:6b:91:c5:29:c8:a6:31:f9:da:2c:ce:76:
                    9e:88:8b:98:5b:d8:6c:42:c7:99:05:ac:a0:b0:f2:
                    d0:0f:3e:24:23:55:1e:79:89:b3:1e:6b:f8:31:a8:
                    7b:e9:a9:fc:8f:b0:ca:11:69:3e:2d:24:ab:fc:70:
                    83:64:bc:6a:c7:ad:a9:50:5e:11:67:88:6c:5c:41:
                    ee:05:cc:29:0a:33:76:91:e1:87:29:bd:e4:40:b0:
                    c9:33:45:d5:f8:c5:7d:f8:16:ee:3c:47:4b:6f:c5:
                    81:41:9f:34:5a:3e:31:de:c7:34:4d:4c:39:b3:da:
                    fd:7e:fa:dc:41:13:6e:11:b9:f3:b3:80:e1:72:ce:
                    38:f3:eb:5b:90:c6:69:c7:98:ee:b2:42:2b:f3:3a:
                    aa:82:b7:f4:42:77:ef:24:17:59:a1:de:2e:6d:82:
                    82:16:be:83:a1:ad:87:23:95:84:b6:99:05:47:d3:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:B4:99:B4:66:FB:62:96:0B:84:50:24:EB:F5:19:F3:7C:83:DC
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:bd:4a:16:5d:83:2c:91:58:f6:89:e5:fe:1a:53:1c:b1:
         1a:fd:d9:18:e9:2a:48:f8:94:c0:29:f5:50:74:4d:25:9f:ef:
         1f:82:93:5f:14:93:9e:03:eb:d1:db:bf:d8:1c:27:2d:16:4b:
         13:d2:3b:c0:1e:1a:0b:d1:5d:7e:94:be:a7:38:f0:7a:3d:57:
         95:08:0b:35:3d:4f:5f:eb:26:aa:81:50:99:75:b1:af:56:d8:
         71:7f:8d:77:e4:70:bc:06:cc:99:1d:cc:34:37:0c:39:33:cc:
         94:41:f2:3c:3a:6c:b0:77:73:cf:f2:ed:1e:12:e4:c5:fe:a2:
         56:2d:3b:9f:bd:9f:80:65:23:4a:c0:6d:62:1f:3f:e9:95:06:
         fc:cc:ca:cb:20:ed:b1:27:07:bb:9e:3b:53:c6:31:39:62:14:
         12:6c:0b:a8:de:d8:7d:bb:6d:b2:0a:62:c2:3d:f0:d2:66:c6:
         62:a0:82:8a:f9:6e:33:bb:79:13:ae:b2:f8:6a:a4:4e:f1:f6:
         f6:e4:d8:a6:d4:e2:2b:e0:07:f7:65:19:31:f2:43:64:d2:67:
         a7:77:74:65:18:ed:58:bb:c9:3b:81:41:72:88:4f:c9:2e:7e:
         5a:cd:c9:7d:da:aa:59:75:e0:c8:03:04:46:c7:a2:57:9e:58:
         58:af:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:04 2025 by rpki-client