Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          W5vlYbE6RIV9AKzkDKs8T8MIEm6/EwkxhNCTVEKNB2s=
Subject key identifier:   AA:FC:17:DC:58:29:86:FA:FF:17:92:82:CC:71:E7:1F:B0:61:AE:44
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       01976D7436BB4AB8134492CB3F3E3698AC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          1099
Signing time:             Sat 14 Jun 2025 08:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:21 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: oJtzEr0LUC3Or/XizZduMIZZupXGqr90ci5OM6X5OEU=)
                          2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:36:bb:4a:b8:13:44:92:cb:3f:3e:36:98:ac:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: Jun 14 08:00:21 2025 GMT
            Not After : Jun 15 08:00:21 2025 GMT
        Subject: CN=aafc17dc582986faff179282cc71e71fb061ae44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:15:a2:17:83:62:7a:ab:07:43:77:c6:aa:
                    55:b3:89:20:9a:ef:61:7b:36:48:75:c7:78:d0:ca:
                    03:04:4b:a5:2f:ea:a3:31:fd:14:73:6a:f5:25:3f:
                    1c:98:15:72:14:57:40:5e:c0:27:52:f0:33:b3:7e:
                    b3:7d:84:1d:02:23:e7:72:b3:1b:13:f9:09:cf:2c:
                    7c:25:2a:d9:a1:2b:dd:45:5f:a4:d1:0f:1c:99:de:
                    31:60:45:19:21:33:8e:49:77:0c:2f:0b:e7:d5:6d:
                    d6:ae:e2:c1:01:88:49:1a:08:d6:ff:09:66:51:88:
                    9d:3e:ce:2b:14:a1:43:76:8f:2a:f9:a0:ff:c9:e4:
                    b5:fd:d8:cd:a2:7f:b7:1b:44:a1:ed:2d:c2:1b:06:
                    36:15:4e:d2:e5:83:a4:4d:4b:76:ec:22:99:84:84:
                    fd:81:46:c0:4e:e4:0c:4d:bf:a1:5d:42:9f:b6:95:
                    a1:49:34:a5:2e:f5:71:fe:93:77:33:f5:76:db:9c:
                    55:25:5a:a2:73:c2:28:ea:be:94:57:c2:ec:10:7d:
                    92:f1:94:97:ae:3c:cf:2f:44:5a:ee:dd:0b:6b:f4:
                    e7:69:8a:d5:0e:ee:9e:0a:b7:21:92:31:6d:6f:84:
                    d1:e7:da:ff:7e:49:2a:20:a7:1c:a5:47:78:46:cf:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:17:DC:58:29:86:FA:FF:17:92:82:CC:71:E7:1F:B0:61:AE:44
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:07:1d:d4:51:26:59:d6:e4:11:3e:d8:b8:18:a4:ee:74:e8:
         9f:ad:91:00:4c:8b:91:c5:78:a8:45:83:80:42:91:43:08:81:
         21:c8:02:6b:88:1b:34:7e:09:b6:03:f0:a5:1b:85:ab:c2:8e:
         d9:fd:83:89:57:df:c8:e5:0d:24:73:41:15:fe:cc:c8:35:a6:
         d0:8f:78:88:78:cc:7a:f3:7b:78:b7:ea:a9:06:0f:9c:1c:da:
         74:f1:9b:3f:88:dd:66:5d:66:2a:25:84:38:dc:eb:dc:ad:00:
         5b:e6:31:33:b6:50:f3:14:f6:fe:94:db:cc:dd:af:fc:fa:b3:
         8b:10:a8:87:fd:2c:86:fe:08:a3:9f:e6:26:c7:63:34:dc:a4:
         a5:c5:12:29:cf:9f:9d:ba:4f:71:07:1f:1e:ea:98:42:b7:98:
         c8:1e:f0:ed:90:78:72:a0:93:d1:84:0f:c1:61:3a:b9:e5:fd:
         57:ed:4e:bc:2d:10:8b:f5:09:31:67:6c:61:2c:01:f7:2d:88:
         77:93:08:09:2e:0e:65:c4:b9:be:04:08:08:e3:dc:a3:33:36:
         c8:a7:8c:60:5c:58:00:ed:39:5f:5f:f1:c8:07:ef:ca:0d:5b:
         0e:88:f8:e3:2f:bf:e5:9d:0f:3d:97:75:34:72:2f:53:9d:ed:
         34:60:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:50 2025 by rpki-client