Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
File:                     1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft (raw, json)
Hash identifier:          007q1SE3KM3ZpSykOWQT7EXDwy4sq3Lh+E0uLZvHXu0=
Subject key identifier:   E0:0D:9E:CE:2A:8C:C5:F3:84:95:C1:43:09:79:B9:9A:D5:E1:84:4D
Authority key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Certificate issuer:       /CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Certificate serial:       01974931053C80BA5BA15C8EDE3AE13584B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
Manifest number:          10A9
Signing time:             Sat 07 Jun 2025 07:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:38 +0000
Files and hashes:         1: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl (hash: ly4orpg7BYfmJEShUzKhqlaWJmvz0NrvGU4KQXescV0=)
                          2: 7AjGLQsJj7KXSqBNNqiLp45yitU.roa (hash: z05Ju9vFqoh0JjoPd8SpAqwh3plkGnHfuFRv3k0ibgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:05:3c:80:ba:5b:a1:5c:8e:de:3a:e1:35:84:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
        Validity
            Not Before: Jun  7 07:00:38 2025 GMT
            Not After : Jun  8 07:00:38 2025 GMT
        Subject: CN=e00d9ece2a8cc5f38495c1430979b99ad5e1844d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:34:e4:eb:5f:f2:de:6a:3f:f4:ec:50:5c:
                    01:bf:96:7b:76:09:55:3a:26:7e:dc:ba:c0:c0:ef:
                    10:6c:a8:0c:b9:bb:8b:07:49:81:54:91:d8:40:fa:
                    aa:b4:d0:cf:14:78:a6:88:d1:16:bd:af:d3:b3:96:
                    e6:f7:8e:e0:cb:84:47:06:68:4a:ea:a1:03:c3:06:
                    83:4e:83:84:d7:fd:f7:f0:72:ec:8d:fa:2b:a1:d0:
                    ad:d9:17:a0:2f:0f:20:4a:2d:02:65:4a:b8:ff:6a:
                    66:bd:d0:54:f5:e0:95:f5:93:e5:20:47:ee:79:f4:
                    5f:9f:77:a9:8d:31:7d:b6:c8:f1:c9:6e:ab:6b:e3:
                    1b:43:38:f0:e4:cd:12:1b:52:a7:69:ba:e0:23:4b:
                    6f:47:c1:f5:07:de:1f:33:69:3b:16:65:11:de:d8:
                    80:ba:71:93:fa:aa:27:91:de:ee:83:6c:8c:33:ce:
                    ae:f9:93:5c:90:16:60:c9:62:c9:e9:c3:67:d9:ed:
                    c7:f0:f4:04:5d:00:31:6b:59:ec:89:22:0c:22:70:
                    ce:9a:9f:44:83:92:25:21:7f:b9:0a:02:c9:e6:03:
                    1c:fe:ba:5d:d8:8b:d6:84:c1:f2:69:53:47:12:a1:
                    f6:7e:5d:c7:48:b2:5f:4e:85:fd:57:31:48:9e:c4:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0D:9E:CE:2A:8C:C5:F3:84:95:C1:43:09:79:B9:9A:D5:E1:84:4D
            X509v3 Authority Key Identifier:
                keyid:F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6b:ef:c2:51:51:21:68:37:9c:c7:2e:0b:59:0a:7e:aa:94:
         8d:37:c3:49:ac:2a:53:8a:cb:ff:8a:0b:2f:61:f5:71:46:d1:
         fc:e2:37:47:90:ef:c5:38:99:dc:57:af:2d:f9:13:6c:92:7f:
         fe:2f:ce:c3:db:78:84:bb:47:e5:a2:e9:ea:eb:93:e9:07:6d:
         b8:a5:f3:86:0c:0b:89:9e:cd:d8:9f:ce:5e:63:f9:b2:a3:34:
         79:9e:06:7b:7e:9d:49:36:97:c9:c0:1c:1e:cd:6b:68:7b:02:
         c4:a6:ee:90:31:05:20:e8:cd:3d:0c:bc:4d:a6:c1:18:0f:69:
         03:11:5a:72:6f:d5:26:9a:dd:15:d9:f7:f4:cf:8f:5f:84:1e:
         52:ed:ec:82:3b:ba:dc:e1:1f:f2:52:49:0d:d5:77:d8:57:b2:
         1c:ce:1c:ea:89:28:56:9c:8f:37:40:b2:2c:46:e8:22:44:bf:
         66:d3:6d:a3:b8:41:4a:33:aa:22:01:3f:c6:fc:3d:57:a7:e5:
         96:e2:8a:57:86:97:7a:cd:53:d2:62:be:9e:fc:55:e1:73:d7:
         5e:f4:28:86:d3:f9:3c:59:31:ee:f4:5f:70:30:32:f1:b6:0e:
         70:38:d4:00:30:a1:fc:2b:b7:30:30:a8:01:2b:ec:c9:6c:51:
         8b:2e:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:30:43 2025 by rpki-client