Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File:                     EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier:          8srj76QEE0zhqZ++f4Ax614sG3j9aqjTstggaeDXpCw=
Subject key identifier:   06:93:87:58:30:D9:22:23:6D:B2:73:58:D5:4E:6A:58:79:C6:76:D2
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer:       /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial:       0197474267654C098892DAB4CCF572D55EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number:          157E
Signing time:             Fri 06 Jun 2025 22:00:23 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:23 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:23 +0000
Files and hashes:         1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: Yb9uVnyC2hF4ddcbMwtDbcohRvLQqhR9ZmM4IYntAeM=)
                          2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
                          3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:67:65:4c:09:88:92:da:b4:cc:f5:72:d5:5e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
        Validity
            Not Before: Jun  6 22:00:23 2025 GMT
            Not After : Jun  7 22:00:23 2025 GMT
        Subject: CN=0693875830d922236db27358d54e6a5879c676d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:11:b3:f6:6e:a6:0a:5f:ee:b9:8f:2e:17:
                    af:58:5d:11:28:37:29:26:46:3f:b0:5b:8b:0d:4e:
                    65:6a:9c:3f:0f:94:4b:3f:b2:eb:df:21:d9:aa:70:
                    c6:9e:89:7d:06:94:3b:81:96:1d:8d:06:d5:72:a8:
                    4b:fc:e0:c1:31:e3:b5:aa:98:34:08:9b:17:00:00:
                    b0:e5:ee:06:59:62:b8:64:60:dc:f8:5b:3e:0b:72:
                    5c:d0:f5:2f:f4:ac:ae:ed:d2:28:77:a8:fa:9b:27:
                    31:49:b5:a5:9c:7d:f3:31:24:fe:df:45:3c:ac:fd:
                    cf:d0:76:0f:4d:d2:09:f5:64:eb:a9:b0:10:e8:2c:
                    ce:d6:5a:f0:69:96:48:30:46:1e:78:9a:1c:70:07:
                    32:e8:25:25:c6:c5:ac:f4:35:e5:8d:38:d3:9e:5c:
                    97:6a:68:1d:cc:4c:69:b4:64:d3:76:18:ac:9a:0c:
                    c5:ed:a5:bc:8d:3f:90:62:e7:a3:83:de:b6:b2:a8:
                    93:63:4b:bf:50:c9:22:b2:c3:89:ce:d6:fd:b2:1c:
                    90:19:5f:3c:40:78:d8:8f:eb:9a:b3:ac:20:88:f5:
                    c1:77:92:e4:0b:6a:f8:85:32:54:d0:4c:32:9f:db:
                    82:ad:ce:69:8d:44:c0:c1:f9:f5:09:43:e6:ca:6e:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:87:58:30:D9:22:23:6D:B2:73:58:D5:4E:6A:58:79:C6:76:D2
            X509v3 Authority Key Identifier:
                keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0a:ad:19:48:71:53:21:0f:30:03:8e:34:12:b0:5a:35:12:
         7b:3f:3d:08:e3:09:ef:7b:1c:c6:68:ec:c0:f8:87:c7:c1:9b:
         9b:a8:b0:d8:73:7e:95:1a:6e:56:5b:82:4f:d5:50:07:2a:36:
         f1:fb:72:8c:cc:96:32:db:93:75:7b:3f:4f:fd:52:58:1e:3c:
         e4:d7:bd:f4:85:be:58:55:d8:4e:3e:4f:0b:cb:d8:64:41:b8:
         44:65:6c:67:e6:82:eb:5b:54:07:dd:ec:21:8b:99:75:c0:6f:
         ae:f6:54:38:09:74:ee:75:3f:4a:82:23:58:a8:1c:37:54:60:
         bc:b4:a0:53:19:95:c6:35:69:a8:59:ab:f8:17:14:30:9f:85:
         69:c1:5d:c9:e0:6d:ac:be:91:35:dd:c8:e6:c4:c9:47:f5:c1:
         2d:11:09:b4:86:a1:37:4e:98:d9:24:33:07:48:a5:e4:44:fd:
         2d:eb:50:6d:ac:b9:b3:3c:4b:f1:10:c1:8f:db:36:19:3f:00:
         0c:c2:9b:d9:2b:31:03:48:0a:6d:a9:f4:fc:63:9f:56:e8:b7:
         40:16:ac:c0:0b:e6:fe:ee:a1:22:99:e6:f0:f8:3f:b9:f0:21:
         1c:dd:eb:d6:74:be:79:0e:d8:da:5e:5b:39:60:a3:f7:c3:5f:
         ab:df:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:27 2025 by rpki-client