Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File:                     aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier:          XqTD2j8FLquxkY05BTNb1KprIBotEpOSKk/dY2zP6FI=
Subject key identifier:   E6:BE:B7:BA:9A:EA:AF:6C:B3:FA:7C:94:3B:50:C9:35:E6:43:79:4A
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer:       /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial:       01974E8E2CCFA0F531DBBC419200EBD40125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number:          0990
Signing time:             Sun 08 Jun 2025 08:00:29 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:29 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:29 +0000
Files and hashes:         1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: LiaySMmawnaQisgzIrqrlPyzckMYHopGx0QK3s1kQ/g=)
                          2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:2c:cf:a0:f5:31:db:bc:41:92:00:eb:d4:01:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
        Validity
            Not Before: Jun  8 08:00:29 2025 GMT
            Not After : Jun  9 08:00:29 2025 GMT
        Subject: CN=e6beb7ba9aeaaf6cb3fa7c943b50c935e643794a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:91:03:68:07:c0:74:e7:df:41:78:f4:f6:1d:
                    b7:45:0c:a5:b5:3d:77:d0:cb:fa:3d:8b:05:c7:ec:
                    8d:15:6a:69:a8:02:1d:df:f5:d3:69:c2:37:b4:97:
                    0d:70:db:fa:07:5b:fa:f5:42:68:e8:37:a6:b2:32:
                    29:9a:cf:00:20:f1:f7:c9:52:3c:76:e7:4c:ab:2c:
                    e6:59:c7:22:f4:8f:cf:f4:d5:c8:a5:f3:72:db:80:
                    eb:7e:5c:5f:b2:3d:c7:42:bb:45:83:7d:93:06:50:
                    aa:c8:c4:4a:18:18:3d:52:c0:06:63:69:a6:ff:be:
                    6c:3c:db:4e:60:5e:0a:ad:ab:cf:b1:5a:8d:9b:63:
                    66:da:37:ea:cd:d5:4b:20:ec:0f:18:c9:43:8e:89:
                    1d:08:45:50:dd:de:aa:1b:92:7a:ec:2c:de:29:ce:
                    87:e3:83:2c:5d:81:71:e3:ea:77:03:17:5a:40:81:
                    0f:e7:5d:e3:de:e3:f6:c4:4d:ce:db:b1:16:fb:f7:
                    bb:8e:71:fa:8d:bb:60:af:73:6d:16:df:b3:05:50:
                    b9:0b:eb:73:0e:68:e9:92:75:39:cf:ec:36:44:fb:
                    0a:18:d8:83:e6:51:7f:32:e9:69:c2:2a:d0:ee:e4:
                    29:05:7a:a3:33:34:48:44:29:25:e1:e2:56:e2:d9:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BE:B7:BA:9A:EA:AF:6C:B3:FA:7C:94:3B:50:C9:35:E6:43:79:4A
            X509v3 Authority Key Identifier:
                keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:01:2f:e7:bf:4c:52:e1:a5:8b:2e:30:57:62:25:e2:a0:8d:
         b4:7a:5a:01:79:25:7a:0d:d7:cf:92:77:b0:4e:1f:b8:51:6b:
         f7:6a:9a:0d:40:ed:ad:ae:9d:d1:68:06:ec:f2:aa:29:5b:2d:
         8e:83:6e:ad:67:26:71:4a:d5:b9:89:18:8b:c8:a2:d2:12:72:
         ce:40:60:3e:27:23:73:fa:f8:30:01:cb:8e:80:84:8f:9b:4c:
         1a:a0:41:75:64:3f:fe:c1:0f:62:b7:8a:f8:48:c3:14:5e:d2:
         a1:5c:27:1c:79:d6:f4:28:27:2b:02:80:7e:6f:71:04:be:ce:
         9a:e7:bb:2e:e3:82:d3:0a:5e:e3:4a:a0:8b:20:36:2a:b0:2e:
         a3:78:70:d7:ba:2e:30:52:99:de:30:43:23:a8:26:e9:a0:ac:
         28:10:05:e5:c9:69:1c:9a:60:be:50:85:46:dc:bf:f2:63:9e:
         40:80:54:dd:89:71:3d:6e:64:40:60:af:08:48:7f:5a:b9:c8:
         ad:99:4f:b2:f8:7c:a1:ae:e9:51:3d:6b:af:57:a5:df:38:bf:
         ca:86:40:0c:58:5c:bc:ee:07:a0:e2:27:7d:01:6d:51:f6:61:
         20:5d:49:0a:a6:58:31:50:38:10:2c:01:e6:d9:8b:c2:83:2f:
         39:85:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:09:30 2025 by rpki-client