Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          OpDNAU0mXtGCYrEUwnjDYGr8wnwUeqmT9wSJKlkma6I=
Subject key identifier:   02:02:63:16:DD:E6:96:EC:E2:EC:90:CD:6A:5A:73:D2:81:FA:CB:4B
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       01975647ECA7DEA93A6841B2D055F21CD022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          09F7
Signing time:             Mon 09 Jun 2025 20:00:43 +0000
Manifest this update:     Mon 09 Jun 2025 20:00:43 +0000
Manifest next update:     Tue 10 Jun 2025 20:00:43 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: fTgWnnKsHKhA5IH05YC6XeP1BP2PPmtH02PBcQP92To=)
                          2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:47:ec:a7:de:a9:3a:68:41:b2:d0:55:f2:1c:d0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Jun  9 20:00:43 2025 GMT
            Not After : Jun 10 20:00:43 2025 GMT
        Subject: CN=02026316dde696ece2ec90cd6a5a73d281facb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:47:c9:15:54:eb:18:dd:c6:85:ca:df:f8:
                    54:47:eb:72:59:ee:e5:48:d1:6f:c3:2b:d9:45:d9:
                    09:d5:8c:60:8b:54:f1:cf:e3:33:69:d5:ea:2a:a9:
                    d7:96:2b:ae:32:1c:4c:8b:a7:58:aa:93:83:79:c2:
                    a6:04:5f:98:09:da:f7:be:67:36:0a:b1:ba:70:4b:
                    68:bc:3a:52:4f:91:3b:e8:a4:95:30:87:ec:af:2e:
                    29:0c:e1:b2:1d:d6:ac:a6:d4:ac:19:f4:92:d3:82:
                    a2:12:7b:03:bd:a5:73:e8:45:c2:6f:07:ff:2d:b8:
                    1f:3a:bd:80:68:46:bf:23:c7:f1:07:70:46:3b:ba:
                    5a:e9:37:fd:79:e9:3c:36:a1:db:f1:f0:13:a7:05:
                    47:5a:ea:2e:12:45:f3:63:ae:99:e4:ed:2b:0e:ed:
                    3c:36:59:b8:27:ce:4e:8b:d3:de:3b:b4:7e:0b:1d:
                    8a:93:1b:b6:af:d3:7d:87:12:de:bb:db:0e:52:0a:
                    f8:d6:75:74:c2:63:9b:83:b2:47:00:a4:87:94:71:
                    ae:3b:69:ef:c9:dc:42:8f:53:cb:eb:38:8c:50:7c:
                    f9:22:e3:3c:51:3c:1d:17:7b:bb:5d:51:a5:e8:e8:
                    41:9c:5b:64:2f:55:98:a8:b2:5f:26:d8:59:14:36:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:02:63:16:DD:E6:96:EC:E2:EC:90:CD:6A:5A:73:D2:81:FA:CB:4B
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d3:d1:3b:47:e2:fd:dd:94:fc:63:d5:f5:d8:e5:97:f7:96:
         6d:17:69:34:92:40:9d:75:37:e4:e4:75:c2:c7:9e:24:3f:90:
         19:01:eb:ee:4e:23:0e:b4:ee:ab:7b:50:f3:f7:21:d2:a3:9d:
         43:34:c9:f6:06:e0:fe:d8:75:80:55:12:72:9f:4e:7c:93:cd:
         5b:13:ee:71:55:0f:5e:8b:89:c5:eb:49:21:f1:d8:90:01:56:
         89:97:b0:be:f4:5b:64:28:19:19:4f:26:cf:6d:5e:f9:85:26:
         39:2d:69:ae:30:8d:b6:f7:65:c5:bb:04:9c:16:9c:17:3e:e1:
         08:bf:08:da:99:be:fd:2d:61:f7:1b:ed:d5:be:78:15:77:74:
         0e:e2:2a:0c:69:a8:83:98:3d:f7:d1:5a:71:16:2b:5b:57:b4:
         b9:4c:ef:a3:2c:16:8d:d6:07:b5:c9:db:9a:0b:17:42:9b:33:
         28:5c:aa:a8:2b:81:72:61:69:32:3e:47:68:d6:9d:6e:e0:80:
         cf:82:f6:23:a2:20:38:a3:65:00:b1:9c:c5:14:22:e3:ec:ff:
         53:fb:f5:8f:bf:62:87:04:b8:f1:c9:e4:66:d9:98:99:29:ef:
         f7:44:9f:3e:0c:59:0e:b5:ae:79:7f:30:2e:fb:b2:94:ba:c5:
         d3:46:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:39:58 2025 by rpki-client