Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          jREyAgDSmgfkD/63wnDahOYLTfvTN/TjWDB4fOiHLvk=
Subject key identifier:   6F:57:0D:08:3E:A6:7B:87:10:A5:F4:33:D1:44:DF:40:59:39:65:7B
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       0197469E8AEC929FE1FE7AB0276A79B77191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          0468
Signing time:             Fri 06 Jun 2025 19:01:24 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:24 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:24 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: V/PQ860Xc0lVbRbZZ8stovqKCFsQk6I38rHppW2/+Nc=)
                          2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:8a:ec:92:9f:e1:fe:7a:b0:27:6a:79:b7:71:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Jun  6 19:01:24 2025 GMT
            Not After : Jun  7 19:01:24 2025 GMT
        Subject: CN=6f570d083ea67b8710a5f433d144df405939657b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:4b:0f:cd:fd:bc:94:08:76:98:40:d0:d2:
                    41:73:e0:c8:71:d2:1e:1a:a8:00:ea:68:95:53:93:
                    8a:a9:f6:2a:66:60:d9:41:0f:ef:f5:95:ca:7d:e8:
                    89:51:17:d5:30:6c:4e:a6:bc:24:2f:ba:e3:b8:c8:
                    48:80:f8:a9:35:9a:22:6d:25:8f:e3:0c:3e:17:47:
                    b7:4f:b5:e4:b1:22:be:47:69:10:91:eb:d1:03:2d:
                    b9:fd:d1:0f:ab:ac:a7:3c:eb:7d:37:38:17:b1:91:
                    3a:94:64:71:aa:d0:2d:6c:cb:32:6d:21:32:ca:3f:
                    a8:ac:5d:9e:4f:06:f3:f1:82:f5:5e:3d:5d:ba:ba:
                    ee:6d:19:ce:79:d9:eb:e6:f6:c3:a1:c2:ac:2d:00:
                    2f:d1:4e:8d:24:91:79:e1:e8:53:0e:b0:9f:18:30:
                    7a:ee:35:88:33:10:ba:c1:42:17:3c:df:50:bc:5f:
                    5d:c5:0d:af:fa:e7:36:ae:20:98:be:a1:8d:fd:96:
                    cb:63:ca:3f:50:57:bf:8b:9b:5d:1e:e2:8f:1b:8f:
                    e1:da:60:72:85:c4:53:1c:b1:0f:fc:98:23:d6:c9:
                    36:45:85:8a:f2:2a:93:7c:b0:64:30:bc:81:dd:08:
                    53:ad:8f:66:c4:6f:36:80:ad:9c:bc:ef:27:fd:09:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:0D:08:3E:A6:7B:87:10:A5:F4:33:D1:44:DF:40:59:39:65:7B
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0f:e8:67:92:cf:42:ac:16:cd:bf:e2:02:7f:46:d2:5a:63:
         ec:42:21:43:4e:36:17:4d:2f:9d:e0:31:02:fb:05:33:c6:1b:
         af:81:89:a4:a2:60:85:0f:b3:73:40:5e:30:b3:98:dd:79:48:
         67:c3:22:9a:9e:36:6b:af:72:d2:03:42:bb:d3:55:d8:99:a2:
         a8:39:c8:eb:fd:73:1e:18:96:e0:5d:7d:03:f9:8d:75:67:e8:
         9b:36:2a:ac:06:7e:5d:ed:ca:91:8d:a0:18:54:63:1c:2a:0b:
         1a:00:2b:47:db:fd:20:64:1b:ef:66:b9:52:41:15:1a:f7:96:
         e7:ca:27:7e:c9:1c:70:48:cf:3e:42:9d:ae:9a:1c:6d:b3:30:
         89:65:71:63:46:92:a7:52:e5:1f:a0:e9:93:23:8a:16:72:74:
         06:92:a1:6e:d1:24:f9:a8:22:06:2b:62:54:48:7d:fd:35:6a:
         46:93:14:03:5f:6a:18:03:15:31:35:7f:a8:c0:26:cb:f0:09:
         3c:83:f1:2c:ee:c2:10:67:cb:a6:5e:ab:e6:37:ab:40:5a:62:
         89:b9:01:53:14:e5:65:1e:ed:94:f5:77:86:56:b7:91:88:34:
         f3:5d:f2:6c:7b:19:6b:ef:d8:60:aa:f3:c2:a4:d5:6d:d1:a8:
         16:1c:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:36:09 2025 by rpki-client