Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File:                     EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier:          u9CO+Xm3GwtDt1SJKqtiwxgszM7g2FEJ6gXBLxazJuw=
Subject key identifier:   91:53:CA:20:2E:92:54:E7:D2:91:3B:58:04:D5:D9:D5:B1:D2:18:BB
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer:       /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial:       019752D8F7A72C4CE18E79FDCCE6ECDD3AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number:          12CB
Signing time:             Mon 09 Jun 2025 04:00:40 +0000
Manifest this update:     Mon 09 Jun 2025 04:00:40 +0000
Manifest next update:     Tue 10 Jun 2025 04:00:40 +0000
Files and hashes:         1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: 8vKhW3hnT/P7wGD1YCTXzGg/VeXteKczNx467PIOXlA=)
                          2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=)
                          3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=)
                          4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=)
                          5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:d8:f7:a7:2c:4c:e1:8e:79:fd:cc:e6:ec:dd:3a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
        Validity
            Not Before: Jun  9 04:00:40 2025 GMT
            Not After : Jun 10 04:00:40 2025 GMT
        Subject: CN=9153ca202e9254e7d2913b5804d5d9d5b1d218bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:03:64:33:66:07:d4:43:82:3d:8d:30:02:a4:
                    b2:29:18:dd:88:4f:b1:7f:ce:3f:c1:26:2e:0e:cc:
                    76:99:76:c8:cc:f3:9e:d2:03:00:df:47:0d:25:c8:
                    b4:36:85:c3:b1:c3:62:25:06:a5:da:83:5b:db:c1:
                    c1:19:3a:b2:c8:14:36:54:ae:2f:4b:c3:ed:30:9c:
                    2c:83:d3:ef:cc:07:3b:65:a2:71:9e:f1:05:56:88:
                    c8:3c:4d:33:4d:7e:79:c9:d8:19:4a:cc:ee:5d:c7:
                    11:04:9b:02:5c:e1:09:f8:42:34:28:2b:94:8c:00:
                    73:0b:1f:8a:dd:2c:51:70:03:e2:ab:ff:6d:f3:4a:
                    ea:66:e0:e0:f3:eb:64:50:86:76:94:eb:79:03:a2:
                    e6:be:e4:0a:47:e1:50:ad:bc:10:95:7b:76:78:f9:
                    eb:ec:31:04:35:c0:dd:51:f2:66:5b:dd:f2:0e:f0:
                    84:96:31:c7:3b:f1:db:29:42:a6:37:be:01:a0:fa:
                    15:da:dc:21:c0:5e:94:4a:f3:d6:8d:09:93:8b:8b:
                    1f:15:a3:ff:e4:62:c7:4e:84:02:c4:7f:69:00:cc:
                    1b:5e:c2:14:c2:dc:60:7d:55:26:40:67:e6:ea:a6:
                    3b:03:31:bf:77:02:05:99:f9:80:70:24:98:ef:95:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:53:CA:20:2E:92:54:E7:D2:91:3B:58:04:D5:D9:D5:B1:D2:18:BB
            X509v3 Authority Key Identifier:
                keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:46:34:3c:9d:91:cb:b6:35:7f:01:71:85:d6:a1:f8:6c:36:
         b2:26:88:6b:40:e2:0c:e0:eb:3d:bc:8e:b3:96:b9:19:c0:28:
         3e:2b:58:cf:5a:8f:bd:0c:f2:6f:6d:c9:6f:5c:9e:0f:87:1c:
         32:92:31:25:04:aa:39:0e:49:bf:1b:06:b8:d7:10:7b:31:e4:
         ea:09:ae:48:b9:04:19:53:0c:c2:70:83:db:4b:c9:94:b9:65:
         5e:04:64:a8:c1:44:fb:da:34:60:0b:38:b6:82:9a:87:98:97:
         5e:f6:cf:81:4c:9c:b5:03:e4:b9:a1:43:4f:2b:33:35:c9:90:
         6a:5c:eb:3a:78:22:08:77:aa:02:ed:a7:85:f1:c8:2f:b1:86:
         50:8f:f4:25:a7:f5:cf:dc:f5:2f:e4:5d:5f:da:31:fe:04:b1:
         57:a1:5a:e9:f3:ff:d7:09:54:08:cc:3d:21:fd:d9:f3:7e:78:
         16:ed:b8:fc:24:c4:cc:6c:58:67:99:c9:eb:7b:c2:dd:36:2c:
         2f:0f:c3:1a:19:5c:1a:25:de:3f:0e:6b:e8:50:1a:36:e8:4c:
         e4:71:a1:f9:32:ef:a2:d3:97:9b:59:a3:ff:d2:55:28:f6:77:
         89:9e:ad:52:51:12:0d:08:74:cb:45:72:56:b8:ab:8f:c3:97:
         d8:7a:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:30:03 2025 by rpki-client