Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File:                     egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier:          DyhDiiE7OT6SbZW8QgFrggW3FlMFR1rvht6sPS0jzaY=
Subject key identifier:   7D:0B:70:AD:6F:EF:D5:25:7F:FF:5D:55:75:57:3A:4D:01:E4:41:D2
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer:       /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial:       0197469DC425115D782ED652121665F5E722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number:          1093
Signing time:             Fri 06 Jun 2025 19:00:33 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:33 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:33 +0000
Files and hashes:         1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: vs6JwFyw55AOM5KfR6zGRwNyRLeSrbtmXLTKU9rVUnE=)
                          2: h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa (hash: SWkmFiL0pM+fIwknjB1oWTVUsg4SQOvXw9O+NxZEonA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:c4:25:11:5d:78:2e:d6:52:12:16:65:f5:e7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
        Validity
            Not Before: Jun  6 19:00:33 2025 GMT
            Not After : Jun  7 19:00:33 2025 GMT
        Subject: CN=7d0b70ad6fefd5257fff5d5575573a4d01e441d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:ac:36:5e:62:b1:d0:e2:3e:5f:ae:0c:c8:
                    2e:d9:4b:95:86:c2:53:32:6a:d6:e6:66:be:40:b1:
                    a5:96:25:7a:9c:4f:f4:c2:60:c3:54:c0:c3:4b:25:
                    db:cc:8e:a5:2f:67:76:94:e0:e9:80:e5:2c:1f:14:
                    00:95:d9:94:a6:09:2f:c2:b7:56:25:37:4d:9c:db:
                    99:6c:40:cf:94:2a:8e:a3:ae:24:c8:25:84:49:03:
                    13:22:c5:0d:fe:84:07:8a:81:fe:91:e3:c6:f6:95:
                    5f:f7:b9:dd:99:c7:79:3d:aa:27:24:81:30:42:68:
                    58:06:67:13:2c:de:be:fb:0e:61:d2:37:31:67:c7:
                    e2:63:6c:81:6f:87:d4:dc:f6:df:1e:45:5b:45:0a:
                    08:4a:16:42:ed:0e:20:ca:e5:9e:27:ad:b4:00:b2:
                    a8:05:38:f3:ee:b2:5b:55:45:c5:1d:de:e5:90:36:
                    54:b6:a3:4a:a4:df:94:a9:4a:c2:01:33:a6:0b:8a:
                    87:0c:a2:34:37:53:ca:f7:e6:1f:42:e1:a8:2a:8f:
                    b0:76:b1:b4:e8:bf:30:28:71:93:7e:d7:ba:39:ac:
                    72:f1:db:1b:42:98:f4:11:f8:b8:c8:e0:89:64:81:
                    2a:7a:ee:b3:d8:5f:a9:0f:96:41:f8:21:9a:10:1c:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0B:70:AD:6F:EF:D5:25:7F:FF:5D:55:75:57:3A:4D:01:E4:41:D2
            X509v3 Authority Key Identifier:
                keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:7e:60:85:25:cc:3b:f8:5b:a6:3b:80:90:88:f3:52:c9:
         ae:c6:ca:52:c2:50:b0:4d:cf:74:d6:5a:d6:94:a8:40:b0:12:
         86:7c:4b:09:03:59:6c:bb:5a:18:9d:14:b6:aa:2f:1f:a5:0f:
         9e:43:31:4f:f9:05:f0:da:ae:66:79:61:57:5a:3c:a3:50:e7:
         c1:a9:42:a0:68:40:da:01:7c:52:c6:da:d0:37:7c:85:82:21:
         b1:15:88:f5:16:4f:2e:c4:b5:02:31:7d:89:1a:1e:3d:fa:f9:
         95:28:83:ff:6f:b3:eb:f6:0f:6b:27:69:9e:2d:46:ee:c2:99:
         ab:ff:5a:02:2b:fa:2c:14:77:d3:ac:54:19:11:97:2d:b1:d2:
         a4:fe:d8:c6:9a:92:93:c2:80:58:fb:b1:9b:1e:97:77:a4:f1:
         d7:e1:37:78:7d:75:79:55:a7:0a:88:d4:13:c6:61:7f:27:6d:
         7d:2b:40:80:64:8d:c5:a6:e5:ca:da:2e:3b:ba:0b:0a:eb:05:
         e1:cf:7a:66:d2:c2:83:fe:0b:86:0f:e8:f2:ad:8f:87:27:7c:
         f5:c6:71:0e:65:82:ab:2d:0b:39:6a:cd:47:b7:a2:b4:51:79:
         4c:74:58:ef:7d:44:e8:a3:df:cc:70:5a:3c:11:2a:38:33:ab:
         61:c9:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:29 2025 by rpki-client