Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File:                     eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier:          cjLOQ5V88M6NotlJOHD1PY2OMP20bAc1UHz7fZdeGco=
Subject key identifier:   C1:55:91:A7:BF:E8:FF:C9:24:42:54:40:A9:8A:F7:AF:7F:75:E6:B8
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer:       /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial:       01974D0DE3C44DB51DCF1BC45FAB3BEEBAE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number:          157C
Signing time:             Sun 08 Jun 2025 01:00:45 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:45 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:45 +0000
Files and hashes:         1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: SlCx7wSE1zCTeGd3n5SnawiZfY6PbSiHVZRhSpwx+ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0d:e3:c4:4d:b5:1d:cf:1b:c4:5f:ab:3b:ee:ba:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
        Validity
            Not Before: Jun  8 01:00:45 2025 GMT
            Not After : Jun  9 01:00:45 2025 GMT
        Subject: CN=c15591a7bfe8ffc924425440a98af7af7f75e6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:4a:ae:e4:c2:e1:86:fa:6c:77:50:24:e4:
                    eb:92:2f:c4:9e:f7:da:15:20:dd:49:e8:ce:82:06:
                    fe:29:16:33:d9:24:f1:a3:76:7d:85:9d:79:d5:10:
                    9d:2c:e5:e7:bb:ca:a9:e7:e5:c3:d1:4e:61:36:78:
                    cb:12:2e:41:0f:98:e1:05:d0:64:ce:43:ea:39:e7:
                    8e:5e:4c:2b:8a:4e:c5:16:cf:85:c4:2a:2b:6c:5c:
                    fe:a7:89:71:61:dc:22:00:7f:97:0e:48:60:5e:91:
                    3f:43:c3:23:d8:b6:7c:a5:1f:14:e9:11:20:9e:cd:
                    d4:6a:42:da:23:84:c6:ac:d6:d1:83:e8:4f:f9:d4:
                    b6:5c:ce:b9:27:c5:23:f2:fe:03:8e:c0:d5:41:0f:
                    d7:ca:d9:b6:1b:40:ff:3d:9a:99:95:d6:f5:fe:51:
                    66:28:6b:5a:47:d3:68:e8:36:c9:70:e0:3e:94:5c:
                    9f:1e:21:6b:f2:e5:b1:1d:e8:27:64:09:05:cf:25:
                    89:ce:2f:8a:fa:b4:e8:ce:aa:de:8c:9d:05:90:77:
                    6d:9b:46:6d:d0:2f:f4:ea:44:7e:74:8f:e6:19:23:
                    1f:a8:5e:83:f9:48:b0:08:b5:6d:b2:2b:93:31:74:
                    41:c0:81:f4:9b:28:99:23:24:f6:c6:1b:f2:bd:bc:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:55:91:A7:BF:E8:FF:C9:24:42:54:40:A9:8A:F7:AF:7F:75:E6:B8
            X509v3 Authority Key Identifier:
                keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:03:f9:2d:81:71:0f:60:00:2b:73:b6:6b:d6:9b:bf:ee:c8:
         77:be:42:1f:29:20:8b:2f:39:2f:8d:4b:da:09:46:19:c5:72:
         00:87:2a:c8:ad:25:2c:3a:b6:09:df:0a:99:6f:71:65:3d:18:
         44:1e:07:4c:3f:9d:ab:34:c6:b8:4a:3b:6e:a7:17:45:c4:f5:
         54:12:d9:7d:ea:54:51:25:d1:27:af:25:7d:c9:63:29:55:e3:
         03:b2:fa:3e:13:75:c7:34:87:d7:30:bb:ef:b6:6a:45:4a:a4:
         20:cd:06:b4:38:2d:8d:fe:f8:24:a1:36:ba:83:ab:8b:0c:52:
         27:5b:a4:5e:5c:33:fe:42:bd:2d:41:78:eb:6d:08:b6:59:b5:
         c2:1f:fd:cc:d1:24:be:54:23:88:90:b9:c6:07:cd:64:5a:b6:
         81:52:b9:a3:c2:fb:27:3b:87:3d:f9:9c:fa:30:56:16:78:33:
         50:bf:b6:d5:02:bf:94:0a:8a:5b:b2:13:7c:b2:c9:11:c8:17:
         21:04:87:35:c9:32:5a:7b:65:af:df:72:4c:9e:6c:6d:4e:7f:
         6c:6e:c9:53:27:87:9d:07:3e:72:40:78:1b:7b:f8:c3:bc:3b:
         ea:b5:0d:ac:cf:fb:f0:3d:fd:04:0e:91:7c:e6:c5:35:a3:c0:
         39:9a:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:45 2025 by rpki-client