Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
File:                     T5AEs7-KHhe9YGbgUYltO-vWaXM.mft (raw, json)
Hash identifier:          op692VPeLbeVXWgfdvLnoJayIgSYbScxszc2Pq26tuY=
Subject key identifier:   27:08:FA:F2:6D:E0:E3:9C:3A:47:44:B1:91:43:DC:7A:A3:DC:9D:A3
Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73
Certificate issuer:       /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
Certificate serial:       0197493173299DE05F0A3D6313EF7E485512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
Manifest number:          EF
Signing time:             Sat 07 Jun 2025 07:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:06 +0000
Files and hashes:         1: MtCu6sFrD1432kk0IRfc5KNTGfc.roa (hash: mq6V3hOgU2VesW7dh8aKsr7RVyaB9UHKkJnet/uS01g=)
                          2: T5AEs7-KHhe9YGbgUYltO-vWaXM.crl (hash: InbEk7DOCuq67ELAoOvSSbAGADsKh6mPDTwURnE/G+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:73:29:9d:e0:5f:0a:3d:63:13:ef:7e:48:55:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973
        Validity
            Not Before: Jun  7 07:01:06 2025 GMT
            Not After : Jun  8 07:01:06 2025 GMT
        Subject: CN=2708faf26de0e39c3a4744b19143dc7aa3dc9da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:b5:2d:af:dc:d9:83:d2:07:65:21:0f:36:
                    e6:33:d1:1d:e0:88:6b:13:6d:16:30:ec:a8:1e:e3:
                    ba:70:82:32:7f:11:e3:73:7b:53:28:00:18:19:d3:
                    af:d6:d0:da:ba:88:43:c9:a6:66:91:ef:db:e8:da:
                    5d:91:50:59:e7:87:b9:19:34:62:e7:8e:3b:b6:57:
                    75:15:b4:eb:78:83:d8:72:60:87:a8:ba:b1:ff:05:
                    43:4b:40:8f:3c:7e:4b:ac:1d:b8:2c:12:2d:47:1b:
                    75:66:30:5f:09:c2:a4:e4:b1:74:74:75:12:7b:6e:
                    e6:ee:f2:8e:11:7d:86:df:62:7d:fd:10:6a:3d:b1:
                    c2:47:77:ba:6c:bd:a8:c5:48:d2:7c:e6:92:ad:f6:
                    31:64:97:42:99:71:5f:d3:d5:ec:8a:22:84:77:a0:
                    44:be:ca:63:91:10:55:5e:02:5f:92:f5:3f:94:81:
                    01:64:97:c0:8c:0e:76:b7:2f:21:da:1d:5f:06:d3:
                    94:8a:15:a3:2a:91:11:66:ab:4c:1f:7c:c6:86:e7:
                    9a:1b:2f:fe:4b:b1:9b:4e:82:30:b0:fd:19:a6:ec:
                    a0:af:72:b9:0d:e1:2b:a7:4b:63:50:2f:81:0e:99:
                    00:67:9c:e5:2f:41:e6:d2:9a:01:b1:c3:07:c2:42:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:08:FA:F2:6D:E0:E3:9C:3A:47:44:B1:91:43:DC:7A:A3:DC:9D:A3
            X509v3 Authority Key Identifier:
                keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b4:e2:8c:cb:09:f8:0b:98:26:98:c0:67:6f:9e:cb:09:e5:
         87:c0:31:c9:8d:04:0e:43:1b:60:52:71:b9:1b:2b:f8:28:73:
         1a:07:e8:ce:9a:88:df:d9:7f:72:43:5b:34:5d:ac:02:97:34:
         2d:61:52:dc:a7:67:04:65:2a:be:f6:ef:dd:d5:38:0b:35:07:
         6e:e1:a7:89:09:82:68:9e:16:ab:ae:98:36:4f:15:18:52:71:
         05:7f:49:e8:25:3e:14:3b:ef:1e:11:a0:e5:86:78:ea:0d:a4:
         4b:33:21:07:6f:46:d8:d6:0d:b2:a2:6c:5c:80:98:88:76:b3:
         1f:97:8f:4e:35:de:c5:cb:34:1d:28:a7:98:2d:2b:6e:ee:2d:
         04:d7:eb:53:dd:89:a1:67:6c:c7:3a:36:5b:c6:30:0a:7c:8f:
         dd:0e:e1:e8:ef:ef:de:80:9d:79:08:98:09:15:00:13:05:52:
         a6:b5:5f:00:a4:ba:96:b4:6e:fa:04:94:2f:81:4b:19:59:0e:
         4a:84:03:2a:65:3c:e6:e8:40:1e:ee:52:37:98:9f:8d:95:65:
         52:4e:94:cc:e0:7e:d5:cc:ad:99:a6:30:9e:db:02:61:a7:4f:
         66:6e:b3:31:7e:f1:1b:2c:9e:db:40:e9:6c:8a:17:a0:88:63:
         ca:e2:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:15 2025 by rpki-client