Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File:                     _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier:          f7G+huozmmi8Ws8di4EO5sbtI6qQFrtslblWHHCnxo8=
Subject key identifier:   55:5E:DA:E4:7F:B1:A8:47:5E:2C:E2:36:8F:14:18:F4:89:E8:77:7C
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer:       /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial:       0197594926F61FF93DBA798EFB6A9FE9D2A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number:          12EA
Signing time:             Tue 10 Jun 2025 10:00:55 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:55 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:55 +0000
Files and hashes:         1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: rAUKdIPhmI2aDuI/FYyUpetF4g7r+E2a3K3hu4e51lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:49:26:f6:1f:f9:3d:ba:79:8e:fb:6a:9f:e9:d2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
        Validity
            Not Before: Jun 10 10:00:55 2025 GMT
            Not After : Jun 11 10:00:55 2025 GMT
        Subject: CN=555edae47fb1a8475e2ce2368f1418f489e8777c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:3b:79:df:d0:40:4e:b6:c5:ad:8c:ee:dd:
                    63:2c:c2:36:b8:09:d1:cd:f8:7a:11:f1:c5:15:9d:
                    5f:66:ef:1f:b7:ee:4d:8b:f7:c5:50:c6:d2:81:90:
                    e9:25:33:b4:e2:77:04:16:84:94:b4:0e:a1:f0:c5:
                    c1:30:ae:0b:c9:6e:6b:e7:47:09:99:55:67:80:da:
                    de:7d:ab:f1:bd:7c:aa:f3:78:56:a3:60:6b:d3:82:
                    1d:91:2b:a5:88:5f:5b:58:43:76:38:c0:de:54:ef:
                    96:6f:7f:49:36:27:c6:11:2c:e2:df:b9:20:fe:34:
                    e5:e5:76:65:c5:11:47:c8:64:68:84:9c:0c:d8:07:
                    94:3d:32:7b:52:f4:a5:ed:5f:dc:70:84:0d:6d:94:
                    ba:cd:af:43:9e:72:c9:50:20:f9:c2:9c:31:02:6d:
                    b2:7a:c3:5c:83:5e:eb:e6:86:4d:14:2b:d7:7e:98:
                    77:cd:32:7f:c1:57:6a:aa:63:a5:4f:2e:68:b4:ea:
                    56:63:6d:13:db:2d:29:ae:0b:4f:2b:44:5e:f6:0f:
                    0c:3d:0e:f4:7d:ca:c5:10:ab:26:19:20:66:f5:48:
                    0d:9e:f7:5b:15:fd:9d:bf:51:e3:3f:ad:5a:d3:d8:
                    a0:f8:86:b5:27:fe:5b:5c:24:e4:1b:93:6d:a0:46:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:DA:E4:7F:B1:A8:47:5E:2C:E2:36:8F:14:18:F4:89:E8:77:7C
            X509v3 Authority Key Identifier:
                keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8a:a1:3d:34:3e:4f:99:29:7c:eb:ed:ca:1d:3e:55:09:cd:
         36:d0:87:bf:99:7c:c3:c9:f4:b8:cd:85:37:20:cf:d5:54:c9:
         09:29:74:b7:3e:f7:1d:54:f6:42:c4:f9:f8:a1:40:2c:50:95:
         9a:8e:7f:9d:d4:bf:06:07:cf:bf:6c:e5:8d:1b:3c:b4:15:48:
         57:43:af:f2:5f:fb:0d:fd:cf:b3:3d:08:ec:17:99:e7:85:6f:
         ac:e7:16:c6:a4:db:bd:de:b6:c3:ca:6a:3a:f3:b0:cd:57:4a:
         a4:09:68:6b:4e:38:dd:ba:e0:fa:48:28:1f:72:a6:22:02:68:
         40:c4:74:24:a9:98:d8:9b:b7:ec:f1:10:cb:e1:cc:28:5c:79:
         36:53:75:ee:a8:76:cb:68:d8:c5:4f:68:7c:b3:ef:12:1e:3a:
         6e:9a:71:95:74:fb:30:d6:fc:60:87:48:3b:fe:b3:6a:87:7e:
         d6:b6:62:00:8d:67:83:07:f6:c1:dd:c5:4f:91:d8:dd:2b:d3:
         14:75:0b:1b:90:58:3b:6c:48:ff:39:ce:4b:3c:a5:43:6a:9b:
         f9:c9:70:6d:40:ab:73:fd:14:57:88:d8:24:f7:b0:62:e5:82:
         db:a1:6d:3c:3b:82:a5:9e:a0:00:8b:77:95:8c:05:d6:b2:65:
         6d:2c:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:32:41 2025 by rpki-client