Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
File:                     EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json)
Hash identifier:          8VRk4vbI2W4bcpqc4kKz0j/YfBtP8tLzmbujMrmPkIw=
Subject key identifier:   AA:A9:29:9A:89:14:9D:80:E6:7E:A3:A2:FC:9A:A0:AB:8E:E7:EA:46
Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
Certificate issuer:       /CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Certificate serial:       01974A7AC6E9A3D7DA83CDF7BB9A7E63D1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
Manifest number:          10FA
Signing time:             Sat 07 Jun 2025 13:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:49 +0000
Files and hashes:         1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: +ToE/Pc6igYw1y1yx5RZLyie5Th1b2DBOIpvcr6egTg=)
                          2: VxIYrmkfaudMi3uvOgmfLEYS9i4.roa (hash: HVOJKOfT05YM4fO+NpvciBLZRFLtFXYsLyo0g2RCD3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:c6:e9:a3:d7:da:83:cd:f7:bb:9a:7e:63:d1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82
        Validity
            Not Before: Jun  7 13:00:49 2025 GMT
            Not After : Jun  8 13:00:49 2025 GMT
        Subject: CN=aaa9299a89149d80e67ea3a2fc9aa0ab8ee7ea46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:80:16:69:28:f3:07:54:f0:28:5e:4a:6b:
                    5a:ea:ec:7d:1c:53:a1:64:7b:90:b1:a3:12:ba:ec:
                    30:2b:cf:d7:9a:f5:5b:28:0d:b5:8c:65:1b:6c:13:
                    5b:25:60:cc:68:da:ca:4e:e3:19:0b:f9:97:eb:3c:
                    27:9a:7f:c7:38:6a:4e:26:7d:43:46:24:d9:b4:58:
                    a6:ba:43:ac:19:0b:40:01:25:cd:da:c3:8b:31:75:
                    ad:df:e4:74:a4:75:67:a5:e7:a2:b0:b4:4e:6b:29:
                    5f:07:69:96:d7:91:61:94:1c:92:7f:ed:f3:9d:fa:
                    3d:c9:38:c0:9c:03:b8:29:85:02:c3:1b:2b:68:b1:
                    82:77:ba:8e:34:97:af:92:21:f4:0e:3f:72:c7:cd:
                    2a:cd:2b:ce:55:6b:2a:84:23:ce:2c:26:f5:9c:02:
                    e9:d1:64:b9:55:48:2f:c3:99:c5:89:38:f0:cf:19:
                    03:4f:bf:15:f9:ba:a0:f8:c6:9d:1f:97:4a:f2:02:
                    26:4e:e7:f6:d1:75:df:64:3e:8e:ba:89:78:ce:42:
                    62:ea:e9:b1:93:56:69:44:f7:ce:f5:7d:f8:47:48:
                    0c:47:3f:96:53:01:6d:b2:46:35:cf:ff:78:65:99:
                    84:2d:38:8e:ad:67:e1:51:8a:2b:ea:9b:97:86:ce:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A9:29:9A:89:14:9D:80:E6:7E:A3:A2:FC:9A:A0:AB:8E:E7:EA:46
            X509v3 Authority Key Identifier:
                keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:ec:d6:b7:bf:0a:05:f3:e5:20:de:bf:6d:56:0b:03:0d:
         43:ce:8c:69:65:a1:78:96:42:cd:e8:a4:c3:45:48:52:b8:62:
         64:94:82:d0:d0:f3:12:d0:73:15:66:43:34:d9:e5:ad:25:a1:
         2b:c2:9f:d6:a8:d9:98:f2:9a:d8:8b:cc:8d:14:68:f7:bc:c6:
         d5:a3:db:10:cf:e7:99:6c:5e:2f:cc:e4:da:14:e7:e7:bc:43:
         06:f4:04:40:49:d1:e1:03:07:33:02:c7:de:00:3f:9e:3a:91:
         ac:cf:f7:79:c2:f5:31:2e:0f:ed:49:56:4c:fe:c6:f4:94:11:
         a8:c2:91:7a:5e:be:2c:68:1c:0c:31:2f:79:e0:4e:5d:4f:e5:
         45:0c:c6:3a:ac:05:93:8e:a4:6b:e4:8a:e8:d4:2d:1f:23:2f:
         41:87:21:3e:00:59:2e:ab:19:87:42:34:0b:72:a9:63:42:ff:
         7a:3e:e8:1c:cb:5c:1b:07:4f:f9:0e:c1:64:4c:c4:4d:96:c0:
         7c:3c:ab:3b:43:ed:90:f3:3b:8a:a1:3d:89:ef:98:58:a0:da:
         21:47:8c:f1:d2:17:a2:a9:eb:98:20:09:68:a3:9e:e4:44:9f:
         a0:31:f1:56:67:cf:f2:e1:78:ad:7b:33:e3:aa:0d:00:9a:3f:
         7a:10:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:43:26 2025 by rpki-client