Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File:                     xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier:          n3MOcPChWjVP7wG3SbCnqm8pROQTQ1cNv6OD5T449N0=
Subject key identifier:   E1:DA:24:00:2E:38:F0:A4:4B:A4:13:A6:26:7F:9F:10:73:5D:E0:8D
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer:       /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial:       019758DAE9CB128CDE1DEBEC2145CF324661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number:          025F
Signing time:             Tue 10 Jun 2025 08:00:31 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:31 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:31 +0000
Files and hashes:         1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: /UtzSMHC0yHjpBAqu2S/w/KMvIflYOPEJ/9iOV1GsqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:e9:cb:12:8c:de:1d:eb:ec:21:45:cf:32:46:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
        Validity
            Not Before: Jun 10 08:00:31 2025 GMT
            Not After : Jun 11 08:00:31 2025 GMT
        Subject: CN=e1da24002e38f0a44ba413a6267f9f10735de08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:92:a5:e1:c7:b6:58:38:6f:2f:5e:22:b2:
                    46:8c:73:c6:31:24:8a:ae:6d:33:31:f7:94:4c:7f:
                    3c:37:49:56:a0:e4:26:9e:a5:f2:fd:0b:cf:93:af:
                    01:b0:46:6c:a6:56:c0:1b:fc:52:00:14:6a:fe:ee:
                    d3:c0:17:2e:e6:93:14:de:92:7e:25:1c:f9:aa:22:
                    ef:7e:ad:eb:02:a7:79:f9:bf:87:e4:5b:84:62:ef:
                    c3:21:7c:5e:49:f2:0d:ac:ed:40:5d:61:1c:bf:12:
                    2b:d8:2e:05:ad:0b:54:04:4a:4a:1c:b2:e6:4a:0a:
                    da:8f:d3:62:1a:16:a4:7c:39:cf:e3:c9:42:03:e8:
                    fe:a5:0d:47:a8:b5:c6:71:58:a7:65:fc:77:c1:69:
                    f0:c1:e2:ed:30:5e:fe:da:eb:f1:ab:0c:db:0e:e1:
                    89:85:18:26:3a:f1:90:49:90:12:a8:2a:03:cc:f5:
                    c5:61:34:93:3c:f8:83:6b:00:f8:21:f3:27:b9:dd:
                    ec:75:5b:33:e9:93:e2:75:d0:fc:b6:d1:a8:f7:f4:
                    8a:df:84:5d:85:ab:3a:46:0f:8e:25:14:ec:ec:e3:
                    bc:47:a6:3a:07:86:af:82:9d:38:df:e7:59:ba:4a:
                    e7:ea:ce:31:33:44:86:2e:90:2e:14:e6:de:a9:97:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:24:00:2E:38:F0:A4:4B:A4:13:A6:26:7F:9F:10:73:5D:E0:8D
            X509v3 Authority Key Identifier:
                keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:e6:26:de:5e:cc:b0:e8:06:ed:ad:74:1e:d4:c6:cc:ba:
         1f:a9:aa:34:35:cc:b5:ef:2c:f0:16:6a:2c:1d:fb:b4:ae:d5:
         14:89:82:23:9d:18:f4:8c:47:bc:15:a3:a4:f6:ec:ec:df:7d:
         05:a5:01:df:11:a3:0a:33:2a:5d:23:cd:3b:35:97:22:cd:ff:
         9b:5e:a2:10:f8:c0:0e:63:25:a1:4b:8b:02:40:26:dd:12:95:
         b3:4d:38:1b:74:ec:24:89:0d:d0:91:1d:ba:a5:d9:9f:14:43:
         8d:75:d4:11:6e:68:1a:8d:cd:ca:6b:20:00:16:52:aa:d4:53:
         d3:cb:3a:d8:14:dc:6e:22:b7:b4:e9:d8:b5:f6:a5:64:31:14:
         a0:42:90:20:82:18:6d:43:01:9d:8b:5b:0c:2e:03:3d:80:33:
         56:bd:9a:d9:d1:c4:bd:b7:de:9e:2f:2e:08:3b:f4:b1:e9:bb:
         75:30:fa:da:19:f7:0b:d1:0b:59:bb:f7:53:8b:f1:80:33:69:
         85:12:b2:70:65:ba:93:4d:a4:59:f3:91:56:3d:20:0a:d0:28:
         5f:20:72:bf:c5:13:85:9d:08:39:c4:cc:fb:94:6a:e6:74:80:
         44:1c:7c:82:0a:1f:f6:d3:7f:af:f9:35:a6:50:6b:13:46:1a:
         49:04:08:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:15:47 2025 by rpki-client