Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
File:                     elUMgGW_YDP8xqOwOBPvknGSQZY.mft (raw, json)
Hash identifier:          IFRKrwlutHfIr+6lgPxlYoxjNxDllrAU6aHYypuOyVw=
Subject key identifier:   E1:4E:A2:8C:E4:2D:6A:F9:51:E9:0D:76:EE:5A:7C:5E:99:74:FD:8F
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Certificate issuer:       /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial:       019739F55A21267D17FFC38F27BBFDD3909C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
Manifest number:          09DE
Signing time:             Wed 04 Jun 2025 08:01:09 +0000
Manifest this update:     Wed 04 Jun 2025 08:01:09 +0000
Manifest next update:     Thu 05 Jun 2025 08:01:09 +0000
Files and hashes:         1: 8bm2v05Cci050GG81KJuy05pI_A.roa (hash: WQq4H/F9fltXEKAzp88xq0uJAhnzAkfYy8vG0Rs7Ric=)
                          2: MIcKbcX6sCg2UYL51k9PfAb2yXk.roa (hash: kvxBXVnEalI9jTyDI+HBKgmRDyoiQHFIPceL8IvKfYg=)
                          3: YJIMH9QhIPJ1Xktfo6oftVo9IE8.roa (hash: VvBURRBsPT2z47HjiEc1H7dnCFoGIcl2xyHs5PJifoM=)
                          4: elUMgGW_YDP8xqOwOBPvknGSQZY.crl (hash: LGC6bydQURajgG00fuK8Rod+m2OQvCDJbAMNA5W33Tc=)
                          5: lwcaxHGxZGYqPpFywMXAQis0_48.roa (hash: bvDYr9v7hEAaIJ3YVNoznlJECQRudV3izaNo7DTPlvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:f5:5a:21:26:7d:17:ff:c3:8f:27:bb:fd:d3:90:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
        Validity
            Not Before: Jun  4 08:01:09 2025 GMT
            Not After : Jun  5 08:01:09 2025 GMT
        Subject: CN=e14ea28ce42d6af951e90d76ee5a7c5e9974fd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:45:f0:4a:d0:e4:b9:77:07:0b:46:04:62:
                    ff:51:84:40:43:e2:63:f9:2f:45:5b:9d:2f:42:45:
                    1a:9d:1e:93:6c:95:55:34:d5:58:e0:a2:02:2e:a7:
                    38:28:54:0d:ff:7f:5d:b3:05:68:e9:b2:17:02:0e:
                    8b:64:53:01:05:08:4f:c6:f0:37:e3:1e:1b:6f:46:
                    45:02:38:93:a1:55:b8:ad:dc:a0:7e:5e:23:59:96:
                    98:d8:1e:a2:69:4e:62:2d:bc:91:25:64:31:73:52:
                    d2:7b:c2:7d:ec:71:8d:f5:38:ab:42:78:29:bb:6c:
                    44:d0:a7:de:db:17:a1:02:97:51:05:a5:50:ae:33:
                    7f:30:70:c4:22:0f:2e:79:d9:d3:04:be:8e:c2:f2:
                    6f:03:71:41:b7:c3:7e:48:9d:b2:7c:3c:79:75:6c:
                    f5:1b:0d:e5:02:e2:38:db:49:75:47:35:e7:da:3d:
                    b3:00:52:5d:67:b5:6b:38:b3:df:d3:84:e0:c8:48:
                    8a:e2:66:f7:86:a9:66:b4:73:e2:b7:b8:3a:55:5b:
                    e8:40:d0:fd:98:a4:f8:80:df:42:60:4d:a4:83:2e:
                    95:57:06:de:50:57:31:15:b3:1c:72:21:b4:45:76:
                    d4:9a:fc:41:e8:da:c3:3f:2d:d7:2a:42:ed:20:f2:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4E:A2:8C:E4:2D:6A:F9:51:E9:0D:76:EE:5A:7C:5E:99:74:FD:8F
            X509v3 Authority Key Identifier:
                keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:64:0d:1c:84:13:38:6d:20:cc:ae:d6:31:4a:32:ab:b1:ea:
         57:18:46:4d:a7:20:8a:9c:bd:87:48:0c:27:9d:0b:40:36:7b:
         ca:86:03:d2:d3:ef:62:9a:41:8f:2e:4e:ef:cf:aa:37:df:58:
         28:25:61:cb:74:76:cf:8c:fc:5a:cd:eb:92:d6:b0:47:24:ec:
         51:de:c3:6c:0d:b9:fd:42:d2:63:13:19:fe:4a:3c:23:7f:ca:
         82:92:08:2a:02:10:5a:21:ba:a6:40:ae:6a:2b:e9:02:18:68:
         40:f4:e3:cc:0f:e8:e6:d2:76:38:b5:05:c6:28:4a:31:e1:28:
         63:0f:d2:c1:ee:f7:ad:e6:07:e1:ce:50:43:64:dc:d9:3a:f9:
         bf:5c:57:98:8f:b0:3e:dc:d9:38:24:e6:a7:14:cd:a0:0c:81:
         43:ac:d3:1d:a1:ae:95:c2:1e:4c:cc:4b:59:a3:f0:27:e4:92:
         c3:eb:49:bf:30:aa:34:29:86:05:c8:c2:a9:b5:b1:1e:07:b9:
         91:8a:cf:44:41:48:cc:ed:a3:3f:d0:67:cf:42:82:be:80:b8:
         c3:c6:77:a2:01:68:fc:ce:e8:c9:0b:3d:3b:14:12:29:d6:38:
         2c:1b:59:5f:b0:db:b8:a8:a3:24:fa:20:90:0e:30:79:22:f4:
         a5:a0:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:50 2025 by rpki-client