Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File:                     EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier:          zu+7gWg1GO5Yw/8W1DC50+Zt+VP/yQ1ULoOoSUm9b80=
Subject key identifier:   86:46:31:62:D2:B0:6F:4F:8B:75:4D:B8:C2:44:1D:BC:41:5A:81:9D
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer:       /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial:       0197493167C5D67221A4DFD20A33EA079C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number:          150D
Signing time:             Sat 07 Jun 2025 07:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:03 +0000
Files and hashes:         1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: cFSloimfx/P+6QX57CcQB6J6nUJ3S8e3trGqDqT4D4c=)
                          2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:67:c5:d6:72:21:a4:df:d2:0a:33:ea:07:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
        Validity
            Not Before: Jun  7 07:01:03 2025 GMT
            Not After : Jun  8 07:01:03 2025 GMT
        Subject: CN=86463162d2b06f4f8b754db8c2441dbc415a819d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:7e:82:c6:dd:6f:55:4d:a9:ee:bc:49:8c:
                    63:8a:bb:bf:ee:c4:70:27:03:d5:64:dd:27:09:4f:
                    fe:03:2c:be:b0:f8:f6:04:ba:91:1c:55:6f:aa:2d:
                    ac:bf:5e:5b:07:1c:cc:13:d8:4a:13:6b:a0:21:6f:
                    54:59:d7:6b:df:37:7e:ae:49:f9:6c:f4:b1:0f:51:
                    30:9b:4e:46:92:7b:30:34:cf:64:98:1f:b6:0e:87:
                    4e:93:68:65:f4:86:86:48:71:74:6c:84:11:e1:89:
                    30:09:8c:6f:0e:59:09:ad:aa:97:70:cd:ae:4e:7e:
                    bf:5b:c4:6a:18:97:3e:e3:5c:f9:20:95:94:74:bf:
                    c3:a4:3e:a8:59:63:5c:ab:16:ae:16:75:5a:38:84:
                    d0:de:b2:b2:89:c1:77:0c:d7:52:09:a4:b6:ee:99:
                    78:bf:6d:01:cd:fd:31:87:1a:10:d2:8c:e3:7f:74:
                    0b:28:4a:15:5d:78:9d:41:90:78:3b:6a:15:08:f5:
                    2d:78:3b:72:97:5b:df:a7:dd:c1:d8:e5:fc:77:1a:
                    12:32:2c:10:9d:f9:7b:e4:47:02:16:7a:e8:8e:7c:
                    cf:2f:ba:6f:50:49:9a:66:11:28:a1:1d:fe:b6:32:
                    47:71:36:38:2f:85:b4:bd:5a:21:91:ed:60:00:65:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:46:31:62:D2:B0:6F:4F:8B:75:4D:B8:C2:44:1D:BC:41:5A:81:9D
            X509v3 Authority Key Identifier:
                keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:e5:01:31:6b:9b:d2:64:f0:7e:3e:1d:bc:b3:63:91:90:
         8a:b0:04:5a:dc:2b:2b:ab:6e:00:57:76:19:c7:6c:54:a3:3e:
         aa:b5:4e:f3:85:aa:08:20:41:9d:d4:72:8e:7d:b1:c7:b5:12:
         b8:1f:dd:43:79:74:4f:17:e5:03:60:61:8a:3d:32:13:53:01:
         7a:0b:2a:08:b3:99:91:6a:c1:21:96:52:c4:ec:c0:ba:f7:f5:
         8c:39:a7:6a:74:6f:68:64:9c:79:22:8f:76:15:5a:89:9d:93:
         a7:81:15:4e:a5:6a:f3:31:52:14:c4:68:94:f0:76:f7:33:bd:
         48:e2:b8:83:b9:f1:58:aa:29:55:2e:f8:2c:c5:4f:53:e4:b6:
         32:5a:22:b1:09:39:41:9e:25:44:8d:aa:5f:dd:6a:2b:8e:66:
         ad:03:b2:78:2c:53:e9:3d:b1:2b:b2:29:e9:2b:c1:7f:f5:97:
         de:74:64:7e:e3:39:42:61:a0:60:27:20:a4:34:f7:c4:97:06:
         2a:7e:3d:ac:32:0e:af:a6:cb:43:dd:4c:cc:bd:34:d9:32:2b:
         18:2c:c8:ce:23:85:99:27:5c:d6:06:c1:e1:92:36:eb:f5:10:
         77:ec:b1:8c:f0:b9:51:24:d6:58:c2:0c:1e:42:4a:bd:d4:f2:
         a0:f5:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:40 2025 by rpki-client