Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File:                     e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier:          5YuqCkZd03bWf/jX4ES3mvHu5tgu0OwhcR96fJhos08=
Subject key identifier:   57:F5:4D:A3:31:3E:69:2D:B0:3A:E9:25:5D:81:40:61:64:92:9F:50
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer:       /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial:       019747E750143DB4673B70A12246C94B7AF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number:          09D8
Signing time:             Sat 07 Jun 2025 01:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:30 +0000
Files and hashes:         1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
                          2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
                          3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: 3iN8FcoxgbvBDD62JEZdkBCE7uW2EU/mw3/j4wgl2iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:50:14:3d:b4:67:3b:70:a1:22:46:c9:4b:7a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
        Validity
            Not Before: Jun  7 01:00:30 2025 GMT
            Not After : Jun  8 01:00:30 2025 GMT
        Subject: CN=57f54da3313e692db03ae9255d81406164929f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:b9:13:60:97:c5:49:99:b8:f3:b6:30:6d:
                    c7:6b:15:86:74:df:ef:6e:e6:d0:12:fb:56:a2:b2:
                    6c:03:90:81:3f:96:5d:63:b7:8f:41:d9:61:a4:90:
                    65:e7:e7:7e:9f:ee:98:c9:f4:c4:a1:b9:7d:29:31:
                    af:a4:b3:45:64:92:9e:bb:df:ab:bd:85:99:4e:de:
                    9e:fa:50:81:1d:e7:6a:98:8d:c1:9e:c6:f0:34:13:
                    f3:b0:a2:a6:37:a2:41:86:8d:bb:22:4c:2a:56:b3:
                    a5:64:d0:03:68:bb:6b:36:ea:10:6f:61:5b:8f:be:
                    ac:a7:cf:42:bb:00:6a:b7:f4:dc:32:1b:33:ab:e5:
                    2c:92:5e:af:f5:2a:6c:13:ff:f9:02:4c:3d:f6:f1:
                    13:82:e5:8d:a6:41:87:c8:b0:b9:92:eb:0c:8e:41:
                    d9:b8:bd:2a:7e:fc:64:62:30:c3:2a:d1:29:b5:ed:
                    e1:da:ee:fa:ee:e7:14:f8:7f:cc:cb:c9:1d:a9:ca:
                    c1:c2:78:ce:1e:38:e5:2a:9c:a5:f6:e7:4a:f4:5b:
                    ba:7c:d1:92:7a:40:11:c7:a0:54:b0:c3:3e:46:43:
                    77:fa:ee:2a:09:68:35:19:62:72:db:99:52:e0:8e:
                    d1:0c:e0:82:d1:16:c9:ea:74:3a:19:0b:ee:2c:5c:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:4D:A3:31:3E:69:2D:B0:3A:E9:25:5D:81:40:61:64:92:9F:50
            X509v3 Authority Key Identifier:
                keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:80:0c:b1:e5:5a:0d:ee:0a:49:8d:d3:37:13:25:cf:1e:
         bd:8f:25:4c:61:1c:12:70:14:e4:05:bc:e2:e9:6b:15:dd:58:
         85:4e:21:29:e7:c8:ab:f6:f4:ec:56:4a:a8:c6:7c:95:d6:e8:
         b4:59:41:81:61:73:9a:fe:05:47:9b:2b:39:0d:7b:f9:d8:a9:
         43:03:66:ef:1d:31:a0:33:65:90:e5:8a:ac:58:85:14:02:fd:
         bb:d5:ca:7e:2b:e1:1e:c7:a5:ec:67:ab:ec:7e:bd:69:46:81:
         c7:cd:9f:97:2d:1f:07:0f:63:bc:c2:7f:a3:67:9b:9d:5f:d1:
         e4:4f:0a:e2:22:11:c5:d2:17:6c:d4:23:39:e6:fc:3a:ae:19:
         0f:c1:69:3f:53:53:1b:94:d4:67:18:c2:30:d4:77:6d:64:15:
         ec:34:58:6d:a7:54:7f:c6:5b:94:34:d5:f8:ac:07:11:e9:5c:
         fd:d5:17:a0:d7:a3:ff:5a:1f:4f:d6:54:13:a1:de:d1:ca:fc:
         47:58:30:18:d7:b6:25:38:ad:6e:d4:00:0c:7f:5e:06:87:ea:
         31:ac:78:d0:f5:c4:a6:43:6f:6d:e2:09:e7:f5:fd:58:fc:54:
         91:75:8f:2e:53:88:ae:b6:a5:f5:41:e9:85:96:72:d8:71:26:
         21:b5:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:51 2025 by rpki-client