Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File:                     E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier:          AuQkob0Vt8rYZntUPkLFpc7/NtJAPkpn1KEMlk7xlw4=
Subject key identifier:   B6:D7:C3:B3:5D:82:DA:7E:BA:59:F8:D0:54:7A:90:F6:D4:9D:CD:E1
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer:       /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial:       0197458B09842C1A08A444F0DCBED002C0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 14:00:29 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:29 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:29 +0000
Files and hashes:         1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: o6UAOoZbd/sg5TJH6sGezmxyNg7tmIFBoFvlp2lTaSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:09:84:2c:1a:08:a4:44:f0:dc:be:d0:02:c0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
        Validity
            Not Before: Jun  6 14:00:29 2025 GMT
            Not After : Jun  7 14:00:29 2025 GMT
        Subject: CN=b6d7c3b35d82da7eba59f8d0547a90f6d49dcde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:d5:59:da:6a:bd:9f:52:ff:67:63:1c:d0:
                    fc:4b:33:e9:30:73:c7:37:a6:95:61:80:3b:29:1e:
                    5e:bf:c4:8b:31:86:90:53:30:fa:13:c5:cd:6a:a7:
                    d0:94:48:36:d7:5a:4d:18:bd:89:eb:43:eb:09:8c:
                    c3:12:31:0f:54:21:c0:01:f2:a9:5a:e6:f9:bb:9d:
                    45:fe:6d:18:f4:6c:d9:72:3c:bb:e1:c9:15:f0:01:
                    6d:b3:b0:34:64:54:4b:84:73:66:16:78:99:b2:68:
                    8e:84:50:d3:81:2a:86:64:0b:0f:5c:8f:55:23:1c:
                    ea:38:69:58:71:f8:73:eb:39:d3:78:71:36:b9:3a:
                    c9:11:01:f0:ae:7f:e3:3c:6d:5f:82:23:d8:c2:02:
                    14:64:3c:e8:d3:16:d8:e2:76:99:22:75:58:4e:d6:
                    0d:fd:81:c2:70:d4:7c:39:68:91:f3:52:fd:7a:5b:
                    55:01:52:92:bf:5c:54:36:42:51:ba:23:30:5e:13:
                    63:dc:31:8b:19:ce:32:9c:88:dc:eb:4b:3b:27:d5:
                    97:db:96:47:f9:48:6f:a1:c8:db:54:5b:2a:a7:fe:
                    40:05:05:b5:ad:94:7b:08:95:3a:6e:e1:1d:20:84:
                    27:17:59:63:04:e1:6c:58:f5:dc:65:4d:0e:07:88:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D7:C3:B3:5D:82:DA:7E:BA:59:F8:D0:54:7A:90:F6:D4:9D:CD:E1
            X509v3 Authority Key Identifier:
                keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:43:47:f0:78:e9:6b:98:02:3e:6b:31:c5:87:67:29:22:17:
         bb:4c:af:d9:7d:04:3c:42:40:d7:a9:e4:35:51:7e:97:27:82:
         b1:e2:bb:ed:3f:28:60:8d:53:35:2e:85:9d:4c:8f:8d:78:c9:
         80:8b:c6:c5:31:a3:70:11:6a:ff:cf:32:a7:17:b2:95:a1:30:
         95:65:29:e3:ac:ba:88:97:70:00:9a:77:2c:e9:7d:50:7d:af:
         24:db:b8:e4:6e:f4:94:4d:84:2e:ba:92:50:b7:02:f9:02:60:
         0c:1b:f4:da:ce:0a:24:cc:b6:84:90:c7:5e:b8:f2:81:5d:4d:
         98:3a:b9:19:ac:0b:70:b0:96:d8:14:ae:51:90:8b:f5:cc:4c:
         d0:ad:c5:e0:8c:ca:24:af:92:9e:f6:88:de:0c:03:ba:60:a6:
         f0:64:7c:06:42:f0:40:c0:14:4e:38:a7:5f:29:e5:c9:81:ad:
         44:eb:18:05:55:ab:2b:42:ec:7b:a2:ee:27:00:f5:dd:f2:6c:
         59:bf:5e:ac:a9:a9:fb:bb:f5:db:19:8c:24:fa:c8:61:85:f6:
         25:e8:08:34:be:ba:ed:ba:26:01:cd:ce:aa:38:9c:d4:69:3d:
         30:c5:b2:3d:f6:7f:3e:74:3a:ad:5a:ce:7e:86:e8:eb:a8:91:
         10:a4:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:13 2025 by rpki-client