Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File:                     62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier:          r7CVC02Ekh4poCTYImaiavTei1Dk5dOoj480V7ImtSA=
Subject key identifier:   76:17:FD:40:FA:7F:0A:18:63:7A:E4:8F:55:ED:AA:DA:3C:20:9A:16
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer:       /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial:       01974CD69CDB02EB18BA6738F36B27B32560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number:          09AC
Signing time:             Sun 08 Jun 2025 00:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:22 +0000
Files and hashes:         1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: fgnEMr0Az2mzcbWpT2G/K0mBb3qe9QMNQvCBReGEG04=)
                          2: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (hash: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:9c:db:02:eb:18:ba:67:38:f3:6b:27:b3:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
        Validity
            Not Before: Jun  8 00:00:22 2025 GMT
            Not After : Jun  9 00:00:22 2025 GMT
        Subject: CN=7617fd40fa7f0a18637ae48f55edaada3c209a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:e0:03:54:c5:23:e7:d6:8b:f0:77:85:46:
                    fd:b3:46:55:5a:7d:8a:94:ab:1c:da:94:ac:54:a3:
                    71:db:e3:1b:93:c3:aa:6e:89:c0:1f:2a:4a:39:19:
                    57:86:20:44:74:04:3b:d1:3e:f7:a7:da:76:d9:34:
                    ae:d1:83:e7:b1:95:7d:b5:45:b6:f1:d8:d2:22:be:
                    f1:4b:ec:d9:15:13:e9:ee:fd:b0:ca:5b:b4:ea:d9:
                    8e:d0:74:36:ee:08:55:b2:0f:9b:df:73:30:87:75:
                    83:f8:39:e8:d5:1c:ad:26:8b:4b:fb:fc:84:8b:b8:
                    38:45:f3:39:a2:22:53:d7:a8:8a:c8:62:27:c9:c2:
                    a5:32:b9:c8:13:f2:eb:a9:35:65:0e:e1:78:1a:dd:
                    d5:4a:63:b5:63:7a:8f:b1:54:00:72:ff:33:8c:91:
                    68:b2:02:11:27:5b:11:19:4d:fa:f8:e8:f2:67:a7:
                    c1:99:c7:17:fe:3c:9c:f4:1a:de:b4:f7:0e:f6:09:
                    8a:f7:99:37:99:b8:32:07:c0:65:1d:75:50:dc:aa:
                    a6:36:d6:c9:d1:0d:4e:5e:54:be:86:67:7a:1a:08:
                    e7:66:20:77:55:ec:49:fb:f1:36:37:ed:83:04:2f:
                    cc:60:0c:6a:c3:77:a9:9c:e2:dc:b8:fb:6f:9a:dc:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:17:FD:40:FA:7F:0A:18:63:7A:E4:8F:55:ED:AA:DA:3C:20:9A:16
            X509v3 Authority Key Identifier:
                keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:74:8f:1e:bf:92:85:ec:bc:5c:a1:e1:ad:21:ac:9a:d2:
         d4:e7:7f:53:d3:13:72:ab:3b:84:ba:cb:0d:92:fd:ec:ba:f2:
         29:66:dc:81:96:68:fa:71:f9:e2:35:e8:16:16:36:3d:0d:ff:
         f1:0a:ea:e2:2b:fd:cd:a2:bf:bb:8e:e2:78:e2:99:10:f2:3e:
         ab:96:6a:05:f3:95:c6:b3:0b:17:59:74:cb:3b:2e:b7:e5:d2:
         76:1e:cf:a9:35:19:db:73:6a:f6:57:e1:9a:6f:97:04:3d:86:
         11:ac:52:90:00:e7:25:6c:fe:75:e9:77:fc:51:66:c3:98:14:
         7b:91:07:03:f7:fb:85:15:64:6f:a4:b2:24:65:d5:8d:c0:50:
         12:ff:a8:a2:b6:9b:de:7e:a5:f7:b1:7c:d6:54:29:81:c5:f6:
         bb:50:db:ff:48:23:97:fa:c3:73:7c:ed:c7:79:b8:78:cb:ec:
         d7:45:6a:56:ec:b5:95:07:2b:75:b1:b8:40:e7:f1:b8:7e:78:
         87:29:49:ff:67:60:0a:dd:c8:ae:61:ca:28:ce:76:50:2c:55:
         df:fd:8d:ec:a5:d7:c9:d7:7a:22:ad:3e:43:c5:7f:e9:9d:24:
         92:ec:75:3c:66:22:7d:e0:c0:1d:f7:e1:a4:84:91:91:dc:29:
         4c:98:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:45 2025 by rpki-client