Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File:                     EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier:          AEY0sRiEB0XwLXnovEM3uG6QT+T7saslr7aMVJ3LrrE=
Subject key identifier:   E3:31:82:53:E5:6A:33:EF:50:78:25:83:33:7F:92:90:44:B9:F2:66
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer:       /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial:       0197477A0CBC259370AE2FCF844EB97C2653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number:          0537
Signing time:             Fri 06 Jun 2025 23:01:10 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:10 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:10 +0000
Files and hashes:         1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: WVbhR9ZrAgBqLMl/FcZ9S6Ymv3AHKa/qea56lLGieVk=)
                          2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:7a:0c:bc:25:93:70:ae:2f:cf:84:4e:b9:7c:26:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
        Validity
            Not Before: Jun  6 23:01:10 2025 GMT
            Not After : Jun  7 23:01:10 2025 GMT
        Subject: CN=e3318253e56a33ef50782583337f929044b9f266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:ee:46:2e:45:68:e9:39:4d:6b:ae:29:83:
                    49:9d:e4:5e:c4:f4:c6:b4:54:06:79:d6:3d:fc:20:
                    25:f8:a9:fa:1a:15:7a:70:45:0a:f9:fd:19:4e:eb:
                    9f:46:0b:53:5b:f3:59:8d:d1:9f:56:da:42:3f:b4:
                    6c:b0:fe:e2:b6:da:96:d5:fa:89:c1:df:6c:40:72:
                    64:b4:35:53:82:7b:00:09:c3:7c:d0:b0:57:f0:47:
                    d8:97:be:6b:c1:61:a3:f5:99:66:65:ea:08:3e:10:
                    0c:a9:79:b7:16:fb:9f:47:74:50:9e:fe:c6:f4:04:
                    1e:29:5c:c8:c2:e0:78:6f:c8:0f:ab:e6:b5:2c:2c:
                    cb:c2:98:e7:ad:a0:5b:79:87:cb:1b:ff:32:bf:89:
                    41:df:76:b1:8b:73:5c:bd:97:fc:68:2a:93:0e:4c:
                    d4:a5:38:80:6a:98:fb:9c:a4:2f:02:2f:b6:38:b2:
                    90:53:bf:e3:50:d6:36:15:16:f5:e9:3c:c3:c3:ec:
                    1b:82:0f:c9:fc:09:cc:16:f0:9c:43:0b:15:b5:f8:
                    75:3b:f0:79:3a:6e:18:56:0a:09:2c:b0:00:f3:7a:
                    24:3a:fd:19:5b:a5:57:b1:59:b8:ea:c5:90:7b:a9:
                    70:1c:d3:b9:59:cc:68:97:56:e2:00:1f:31:a6:aa:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:31:82:53:E5:6A:33:EF:50:78:25:83:33:7F:92:90:44:B9:F2:66
            X509v3 Authority Key Identifier:
                keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:cc:d2:3d:47:7b:3e:bb:c0:c3:d0:17:68:7d:22:4f:96:
         82:da:4b:64:53:e9:3b:82:df:b8:7d:56:c0:fb:4b:1c:77:ba:
         19:ca:ff:57:bb:92:b9:31:51:98:2e:98:a0:9e:1e:94:1f:97:
         3e:f1:18:c5:b6:eb:5e:0f:0b:ac:80:9d:45:e1:26:d9:87:60:
         28:5d:bd:0a:37:35:c3:02:94:a3:cc:4d:67:a4:7e:7e:81:63:
         35:58:32:59:46:a7:21:1e:c1:85:98:9e:62:c3:5a:53:f5:35:
         f7:8e:e8:42:6f:ee:af:37:13:b1:2f:60:c4:57:22:6f:7b:a8:
         85:e5:e8:c7:5c:4e:72:a8:5d:73:40:2c:6c:38:ff:93:18:92:
         e1:47:56:d7:e5:4d:d5:6a:73:b7:d7:e7:39:2d:4c:1e:93:ed:
         37:03:6c:b9:d6:27:5e:52:cf:a9:f3:5a:ed:dc:c5:83:94:8b:
         8e:89:42:b4:7b:86:c1:14:29:a1:df:fa:ea:54:5a:f6:a0:7f:
         5d:b0:d2:db:65:99:dd:8b:94:80:c3:e1:5b:53:a9:f1:e8:37:
         ee:a7:63:46:a6:a3:d1:1e:e5:f2:3d:e4:03:1d:8f:80:77:9d:
         12:df:d4:42:e9:2d:a4:c3:29:95:21:80:17:e6:7e:81:c0:9f:
         d7:bb:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:10:18 2025 by rpki-client