Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File:                     EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier:          tTfcywmfkRJBsw/YOIYUc3TUFWpsHJZPXCT7lCyQLBQ=
Subject key identifier:   33:3A:9C:C9:08:6B:35:7B:D1:C5:07:CA:58:15:E3:4D:47:1F:B5:4F
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer:       /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial:       01974967F5E3282C36F5A376D31D9CA7F151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 08:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:39 +0000
Files and hashes:         1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: sMjDWvc/4LYCl/3MEpk76UhflJHH5hdofUif3uvM6EM=)
                          2: WTVR86vnYs7BPStSbSDyoGuvJtI.roa (hash: +qhM9WKUBA3B9KCtQwGX3HjXjyrEypbbBCjk+fK/rjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f5:e3:28:2c:36:f5:a3:76:d3:1d:9c:a7:f1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
        Validity
            Not Before: Jun  7 08:00:39 2025 GMT
            Not After : Jun  8 08:00:39 2025 GMT
        Subject: CN=333a9cc9086b357bd1c507ca5815e34d471fb54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:69:9a:a0:d5:49:a6:d5:3b:ca:0c:5c:9b:bb:
                    ea:e5:14:d1:2d:ce:62:18:89:12:21:b4:d5:b1:a5:
                    aa:d4:a3:65:06:c8:bf:02:c0:0f:83:07:1e:40:8f:
                    b6:91:eb:4b:44:7d:a3:a3:89:de:bd:c8:e1:5c:eb:
                    1d:36:e2:b4:6a:5a:5b:ba:c9:03:9a:33:a2:af:96:
                    25:f7:80:90:a8:1d:57:a2:26:bb:f3:3f:6a:e6:42:
                    e7:9d:7f:cb:02:93:2a:a3:f0:60:ea:f3:fb:86:8b:
                    2b:5e:fd:d5:3a:b5:3a:55:0c:94:cf:13:91:a6:91:
                    a9:35:ea:c4:6b:c1:44:49:1e:ed:43:54:c3:c4:2c:
                    ab:ab:a4:a4:bc:0b:ce:66:32:03:54:e1:4c:be:d4:
                    4c:6a:e9:86:d5:ea:51:d5:ad:70:df:5f:c4:47:c5:
                    df:80:d9:28:f0:c0:36:9d:4e:cc:04:59:48:52:38:
                    a3:d1:bd:6d:ed:bf:3e:7d:18:de:94:af:91:e6:54:
                    db:82:73:5b:ea:18:51:6b:68:2d:50:6b:67:63:09:
                    a7:fc:64:87:81:b0:9f:84:ec:b1:06:b0:cc:d5:88:
                    9b:8a:b8:95:54:c7:41:7e:f9:72:0c:18:3f:69:cd:
                    ea:a7:2b:d4:aa:de:d5:ba:69:d3:82:16:d6:5f:4e:
                    71:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3A:9C:C9:08:6B:35:7B:D1:C5:07:CA:58:15:E3:4D:47:1F:B5:4F
            X509v3 Authority Key Identifier:
                keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c2:87:04:f6:17:cb:7d:ef:ca:11:ca:2e:e9:23:6a:45:88:
         7d:db:54:67:5e:9c:7a:38:fb:7e:26:52:38:44:c3:e9:e2:11:
         78:66:d3:46:b7:72:79:db:dd:05:ea:39:f8:63:cf:c9:a1:08:
         9f:98:14:bd:cf:68:73:f2:cc:de:12:4c:ef:c1:e1:f4:11:19:
         9a:f3:bf:56:a3:fb:ef:eb:f3:1e:34:00:c5:f4:09:b3:6f:58:
         56:62:3d:92:47:33:cd:74:56:03:a7:2a:76:01:a6:84:ce:1c:
         8e:4d:6c:51:fc:9d:84:87:4f:55:ea:f8:79:2e:c6:6d:f3:45:
         f1:c0:9e:fe:fd:80:ba:54:82:df:6b:cd:4b:f9:86:08:88:3f:
         0a:a6:8e:6c:87:78:9c:91:23:6a:57:ad:bc:98:a6:7b:67:66:
         8b:21:89:1e:a6:91:71:10:f6:01:4a:93:1a:e6:25:f8:97:8a:
         e1:59:65:95:5b:cf:45:50:6b:f8:6f:33:75:cf:ca:97:92:f8:
         e7:a7:52:dd:97:54:ac:38:cb:36:a7:84:2f:43:68:63:fc:69:
         01:eb:73:2f:88:12:21:d6:2f:25:41:5f:32:0c:da:f5:89:5a:
         c4:fe:52:5d:bc:c5:93:e1:32:e5:cf:96:73:3c:f3:98:6e:de:
         c7:25:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:21:29 2025 by rpki-client