Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File:                     7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier:          2X4bpbYj9Q6i4v8Tyxrmo19uIzghGttiNMFJ4aPI2kI=
Subject key identifier:   BB:49:0A:E5:42:DC:38:B0:34:A5:05:44:70:6C:5E:B8:74:A7:BC:CD
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer:       /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial:       01974967B5027966F9F146A3BDC9A72A46D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number:          1510
Signing time:             Sat 07 Jun 2025 08:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:22 +0000
Files and hashes:         1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: UKnVHGhi2N63mFSSxQADxYljL58pbaf7gIhloPXzm5E=)
                          2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:b5:02:79:66:f9:f1:46:a3:bd:c9:a7:2a:46:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
        Validity
            Not Before: Jun  7 08:00:22 2025 GMT
            Not After : Jun  8 08:00:22 2025 GMT
        Subject: CN=bb490ae542dc38b034a50544706c5eb874a7bccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:fb:73:9e:b8:cb:d3:ba:29:19:db:b3:c0:
                    8f:62:94:f4:7c:ef:29:f3:95:1a:ea:19:cc:e7:20:
                    43:ce:0f:9e:47:7c:ce:17:13:27:ce:f4:1c:b7:af:
                    f7:af:df:ec:39:b6:08:ab:6e:08:1d:55:02:7e:a6:
                    ac:67:72:bb:88:c2:6e:bb:28:22:6d:25:aa:33:98:
                    b3:3b:06:2d:cf:3d:2d:2e:29:a1:f6:48:17:26:bd:
                    40:1d:ce:d9:1e:93:a5:6c:eb:22:2e:b3:55:39:66:
                    c1:a0:e0:8a:53:80:31:d9:26:c9:07:da:ab:a6:7e:
                    00:68:d1:f4:bf:45:25:51:81:0a:00:9d:de:b5:cd:
                    0c:6a:4e:6a:a1:d3:e3:02:61:ac:4d:33:b2:f3:71:
                    6d:f9:77:be:c4:00:a4:21:7b:2a:ac:04:b0:46:73:
                    07:07:fb:65:b1:bd:75:6f:f7:5f:b8:26:c5:eb:b2:
                    1e:78:07:20:af:5e:83:88:1c:9c:f2:22:0b:41:76:
                    1e:fa:97:28:25:d0:25:e9:d5:52:54:eb:19:5a:7b:
                    3a:b4:57:fd:51:84:68:95:cd:c8:7f:f8:93:80:73:
                    69:2c:9b:d4:42:b5:b3:c7:f4:96:87:b1:cd:7f:b1:
                    18:79:1b:5c:21:84:78:dd:da:88:54:b9:66:0d:0d:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:0A:E5:42:DC:38:B0:34:A5:05:44:70:6C:5E:B8:74:A7:BC:CD
            X509v3 Authority Key Identifier:
                keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:45:1d:22:65:bc:f8:8e:00:5a:61:18:50:4f:08:8f:75:8d:
         de:69:68:bc:fd:c5:f8:31:fb:ec:07:cf:cd:5a:00:dc:1c:a6:
         28:98:33:99:f5:64:7b:37:28:9f:85:8f:33:67:cd:73:94:ae:
         2e:16:ae:f2:6f:5f:97:76:75:2a:e7:73:bd:0e:44:94:4b:5a:
         b0:91:23:5c:b7:a6:d9:2f:4e:8e:49:fe:ca:f5:98:7b:ec:53:
         36:b2:7e:51:b2:81:bd:d6:e7:ce:47:21:6e:c2:0d:0d:83:71:
         b9:4f:75:cc:fc:37:c3:98:1b:70:66:af:a3:88:8a:89:02:d7:
         5b:19:77:8c:49:c4:98:74:fd:0f:cf:f8:f2:1d:15:11:d3:25:
         14:29:84:ce:1f:66:a9:58:5a:e0:3b:ae:a4:99:f1:a3:82:e9:
         f5:1a:d1:5d:b5:3b:46:e8:21:f2:e6:35:e1:45:c8:02:e0:77:
         03:d7:66:9b:f0:0d:53:1a:d6:19:d7:a7:3c:05:9e:cf:99:ce:
         3f:c7:2b:f9:12:4a:98:91:c1:d8:13:35:4d:58:de:36:6b:39:
         e6:9d:72:41:97:23:89:84:2d:dd:ef:17:5d:17:b0:7a:e7:bc:
         74:ff:24:76:27:aa:f6:33:88:93:ec:8a:0f:1d:f4:da:8d:30:
         38:c4:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:24 2025 by rpki-client