Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
File:                     mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft (raw, json)
Hash identifier:          uUzoYp6j+iwhRseei1la01aGvymLJIbBr1iX14UdsD4=
Subject key identifier:   78:12:E2:40:ED:5A:86:97:C7:DD:F9:D5:2F:51:60:DE:20:38:F7:42
Authority key identifier: 98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41
Certificate issuer:       /CN=98418cc6550dfdb1899969a6027e435a1b0b1341
Certificate serial:       0197488C4A8FEF40D6854BF98AEAB6DAF469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
Manifest number:          0B85
Signing time:             Sat 07 Jun 2025 04:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:43 +0000
Files and hashes:         1: Sj80T0ZscSHQioJGKuWyuIDWdMY.roa (hash: WY9jZ6uCG8EibKZZR1R4Ju7ioSD/EDvW46cJnpe1OBA=)
                          2: mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl (hash: 0kfBRrxG2UnMflxTKkyGdWM+DuI9mE9G9zj+CPOedPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:4a:8f:ef:40:d6:85:4b:f9:8a:ea:b6:da:f4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98418cc6550dfdb1899969a6027e435a1b0b1341
        Validity
            Not Before: Jun  7 04:00:43 2025 GMT
            Not After : Jun  8 04:00:43 2025 GMT
        Subject: CN=7812e240ed5a8697c7ddf9d52f5160de2038f742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4b:e3:10:d4:74:c9:34:06:50:20:a1:78:fb:
                    c2:fc:52:39:70:f5:ad:0f:d1:8e:03:16:da:b7:6e:
                    51:ed:a1:23:5f:14:88:49:67:e6:89:f1:43:7c:c1:
                    4d:d9:4a:09:ae:b5:80:7f:0c:70:2a:a6:4c:fa:f0:
                    3f:be:00:89:61:1f:71:56:ea:db:38:1b:52:07:0a:
                    7f:db:32:5e:29:17:54:cd:3e:c4:bf:6d:6c:7e:ff:
                    15:1a:0d:13:c1:e2:6f:4e:2f:9a:30:a3:0a:7a:51:
                    8b:0f:e4:92:3f:82:1f:f4:b6:12:05:8b:a0:ba:58:
                    c4:00:4c:e6:c1:19:95:ed:85:6b:55:dd:2a:4f:89:
                    08:b7:3e:88:ec:b3:f0:d5:f1:5e:f6:bc:c8:6f:92:
                    4d:5c:23:65:f1:aa:55:de:32:a8:46:3c:c2:ed:07:
                    93:34:2d:62:2a:e4:9a:81:01:c5:91:ac:89:8d:d4:
                    bc:00:97:48:ee:8f:b9:bf:79:a4:ee:61:71:e1:ae:
                    a1:52:40:2a:7f:4c:ca:ea:f3:56:e8:7e:d2:15:eb:
                    f9:6a:56:c3:a6:64:da:a2:76:fe:87:a6:f7:c8:96:
                    60:7b:a4:0e:cb:0f:aa:c8:b9:ea:26:6c:6b:ac:8b:
                    4c:ae:6f:b5:81:76:11:f3:74:19:b7:8d:d5:52:0e:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:12:E2:40:ED:5A:86:97:C7:DD:F9:D5:2F:51:60:DE:20:38:F7:42
            X509v3 Authority Key Identifier:
                keyid:98:41:8C:C6:55:0D:FD:B1:89:99:69:A6:02:7E:43:5A:1B:0B:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEGMxlUN_bGJmWmmAn5DWhsLE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bbcf3c-67cd-403f-944c-fd5d79ec5b17/1/mEGMxlUN_bGJmWmmAn5DWhsLE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:b0:60:e6:e1:3c:94:c8:d4:41:6a:9b:0a:43:89:1c:d9:
         1e:53:6d:02:8d:09:9f:3d:2a:2b:af:6a:b3:89:54:df:67:b7:
         72:64:ae:8e:8c:34:5e:1c:eb:9e:fe:27:7a:85:65:5f:78:ef:
         c2:56:86:6c:af:51:7f:b7:0e:cc:74:52:95:a2:37:b4:04:dc:
         06:42:42:69:71:ec:2a:9f:aa:9f:50:e2:3a:ee:6d:63:d8:1f:
         e2:9b:b2:d2:73:a9:b6:32:f3:8d:53:8f:82:32:77:8d:f8:bb:
         fd:31:fc:6b:95:9b:ce:e6:40:fb:b3:75:1f:15:d9:11:44:ed:
         c2:7c:23:58:9f:53:c3:a4:a0:f1:9d:ec:0c:91:d1:de:e6:10:
         44:73:53:77:5d:73:66:f3:c8:84:c3:19:24:67:41:dd:cd:5e:
         f5:02:5f:92:ac:65:1a:a7:99:dc:9a:7c:fd:0a:1d:8f:31:d8:
         d5:d1:7d:4e:28:43:6a:a4:d0:16:e2:9f:8b:86:3f:a8:b4:23:
         75:68:33:5f:d9:30:03:ad:ce:20:9f:a4:29:11:41:5b:b2:7b:
         cf:92:d1:fd:53:01:26:06:7d:3e:7d:59:f7:40:46:0d:e9:85:
         a6:1c:3f:b7:56:18:64:f6:93:42:9a:af:4c:62:fb:7d:90:58:
         62:6a:99:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:25 2025 by rpki-client