Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          5VobXtp/Tv7ra3eCCuf6zEh0IFY1z/yXlF9gHtpg1zg=
Subject key identifier:   CB:91:06:42:D2:09:35:57:9C:A6:61:80:6B:25:DD:E1:A5:10:02:37
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       019756114D55B23130BBB84CEC759759FD03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          1570
Signing time:             Mon 09 Jun 2025 19:01:03 +0000
Manifest this update:     Mon 09 Jun 2025 19:01:03 +0000
Manifest next update:     Tue 10 Jun 2025 19:01:03 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: Ysv4pxTATstX6ySXPRwIyRUqMbZTgXfPyKTyY1rE1To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:11:4d:55:b2:31:30:bb:b8:4c:ec:75:97:59:fd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Jun  9 19:01:03 2025 GMT
            Not After : Jun 10 19:01:03 2025 GMT
        Subject: CN=cb910642d20935579ca661806b25dde1a5100237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:96:53:b1:54:15:bc:dc:fb:c2:a5:b5:d1:
                    c8:3c:94:ff:c7:64:9a:ae:60:ea:e3:3c:5a:4e:73:
                    8e:4a:51:0d:ff:f5:68:74:90:94:30:76:59:20:44:
                    d0:0d:a6:fd:f9:46:85:9a:81:a2:88:6e:7c:de:56:
                    ca:7b:8b:ef:d1:f7:7d:c3:2d:c9:96:57:fe:3f:da:
                    32:b0:bc:56:52:77:1d:7b:62:a4:41:d4:9f:54:2f:
                    69:21:30:db:0d:bb:c5:9a:0a:3d:7e:7c:f7:79:5d:
                    c5:bc:7d:ea:17:66:70:46:ec:b8:bb:4b:89:88:ec:
                    c1:19:56:60:d8:b6:40:90:99:11:01:70:ec:33:b0:
                    f5:5a:a8:39:70:0a:6f:d6:1b:49:86:d5:67:80:d9:
                    47:89:57:f7:b5:f6:0f:86:1b:bc:83:b4:20:e2:bc:
                    58:fd:ad:c6:7c:a5:11:7e:ac:b2:94:09:a4:1c:84:
                    ad:f4:89:54:fc:8a:67:74:71:6b:54:77:fb:8f:d3:
                    ac:5e:24:15:03:6a:4c:c7:af:a8:78:f6:5b:cb:62:
                    e6:46:0a:da:f7:53:6b:80:16:13:f8:39:a1:f9:3e:
                    d1:9f:b0:c6:c9:a2:71:3e:e4:2b:37:ce:53:7e:c9:
                    7a:8e:5d:f0:f1:8b:31:14:c6:8d:09:7d:31:e9:23:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:91:06:42:D2:09:35:57:9C:A6:61:80:6B:25:DD:E1:A5:10:02:37
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6c:64:58:22:18:3a:46:59:a1:05:bf:d2:60:a2:f4:b5:5a:
         ef:2c:40:fc:22:38:ba:c3:de:97:98:fe:94:70:1c:7f:4a:97:
         e4:be:f7:ef:c2:ca:f9:f3:b9:f9:7b:6d:5f:dd:29:f6:9d:e8:
         ed:16:28:d3:33:cc:d8:5d:d0:bd:ef:66:a0:2f:d8:16:3e:96:
         13:4c:1d:2b:ee:1d:03:a1:ff:8c:cb:8b:2a:e9:35:cf:3f:f3:
         c4:b0:c4:05:c2:50:2f:09:b6:a4:cc:2a:d9:2d:38:ba:86:3a:
         28:c9:99:ad:94:1d:09:f4:f8:bd:5e:32:02:c1:22:9e:39:22:
         73:6d:10:7c:df:f3:9c:17:4d:9f:4f:2f:48:46:7f:8a:99:f4:
         d2:8d:b4:54:4a:fa:6a:4b:ec:88:37:b1:40:07:30:59:0d:40:
         98:ee:bf:62:3f:48:20:04:40:bb:d9:40:92:dc:66:fe:94:74:
         ca:f5:c6:a2:18:c0:f0:68:70:d6:e4:4e:28:bf:0e:41:57:8f:
         d4:17:ae:89:b4:b9:5e:28:a4:68:a1:e6:87:52:a0:ec:de:e6:
         6b:1a:32:6e:39:d0:42:cd:8c:bb:2a:bc:95:a4:b9:2b:47:fb:
         75:4c:27:d3:78:a0:fe:68:6a:85:b9:29:29:77:d1:d6:8d:84:
         bb:8c:b8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:51:15 2025 by rpki-client