Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          nrzSgtxDB7TADhnwEtUUhMttUg859VQuS6z6/EtE6nQ=
Subject key identifier:   8E:96:4E:19:70:DF:B6:56:70:A5:50:F0:74:C6:A4:58:F2:FF:D9:EC
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       019768BC310B6E24BAE85CB430223AAD0EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          0FE8
Signing time:             Fri 13 Jun 2025 10:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:53 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: cpKMGTS6tOnOJxx6+WmTnT5HEb9GvxTRwl6XV+nuCJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:31:0b:6e:24:ba:e8:5c:b4:30:22:3a:ad:0e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: Jun 13 10:00:53 2025 GMT
            Not After : Jun 14 10:00:53 2025 GMT
        Subject: CN=8e964e1970dfb65670a550f074c6a458f2ffd9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:f5:12:be:86:28:b7:89:73:a2:97:dd:01:
                    9a:a2:9e:50:c0:d5:67:49:9f:46:ce:bc:90:0e:bd:
                    69:d2:cb:fb:50:ec:03:fe:3f:2e:81:8e:99:0e:39:
                    61:90:09:11:d6:64:86:00:f5:9e:1a:45:63:1d:e8:
                    ed:a3:2a:ab:c2:6a:31:6b:1a:3e:57:77:c9:37:86:
                    b8:b9:28:fd:24:73:61:19:98:6a:1b:56:d9:50:2f:
                    cf:bb:71:72:6d:8d:a7:e9:fe:99:5a:a7:b3:20:34:
                    fe:24:00:e0:06:af:8e:53:26:80:1b:ca:3d:34:fb:
                    a6:ee:14:f7:46:b9:bc:89:55:ef:27:65:30:8e:c7:
                    e0:9e:b7:b3:d8:fe:17:33:72:9a:72:51:86:50:f9:
                    c6:2b:e3:5b:ea:09:28:95:16:ff:99:88:07:17:3e:
                    aa:73:9b:e0:0b:4c:d7:6d:3e:8d:f3:06:d4:83:54:
                    68:0f:a5:b9:e1:5a:c1:e6:e6:c5:f6:c8:3b:32:3a:
                    dc:2a:87:99:ec:87:3e:6f:76:94:c0:6e:96:3b:73:
                    6c:f4:29:83:3e:01:14:81:87:ff:9c:eb:7f:e3:17:
                    28:0d:9f:84:74:da:92:44:ed:03:3e:43:62:c0:84:
                    be:9e:ec:42:bf:f0:83:94:9c:d1:51:58:d6:21:a5:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:4E:19:70:DF:B6:56:70:A5:50:F0:74:C6:A4:58:F2:FF:D9:EC
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:cb:59:5c:b2:ad:fb:89:04:3f:d8:4a:f1:35:7a:dd:83:
         f5:5d:aa:7c:f2:eb:4b:e6:78:b9:26:f6:4b:33:4b:93:fa:f6:
         95:8f:01:f3:51:b2:b9:0b:0e:6c:5a:f1:e8:a8:43:c1:59:e3:
         7f:b7:ff:28:37:13:38:3f:7e:9a:e3:7c:dc:43:f1:d5:ea:16:
         e1:ce:a9:03:c2:39:a4:59:ff:de:05:03:d3:1e:a9:91:56:c9:
         75:1a:16:fa:01:69:2c:4c:d7:c5:4b:d6:72:0a:17:6a:6c:0b:
         fd:da:0f:b9:44:34:06:88:3a:7a:e8:3f:5f:76:01:69:98:cf:
         a0:11:7d:7f:db:d2:82:56:51:4d:8a:a7:19:5b:19:09:8f:74:
         d6:46:91:71:70:fe:a0:af:f7:a0:14:2f:14:e9:77:8d:b5:0f:
         f5:e9:4f:b6:91:ac:c2:c1:02:4c:34:a2:df:f6:11:22:ea:04:
         8f:c1:49:c9:68:1f:2b:3e:04:55:64:07:44:9d:67:aa:c3:fb:
         e6:25:35:b7:b5:e1:e0:35:11:8c:fe:e5:5c:6f:ae:70:95:5c:
         56:23:2f:1e:38:b9:4f:96:26:22:26:d5:02:e1:03:6d:9d:d8:
         83:c1:7a:d4:9a:f3:38:2a:3a:bd:b3:cd:d6:ba:2f:49:61:f1:
         7d:49:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:34:25 2025 by rpki-client