Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File:                     68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier:          3baZxJ1+js3bE7gEDyaCqfofOM8E2Kw2m2n9HX0iUQ8=
Subject key identifier:   B1:02:05:E0:87:E0:BA:F6:34:2D:10:01:C1:3E:DA:03:8D:41:40:86
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer:       /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial:       019748FA6315C6021F440364E3E0A2629E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number:          0E89
Signing time:             Sat 07 Jun 2025 06:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:58 +0000
Files and hashes:         1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: cTuA4tpFE1NK+HF1W/xy5jA7lf6JCfO8LQprExtPbEc=)
                          2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:63:15:c6:02:1f:44:03:64:e3:e0:a2:62:9e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
        Validity
            Not Before: Jun  7 06:00:58 2025 GMT
            Not After : Jun  8 06:00:58 2025 GMT
        Subject: CN=b10205e087e0baf6342d1001c13eda038d414086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:31:e6:32:ce:0e:9d:88:de:5f:1c:38:96:fd:
                    17:15:c4:2d:58:91:ef:c6:e8:3a:4d:bb:d2:4e:a7:
                    c9:61:13:05:01:74:75:9d:bb:5c:68:30:57:a3:e6:
                    d0:27:c9:81:e3:cf:1e:3a:ad:25:ba:5f:b0:c6:39:
                    c4:32:1a:08:b3:77:50:fa:e0:55:03:87:6d:3a:43:
                    0d:df:9f:0f:04:aa:e0:ce:e2:24:cc:5f:56:9d:ab:
                    12:b8:04:42:44:e2:58:c5:11:3b:e4:93:f0:a6:c1:
                    74:c0:65:7c:3f:95:14:a5:e2:6e:00:46:06:95:ae:
                    59:5a:e4:8c:3b:aa:89:39:b9:89:85:41:ed:17:38:
                    c2:f5:7c:b9:a7:2d:1c:17:b4:ef:41:39:24:86:d0:
                    c9:f2:a8:7d:cc:42:3e:a0:35:2b:72:fd:99:9a:2a:
                    fb:3b:ec:0d:5a:d7:5c:20:5c:7c:b7:46:ff:ec:0d:
                    5a:db:af:b8:2c:70:ce:6c:e3:88:44:a7:ed:8a:ad:
                    f3:45:10:9b:f1:79:49:71:37:2f:1c:01:34:bd:ba:
                    39:75:40:b4:ed:5a:f8:93:4b:3e:22:5c:f2:7e:93:
                    8d:7e:e9:e2:55:66:8b:fc:82:01:ea:6e:e1:f1:91:
                    e0:30:89:2b:f3:7a:57:c2:d2:08:73:6f:1e:8f:a3:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:02:05:E0:87:E0:BA:F6:34:2D:10:01:C1:3E:DA:03:8D:41:40:86
            X509v3 Authority Key Identifier:
                keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:32:6f:c4:2f:30:a1:08:7d:db:55:21:cf:d8:ca:92:5b:
         d3:db:d0:61:f5:d1:e1:b1:fb:05:00:94:4f:74:2f:08:fa:fe:
         ae:b3:83:77:d1:52:e2:49:77:12:31:2e:fe:88:4e:6d:8c:95:
         2c:1f:ab:37:dc:c9:b7:a9:79:34:54:81:73:46:5f:7c:4a:7c:
         ae:a7:d5:19:a5:9f:f5:b9:2c:3b:1e:07:53:d7:dc:5d:09:73:
         5e:1f:82:d8:73:29:89:c5:3a:b0:bc:75:4d:e8:22:45:a2:dd:
         74:18:bf:96:f0:c9:80:e7:32:85:c3:7d:3a:a8:60:da:23:77:
         5c:15:b0:25:09:56:f5:ae:4f:aa:23:aa:dc:3b:48:fd:7d:da:
         6d:e7:ad:cb:54:d5:bb:fd:77:ba:ca:6e:bb:47:7b:38:b3:74:
         9d:ab:45:4b:ac:be:26:ca:f6:d4:bb:6c:16:2b:30:cc:8a:96:
         1f:3e:b7:4d:cc:01:1f:6f:b6:00:11:e2:e7:3b:55:15:82:e6:
         45:a6:df:57:83:d9:30:b5:46:62:d6:13:ae:be:3f:28:44:4d:
         8b:4a:ec:d3:f9:0e:c7:25:7e:a2:16:77:40:65:96:5b:05:5e:
         bd:49:82:b5:92:56:a5:56:02:6d:df:cf:9b:4e:bf:56:7c:03:
         2f:3f:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:55:02 2025 by rpki-client