Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File:                     7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier:          6NofMbDZ5aCutatiwLuh5H3OXfJSctEdXzjoNXqKwO8=
Subject key identifier:   78:57:E1:58:1E:46:29:A8:83:F0:C4:12:12:82:AF:07:21:07:D4:7C
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer:       /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial:       01974DB3098491F715A73467B1F38D6049AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number:          015B
Signing time:             Sun 08 Jun 2025 04:01:08 +0000
Manifest this update:     Sun 08 Jun 2025 04:01:08 +0000
Manifest next update:     Mon 09 Jun 2025 04:01:08 +0000
Files and hashes:         1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: FrTB1AmN0Peu0Jq6yBe0TLcRygDBdSYjpDl3k7PwRFQ=)
                          2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b3:09:84:91:f7:15:a7:34:67:b1:f3:8d:60:49:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
        Validity
            Not Before: Jun  8 04:01:08 2025 GMT
            Not After : Jun  9 04:01:08 2025 GMT
        Subject: CN=7857e1581e4629a883f0c4121282af072107d47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:40:13:1c:ba:9e:73:7c:50:c3:d2:8c:1a:
                    df:83:41:16:00:ff:2f:29:cc:5d:47:f7:0f:4a:fc:
                    4a:f9:46:81:d9:71:11:93:78:bf:68:8b:72:8c:4b:
                    d0:df:2c:cf:4c:cb:19:d0:99:50:34:89:61:c7:6a:
                    1a:a5:ea:f5:94:b2:5d:a6:a5:59:6a:0b:8f:d8:83:
                    be:61:4c:88:d1:14:6a:fb:78:3f:ba:7d:58:0a:95:
                    69:10:f2:5f:87:be:ca:52:e1:9c:c6:ab:7f:d8:f1:
                    2f:97:97:f7:ef:4a:c1:00:2b:f0:4f:10:ef:2b:73:
                    fb:19:37:45:ce:fd:2c:bd:7b:8f:24:fc:63:0f:12:
                    26:65:08:e9:64:29:c0:f1:1d:8a:62:0a:e7:76:3a:
                    f9:d1:7e:f1:31:6c:07:35:d3:49:32:e1:58:e8:21:
                    ff:d1:b9:cf:d7:c0:02:4d:c9:30:c4:cb:56:ee:b8:
                    ce:a5:98:d9:31:1e:6d:b8:ac:92:43:20:17:d2:ec:
                    a4:04:a6:78:0a:b5:a0:26:95:5f:ab:8b:b7:4e:4d:
                    4f:48:0f:b7:48:08:58:27:52:30:65:70:be:36:fa:
                    fa:91:98:4b:83:a9:8c:d0:63:bd:14:8c:a5:46:62:
                    80:95:8b:2f:25:68:be:ef:34:28:52:24:d9:4d:fc:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:E1:58:1E:46:29:A8:83:F0:C4:12:12:82:AF:07:21:07:D4:7C
            X509v3 Authority Key Identifier:
                keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:c6:d3:7a:3c:22:43:2a:41:69:3b:3b:31:b8:fb:ff:aa:
         eb:a1:38:6d:48:ad:89:90:8c:08:ba:0f:45:0d:a1:e3:f9:e5:
         58:91:73:2a:d6:f6:89:b2:ad:23:41:d3:1a:9e:8e:14:83:6e:
         fa:92:96:c3:fc:8f:4e:e3:b3:2a:80:9e:c7:98:91:29:37:9a:
         2c:6a:9c:f5:54:d4:7b:f2:76:02:bf:ca:dd:d3:e7:6c:e6:a7:
         58:76:90:7d:33:01:5a:ed:a1:47:7f:7d:aa:af:de:9b:c6:11:
         c5:11:f0:e4:2b:98:0d:62:7c:40:1e:9c:af:08:d1:89:6d:ff:
         a5:91:ae:82:52:c8:2c:90:b6:16:0a:81:4a:98:95:ca:00:05:
         fd:d6:73:39:b3:b8:53:85:4f:a2:04:24:d0:70:2f:d9:40:17:
         d4:1e:aa:15:21:3c:a5:c3:34:a3:ea:82:18:96:36:a1:82:7a:
         3d:06:9e:dd:5f:35:8b:f9:90:86:57:da:25:e1:42:e2:4c:ed:
         9e:9d:3b:92:ea:63:c7:99:bb:09:5e:77:ae:c7:e3:92:89:d8:
         f3:a3:4b:51:aa:4a:a7:be:43:40:e6:6e:9e:d2:09:ea:66:5f:
         48:80:8c:32:be:0e:e6:97:d8:a8:f7:b3:1d:a1:4e:f1:d0:29:
         ca:53:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:18 2025 by rpki-client