Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
File:                     7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json)
Hash identifier:          50skikzy+N7b7/+oBkZHZ0TJFPjCh2ZJL2JnB8xZ9oI=
Subject key identifier:   1C:DE:68:6B:C7:C9:CE:B2:6D:50:45:3D:C3:72:37:DF:70:DE:8D:DA
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Certificate issuer:       /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial:       01974AB16DE367063C72FEE62C72FB1B4DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
Manifest number:          1588
Signing time:             Sat 07 Jun 2025 14:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:31 +0000
Files and hashes:         1: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: OlRRvszUGjYEb2dQpcamanvmY2vBWUeZZVdOOAgoHlU=)
                          2: RH-c_C366T2N_z1aBpgE1Ll4n5E.roa (hash: hwd4T2rxr91cL7njvOW+DLOJ5xoMkW8XsS2mxk5ZIks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:6d:e3:67:06:3c:72:fe:e6:2c:72:fb:1b:4d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
        Validity
            Not Before: Jun  7 14:00:31 2025 GMT
            Not After : Jun  8 14:00:31 2025 GMT
        Subject: CN=1cde686bc7c9ceb26d50453dc37237df70de8dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:09:d8:a9:0e:ba:d4:b3:3b:4d:5c:0e:0d:
                    d7:73:79:7d:54:08:e6:5f:a3:6b:50:3e:45:df:5d:
                    87:a2:48:e2:6b:f1:2a:05:f4:47:37:97:fa:d6:70:
                    ca:29:90:95:13:99:49:c0:99:63:a9:f5:46:c5:28:
                    fc:f0:3a:2d:2d:e6:a6:4a:e7:55:9e:f1:55:6a:f8:
                    eb:30:4f:30:67:37:0c:ae:c3:fd:5f:e7:d8:fc:c8:
                    26:cb:bd:50:2c:6d:30:21:ca:5e:d7:67:52:cd:9d:
                    f2:18:8f:f2:85:34:a1:1a:d1:43:fe:0c:3d:15:b1:
                    84:01:32:69:76:dd:f2:9b:d0:3b:1c:5a:66:89:14:
                    b6:86:34:fd:17:7c:35:c8:ef:3c:e6:66:59:fa:74:
                    8e:b4:f3:d6:7e:ef:9a:7b:73:87:df:94:83:53:6a:
                    79:c6:58:ec:96:ee:4a:20:99:b5:a0:a6:f9:8d:a9:
                    45:63:79:cb:4f:a2:d5:de:cf:9f:44:9f:74:d6:f7:
                    3c:c5:28:ec:a9:be:fd:3c:bc:a8:69:91:d0:f2:17:
                    46:6e:e1:80:2e:c6:54:05:2d:67:4b:2c:3e:44:5a:
                    95:92:23:d9:5c:97:8b:94:f1:a9:4a:ab:ae:3c:9c:
                    9b:e1:21:73:83:45:af:46:6a:a4:db:59:e6:b2:c2:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:68:6B:C7:C9:CE:B2:6D:50:45:3D:C3:72:37:DF:70:DE:8D:DA
            X509v3 Authority Key Identifier:
                keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:7d:58:51:61:cb:f7:28:ef:91:42:b5:97:b8:6d:dc:d5:
         8a:14:39:0b:1b:f8:38:d6:d2:7a:7d:9c:4b:38:f3:45:ff:56:
         36:bf:c6:c4:67:aa:ee:cd:39:21:cb:96:38:19:45:f1:ee:23:
         31:69:ab:7e:d4:63:2e:a7:b5:ae:af:a2:ae:9d:a6:ae:28:83:
         51:09:ad:e1:c6:35:08:84:94:11:94:df:42:6b:f8:b8:31:1d:
         00:b1:85:ea:f2:3c:93:0c:9d:c3:b6:31:4d:ca:5c:ea:77:6a:
         8e:fb:20:b1:93:56:0a:5e:61:32:09:80:3b:0a:8e:37:76:ef:
         28:b1:4d:93:5c:a2:df:1d:8d:20:2b:48:2c:7a:61:21:1f:8a:
         d0:ac:b6:ec:97:17:e2:e3:2a:e9:e2:43:41:c5:44:33:fc:3a:
         b3:93:2d:18:eb:f7:12:1f:36:4f:1a:37:ab:5a:27:78:23:c7:
         5f:53:65:61:38:85:81:e5:86:6b:10:6f:a9:cb:b6:ff:44:f9:
         73:08:76:95:da:a2:ce:b1:46:2e:2d:28:0c:53:9e:69:fe:26:
         fc:07:78:da:f5:1f:5c:2a:b3:6a:c7:e0:ad:4b:1f:d8:00:60:
         4c:e3:77:03:54:18:68:0f:76:8e:2c:a3:42:d9:df:7b:fc:a4:
         0c:69:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:49:07 2025 by rpki-client