Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File:                     Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier:          fVaY1MH07BbjoqtHPvJ1d9RonJzAWsgWZ69rxPwrmV8=
Subject key identifier:   EB:A8:95:BE:A4:61:40:6E:FE:48:26:8D:B3:BC:A5:3C:5C:AA:7C:DC
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer:       /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial:       019770755DBDF93333A3A46930A3C9F53585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number:          0BFD
Signing time:             Sat 14 Jun 2025 22:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:29 +0000
Files and hashes:         1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: 2N28pJdFrUF3huPTLvKBVH6KT255jJ8CKU7gc8wqmMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:5d:bd:f9:33:33:a3:a4:69:30:a3:c9:f5:35:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
        Validity
            Not Before: Jun 14 22:00:29 2025 GMT
            Not After : Jun 15 22:00:29 2025 GMT
        Subject: CN=eba895bea461406efe48268db3bca53c5caa7cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:20:7d:a9:5b:89:cb:cf:dc:5c:1a:9e:db:
                    33:79:ac:88:cd:12:61:81:40:55:a5:be:26:e5:f5:
                    02:0c:fe:0b:e2:ef:08:46:9a:49:4b:d1:2f:3f:d3:
                    e3:ba:74:59:b6:8a:d6:6a:f3:d3:16:7d:bf:56:65:
                    6a:4e:cb:88:14:ae:00:bd:be:f3:5b:e3:e3:2c:2e:
                    29:3c:0f:3a:bb:13:ee:b0:05:f7:eb:77:88:40:39:
                    20:03:3c:26:53:c0:51:25:06:74:49:ea:b3:21:14:
                    1c:fa:d5:c5:ab:67:c3:19:44:da:77:3e:88:92:c3:
                    b9:9d:bd:ed:b4:57:e7:24:cd:4f:22:bc:b4:5c:08:
                    7f:5d:69:75:44:1b:87:a9:28:87:1c:b1:ca:e2:0d:
                    71:81:19:c4:09:d5:3c:a1:a0:70:a5:39:0d:a4:b2:
                    cd:23:be:8b:a7:cd:da:03:43:77:4b:5d:6b:e3:fe:
                    67:cf:b2:cd:86:aa:94:55:55:98:cc:49:7c:f1:11:
                    e3:f5:2c:56:a5:1c:90:83:e4:66:eb:e6:de:4f:a7:
                    93:1f:84:33:ab:57:d9:ab:12:cc:82:41:bb:27:91:
                    46:76:6a:75:6e:a3:71:41:ca:84:29:e7:8e:45:9b:
                    63:98:b1:f2:29:95:cc:84:3a:af:d4:f7:a5:c5:86:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A8:95:BE:A4:61:40:6E:FE:48:26:8D:B3:BC:A5:3C:5C:AA:7C:DC
            X509v3 Authority Key Identifier:
                keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:54:54:0f:28:7c:9b:ba:0d:3e:a8:06:33:91:8c:a7:be:26:
         24:a3:0b:8a:e2:54:50:8f:ba:da:3e:06:53:c0:ce:0d:44:70:
         3d:d5:0a:42:43:4f:99:66:34:43:ed:0a:f4:77:42:e1:31:3b:
         b6:95:1f:b5:3b:14:f6:68:ce:9a:7b:71:35:d6:57:73:6d:fe:
         d2:d1:58:36:67:1d:ee:33:fe:31:07:f7:e9:80:2e:43:ff:5c:
         8c:57:d0:07:53:60:c9:5b:86:2e:5b:47:26:e3:db:d1:aa:16:
         2b:b3:57:4c:3a:70:17:a5:1a:f0:81:1b:ee:a5:b8:e2:be:c7:
         41:17:2c:ee:27:94:5d:70:02:09:6f:c0:8e:ea:bc:18:0c:d8:
         26:29:72:be:6c:0f:44:33:10:21:7d:e9:b0:07:5e:65:b1:c5:
         f8:59:77:2d:52:0b:d8:b0:84:de:91:19:11:b7:af:b6:cd:11:
         9a:53:8c:a6:a7:3c:08:6d:3d:17:9f:f9:b3:dc:cf:7d:56:55:
         85:3d:0b:1f:8f:24:64:2a:65:d2:da:6f:0f:28:c9:92:b8:2b:
         f8:6a:0a:52:26:1f:b1:3b:eb:b0:1a:50:3a:59:80:28:bf:19:
         9b:3c:38:60:8a:d6:cf:e0:d4:84:35:70:b8:5a:f5:f3:4f:b1:
         0f:08:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:27:02 2025 by rpki-client