Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          jp9dlQFqt0+CFPqFkg8EyH4DV1EfJZs9DTUGEfGabzY=
Subject key identifier:   40:FE:29:F0:08:DF:04:37:5B:5E:FE:B9:55:EF:46:DE:F7:F1:28:E2
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       01975A9285A1F883D7A754AB053427E708CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          1586
Signing time:             Tue 10 Jun 2025 16:00:41 +0000
Manifest this update:     Tue 10 Jun 2025 16:00:41 +0000
Manifest next update:     Wed 11 Jun 2025 16:00:41 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: b7xkjjYmNcAovxHT93+e1DeZrht2EhfOMhxonc+DMx8=)
                          2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:92:85:a1:f8:83:d7:a7:54:ab:05:34:27:e7:08:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Jun 10 16:00:41 2025 GMT
            Not After : Jun 11 16:00:41 2025 GMT
        Subject: CN=40fe29f008df04375b5efeb955ef46def7f128e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fb:8a:0c:d7:72:ae:7e:72:e0:c7:be:99:07:
                    e9:24:23:f4:23:f3:82:56:af:b6:d3:49:56:a9:36:
                    6c:6a:77:7a:34:38:ee:92:59:f9:d7:07:0e:15:e8:
                    84:b1:c5:b4:a7:ca:cb:aa:5b:d4:b0:62:96:d4:78:
                    d0:26:0b:fc:9e:9f:2b:94:4f:ba:e4:5d:19:db:8d:
                    11:9a:a4:1c:dd:40:6a:b4:dd:30:c0:44:ad:e0:73:
                    2a:3d:eb:46:20:a1:f4:e1:af:b4:5b:16:14:68:96:
                    59:e9:a2:02:7a:07:8e:be:74:2d:5b:05:c2:9c:61:
                    90:65:3d:7c:99:e3:b7:77:aa:8b:9d:e0:25:6e:69:
                    fd:48:10:cc:9d:d0:cc:12:c7:c8:cb:a7:62:c2:a2:
                    d5:07:48:19:76:c3:79:7c:45:75:65:65:fc:5d:40:
                    a2:73:dc:ac:b3:d9:36:c9:aa:9b:e8:c6:55:ea:8d:
                    93:1b:d8:80:7e:37:eb:8b:55:40:b2:77:24:64:1c:
                    72:5d:05:e2:09:41:9c:8a:46:af:94:c0:5c:e2:4b:
                    cf:bd:cb:fa:90:af:d9:62:18:c8:79:fd:11:a7:22:
                    80:36:b1:18:29:42:b9:e5:be:ea:cd:81:87:1c:f7:
                    ab:8a:61:6b:22:f4:86:8c:de:d7:c5:a9:cc:00:41:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FE:29:F0:08:DF:04:37:5B:5E:FE:B9:55:EF:46:DE:F7:F1:28:E2
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:50:eb:3d:03:5f:68:78:1c:00:6b:66:69:04:9b:c9:b4:
         66:0e:96:9b:f1:6a:4c:e0:7e:46:eb:fc:b0:c8:f0:b2:54:75:
         02:9e:93:50:5b:63:f1:84:a7:1d:ea:b0:d4:4c:df:e6:58:5c:
         64:f7:d6:6c:67:2f:d2:a4:33:1a:09:96:b6:50:d8:5c:a2:85:
         70:4e:4a:a5:ed:83:5e:80:d9:37:af:8d:a3:d5:e3:eb:c4:32:
         13:26:63:38:4e:2e:76:bd:36:dc:64:c7:c8:b7:21:2f:f7:0a:
         4c:47:88:7b:b5:d1:90:7c:cc:f0:19:b4:dc:3e:9d:54:e5:7d:
         78:82:62:ce:a7:00:8e:b8:40:ab:33:ed:e7:69:d6:7d:31:6c:
         b7:30:b7:ea:f1:25:76:e9:05:06:a6:9f:0d:e0:d2:10:a5:21:
         bc:2a:99:48:f9:4e:79:c7:a5:6f:fa:1d:8d:a3:c6:59:68:0c:
         79:0d:f7:1d:7f:d3:8b:73:9c:05:d9:0b:1d:23:18:8a:b3:ba:
         ea:1b:b8:68:c2:1f:3b:9c:5e:7c:83:a8:df:e6:80:df:93:97:
         78:cc:73:05:fc:ab:1b:bb:45:fa:f5:db:78:45:d4:98:4f:ee:
         e5:16:cf:fd:89:bd:b6:3e:c0:64:f4:39:e3:29:5f:fa:33:23:
         13:17:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:00:56 2025 by rpki-client