Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
File:                     Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json)
Hash identifier:          UczoAYItQTkhf1qWaz4RtYUFjlm+c3OxuduaDNXuoHM=
Subject key identifier:   A6:A9:44:D0:51:7A:21:BA:1B:DB:36:14:71:F7:15:53:FA:2B:6A:08
Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Certificate issuer:       /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Certificate serial:       019745C29AAB3875F1E714B97DA24957D940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
Manifest number:          0139
Signing time:             Fri 06 Jun 2025 15:01:10 +0000
Manifest this update:     Fri 06 Jun 2025 15:01:10 +0000
Manifest next update:     Sat 07 Jun 2025 15:01:10 +0000
Files and hashes:         1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: bK/R//a7vNidVnet5RaTR7SpNVKsfaP1AXIR3xaj7X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:9a:ab:38:75:f1:e7:14:b9:7d:a2:49:57:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
        Validity
            Not Before: Jun  6 15:01:10 2025 GMT
            Not After : Jun  7 15:01:10 2025 GMT
        Subject: CN=a6a944d0517a21ba1bdb361471f71553fa2b6a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:1e:da:a1:8c:c1:27:56:c2:03:74:0c:79:
                    64:0c:82:dd:ea:d0:5d:b4:fa:98:52:15:b0:f4:88:
                    95:d6:71:ee:a1:df:f5:88:e1:80:cb:9d:6b:bf:da:
                    2d:b9:30:bb:59:e3:e1:30:ea:77:99:c0:b6:c5:10:
                    26:20:14:fc:14:e6:fd:6b:38:6c:bd:77:f9:71:36:
                    a6:3d:c2:2e:ed:81:c0:51:20:85:c6:91:9c:c4:e5:
                    4f:88:94:ca:55:af:80:35:f5:79:51:d4:60:0f:ca:
                    e5:7b:c0:19:03:f8:20:99:32:b2:ab:97:b2:c9:3d:
                    84:1e:f9:6b:2e:47:be:0c:14:f1:6e:67:23:3f:23:
                    91:c0:3f:28:ad:86:90:d7:01:27:1f:19:cb:1d:92:
                    f0:24:fe:87:85:83:4a:80:1e:31:6d:bf:a7:9e:d3:
                    10:05:2c:89:6c:1f:f6:e4:28:c0:bc:b9:fb:fa:d3:
                    5d:84:70:00:4a:64:2b:cc:f8:69:56:2c:a9:c5:db:
                    42:31:0a:b1:f5:c9:c1:4f:e0:0a:eb:eb:b0:54:13:
                    a1:28:c9:14:97:e4:35:04:c6:cb:83:1e:d0:53:f7:
                    43:d9:37:67:cb:bc:54:f3:63:74:c9:5e:1b:5e:b3:
                    fd:3d:a8:f1:8d:5e:c6:43:18:e3:f0:9f:14:ac:f0:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:44:D0:51:7A:21:BA:1B:DB:36:14:71:F7:15:53:FA:2B:6A:08
            X509v3 Authority Key Identifier:
                keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:f0:45:81:dc:19:e7:b5:c6:25:07:05:7c:75:ff:f3:69:
         50:a9:00:69:dc:f7:4a:04:3a:41:01:c5:6b:3c:bd:c3:07:01:
         bf:2e:a0:96:3c:cc:f4:a1:92:23:94:c5:f5:0a:85:9d:06:a4:
         30:22:d0:9e:fa:0b:a3:1c:20:86:b9:8c:4c:be:f1:50:ca:c7:
         4a:9c:da:e4:b9:4a:23:aa:1d:9b:ec:87:ea:6a:2a:0f:57:16:
         ce:26:a5:70:e0:8d:77:bb:f1:44:46:61:e8:00:83:e3:ff:3f:
         b0:81:b2:cc:a3:ed:88:5f:4b:6d:0f:22:c3:22:83:08:46:81:
         4a:10:75:78:06:bb:b7:4d:0e:b1:be:fc:a8:03:74:5e:66:d5:
         2a:91:1e:98:39:96:f4:8c:bd:03:2c:76:7f:4d:99:c7:85:5f:
         16:ca:f9:7e:8f:5f:71:59:e2:2f:c3:82:84:0f:bd:07:fe:22:
         b9:09:2e:08:08:23:55:ff:4a:63:d3:aa:fe:5d:54:70:1b:3c:
         95:71:4f:4c:6e:20:9a:84:f3:8c:b3:68:67:85:fb:98:d8:70:
         5c:6e:83:24:ed:09:80:d7:13:ee:a3:2b:cb:16:5c:12:39:74:
         2a:36:dd:cd:ae:58:6b:49:5a:29:52:75:01:eb:e3:1d:7c:76:
         16:d6:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:52 2025 by rpki-client