Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          bpThUvSmvn5LsaSyjZl7YYcUq2OoSsVrClS7grsXD/I=
Subject key identifier:   3E:65:11:12:77:84:6D:2D:C3:64:65:BB:59:F0:AB:9B:8E:86:16:DE
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       0197462FDA2DF3F7A3DDD1CA63BDA96BBB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1598
Signing time:             Fri 06 Jun 2025 17:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:30 +0000
Files and hashes:         1: A-CITLCzJtdw39wtm0dLTltUEFM.roa (hash: c5iWUzoFE3kjILTe2m5OWQi3zSByNEE2KpMzxgoNxeI=)
                          2: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: iOjVP1l2Z2MvX7R3PfgSUaOu1OZGnxnwGSzPOiArZ58=)
                          3: VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa (hash: qUqfQH6HkkXqxIuCFL1oijtckoAAoRaIonlYxeFElKw=)
                          4: f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa (hash: ZfWB0QSC1JhyWEDFyE7CZ6ZmAqPQnN6XecILZVAnstM=)
                          5: kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa (hash: SgO20AkeVjqIkes5Gz4s0ZXBoQPcPhpf8s/VjNKSJAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:da:2d:f3:f7:a3:dd:d1:ca:63:bd:a9:6b:bb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Jun  6 17:00:30 2025 GMT
            Not After : Jun  7 17:00:30 2025 GMT
        Subject: CN=3e65111277846d2dc36465bb59f0ab9b8e8616de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:9e:ef:10:48:ce:ae:e2:9a:80:84:29:56:
                    6b:34:c0:5f:73:1c:4f:04:cd:89:ad:bb:4c:fa:f8:
                    08:4b:e3:d3:63:aa:ab:05:7a:d4:71:5f:eb:7b:d0:
                    be:79:04:08:b9:3e:20:84:7f:cc:26:ca:47:c2:c0:
                    0e:5f:5b:fd:b2:89:44:05:8b:34:1c:18:95:f6:a5:
                    b8:dd:68:33:e2:c8:94:18:34:15:22:17:b8:87:1a:
                    2b:e0:8e:fa:59:34:44:c8:cf:5c:f1:7a:99:e7:fa:
                    25:66:e8:c3:d5:6e:72:76:a9:45:65:a6:4e:07:4d:
                    cf:b4:eb:7f:09:a3:3d:2c:03:a5:5d:0c:3b:47:72:
                    fa:bf:c8:cc:81:a0:47:90:47:94:cf:08:9f:81:fb:
                    56:7f:6b:e6:42:49:d0:aa:44:34:05:ea:34:3e:4e:
                    6a:ed:c9:32:e9:c9:47:25:a3:e1:1e:62:b3:39:fb:
                    c8:08:bf:6a:f6:69:66:5c:65:f3:a7:0b:2c:9b:b4:
                    4b:b4:8e:42:54:5f:52:51:92:49:04:27:18:b3:5c:
                    e6:dc:05:e4:34:73:7a:6c:05:30:29:09:0f:20:1e:
                    60:14:0b:53:9a:69:a6:14:f2:89:a2:b1:da:47:8f:
                    0f:d1:2a:13:87:cb:9c:7b:a1:27:46:2c:b6:12:ac:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:65:11:12:77:84:6D:2D:C3:64:65:BB:59:F0:AB:9B:8E:86:16:DE
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:08:f1:de:f9:e6:a4:5f:38:d1:b5:90:2a:7c:0f:17:8e:
         53:27:dd:d3:c1:e0:c5:34:18:07:e4:b8:a8:82:2c:e3:aa:d6:
         78:95:92:ff:4a:90:71:ad:32:29:c7:14:f3:98:45:20:fc:4f:
         7e:22:ea:68:22:1d:dd:d6:51:6c:e4:51:e4:68:0d:43:51:a8:
         9e:a3:a3:1a:c7:19:09:16:3c:41:6a:fe:49:1a:99:9a:a2:ec:
         a4:a0:a5:d9:ba:f4:6a:2d:39:c4:a1:1b:49:eb:bc:3c:d2:0d:
         50:b3:23:27:f1:73:84:25:c9:f7:3c:70:f1:f3:80:60:13:61:
         fd:0a:78:23:4b:e3:a8:5b:73:87:78:39:84:2e:97:c4:0d:b6:
         ca:55:05:1c:dd:67:05:e7:3b:4d:52:68:ee:94:98:6f:68:f8:
         24:22:af:72:c6:63:cd:7f:db:a9:a4:92:f4:ef:76:2b:44:dd:
         a3:8a:dc:8e:b9:91:b6:08:1c:42:b9:68:bd:7f:b6:c1:dd:4d:
         7c:dc:f6:96:6a:6c:71:42:2e:09:c7:0e:a1:02:21:c8:f4:4d:
         e8:8b:a2:d8:97:ce:58:bb:f8:49:e3:e8:c1:43:ce:47:43:67:
         9d:e2:31:05:e8:7f:82:f4:46:ba:f3:dd:76:01:bd:3a:d2:a2:
         92:37:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:53 2025 by rpki-client