Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File:                     eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier:          KxmZHksInKiyFL+to9q5F7Tx0Jsr0vJl7/DsThXjGTk=
Subject key identifier:   9D:11:4F:3B:7F:61:B7:26:93:42:50:D5:4D:24:F6:A4:6A:FF:69:F7
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer:       /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial:       0197CBE045543867DB54EA5D566710929D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number:          1442
Signing time:             Wed 02 Jul 2025 16:02:42 +0000
Manifest this update:     Wed 02 Jul 2025 16:02:42 +0000
Manifest next update:     Thu 03 Jul 2025 16:02:42 +0000
Files and hashes:         1: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: u0/BAGdNaZVNNb8+fU8AoqKp4iUaFgfCmfVf+0jApAk=)
                          2: rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa (hash: M8dZkYCwYNG6gph8xMmvBysHbD2sO8kxwfhDf7bdOCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:e0:45:54:38:67:db:54:ea:5d:56:67:10:92:9d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
        Validity
            Not Before: Jul  2 16:02:42 2025 GMT
            Not After : Jul  3 16:02:42 2025 GMT
        Subject: CN=9d114f3b7f61b726934250d54d24f6a46aff69f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:4a:8d:90:a9:40:e7:ab:21:fa:1c:4a:5f:
                    24:2c:9c:66:ce:13:df:f3:ba:93:93:01:ab:38:f0:
                    a4:84:c0:33:d9:8e:46:4a:2c:ec:3f:59:64:a0:97:
                    b3:16:64:01:f4:d1:f1:9a:63:02:32:c6:49:04:35:
                    a4:15:d1:eb:c4:eb:e7:f0:67:f5:ba:d7:a5:6e:d1:
                    39:9f:a6:5d:c5:c1:73:a0:ba:33:6c:b4:d0:c7:6f:
                    d4:62:5b:49:2e:15:a4:cc:5e:39:19:db:2e:df:e5:
                    ae:83:5d:e4:1c:55:04:12:4f:47:6f:a3:b9:bf:27:
                    c5:38:b0:0c:75:c7:44:2d:e8:42:62:e0:c4:61:07:
                    5e:eb:09:c1:bd:72:9d:57:97:f9:41:0c:67:dd:b3:
                    9e:f2:87:19:0a:6d:75:66:54:be:22:2c:f3:56:6b:
                    48:45:15:4f:c1:c0:84:aa:e7:f1:6c:10:9e:14:96:
                    f7:10:6d:47:be:a6:ed:8f:46:ac:b8:58:97:2b:da:
                    57:1a:c9:61:84:47:9c:18:da:63:28:1c:16:58:d1:
                    b4:a8:fd:e9:27:7d:c4:b4:1e:53:16:3f:e6:a7:08:
                    de:71:4e:12:89:48:50:80:0d:79:cc:2d:ed:3c:74:
                    41:8e:ee:90:e1:17:6a:14:42:ea:53:86:ea:e5:7d:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:11:4F:3B:7F:61:B7:26:93:42:50:D5:4D:24:F6:A4:6A:FF:69:F7
            X509v3 Authority Key Identifier:
                keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:78:aa:5c:cd:80:8e:e7:e2:5f:e8:df:dd:fc:94:61:4f:
         93:90:4a:d1:be:a4:66:19:23:a0:4c:a1:2b:38:cd:5b:c7:c7:
         0e:e0:0f:29:6b:39:ee:ed:5e:2c:bc:67:b0:e1:f2:1c:48:a3:
         8e:b3:0c:31:13:74:5f:c8:83:47:06:44:e2:bc:e4:fe:4a:20:
         ae:f2:0f:d1:5b:df:64:c9:b5:36:27:d6:da:c2:dd:56:60:d5:
         6f:97:94:79:65:54:1b:2b:79:dd:0f:eb:73:1a:8a:d4:ae:6b:
         02:6f:27:ca:63:79:d5:11:c0:a9:17:b4:ec:63:f4:bb:b5:b8:
         3e:63:85:09:7f:61:f7:91:38:71:d2:f2:86:24:ca:9c:72:e4:
         25:4c:fa:41:87:e9:8f:81:f7:f9:b3:86:73:e4:39:81:5b:a7:
         9a:4f:c5:49:cc:38:27:f9:f8:99:56:aa:33:bf:ee:ef:d5:ca:
         6c:f2:bd:be:03:e4:6b:ca:7e:5c:e6:83:1c:e8:b0:31:ce:e5:
         5c:83:64:db:17:c9:1c:39:8a:d8:38:bb:b2:bb:d6:43:c0:39:
         03:b6:8d:97:67:ec:54:94:0c:f4:b9:21:a9:02:57:a4:38:79:
         1d:b0:82:33:bd:01:31:44:61:40:01:55:ab:90:ba:45:95:1d:
         6e:a2:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:16:05 2025 by rpki-client