Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
File:                     eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json)
Hash identifier:          l1SR2N7j6wNErVCpe9G/ii4z9Ys3BrIVlVUwCYVxupI=
Subject key identifier:   70:A9:76:1C:57:6C:71:CA:F4:B5:25:AA:47:5E:66:DF:2E:87:98:77
Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Certificate issuer:       /CN=7b243b732e564690482cc825199f8b591b01f6f2
Certificate serial:       0197B6A14E63251392438AD9C45EABD7B436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
Manifest number:          1158
Signing time:             Sat 28 Jun 2025 13:01:53 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:53 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:53 +0000
Files and hashes:         1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: AQIIhQKZg/AcTp17q8ceVL0pSfnk8Q5Kp3m0lSpxiSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:4e:63:25:13:92:43:8a:d9:c4:5e:ab:d7:b4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2
        Validity
            Not Before: Jun 28 13:01:53 2025 GMT
            Not After : Jun 29 13:01:53 2025 GMT
        Subject: CN=70a9761c576c71caf4b525aa475e66df2e879877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d4:be:0e:32:6b:84:0c:27:28:94:c9:62:db:
                    05:24:5a:53:b0:57:c9:13:ff:3d:f0:bc:e2:c1:bb:
                    ca:ae:bd:25:0f:de:36:35:f1:96:7a:6f:ea:57:d4:
                    e5:7d:84:9c:6f:ec:55:5d:ff:68:a8:3c:74:c1:c7:
                    e3:c5:06:07:60:dc:36:02:42:2e:7a:d8:05:86:44:
                    43:a9:7b:41:c0:1e:4d:59:f3:6d:7a:88:31:02:e4:
                    5e:7f:4e:5c:72:af:99:f7:01:79:ef:97:a2:54:72:
                    ef:eb:61:87:ef:0d:db:fc:7c:82:59:0d:6c:e6:2a:
                    fa:fe:14:35:96:9d:9c:78:b5:d2:80:fb:a3:08:3c:
                    25:13:1a:8a:38:3f:b1:9d:b5:da:08:c2:63:5e:82:
                    4a:67:6b:ea:01:30:05:a1:a5:73:98:df:c6:f3:45:
                    46:dc:fe:fb:16:7d:f6:fd:54:8c:b8:a3:28:e8:93:
                    6f:06:4a:48:ef:04:4f:37:75:ef:c2:ce:3d:28:ac:
                    59:1d:10:38:2f:3a:0c:92:d7:2d:1b:1f:ee:87:6e:
                    8f:8c:11:dc:bc:06:5c:07:ef:5b:78:6a:e3:ab:c8:
                    e4:ea:b6:b1:43:74:7e:d1:65:8b:53:ae:61:14:2c:
                    16:ff:34:e3:45:e5:a1:e4:6c:0b:ba:5c:0e:cc:0c:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:76:1C:57:6C:71:CA:F4:B5:25:AA:47:5E:66:DF:2E:87:98:77
            X509v3 Authority Key Identifier:
                keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:31:d1:02:a6:0a:8e:50:e7:e5:30:61:e5:36:96:bc:43:
         d4:8a:15:4e:ed:ba:43:22:16:52:7c:48:94:27:07:20:55:78:
         4e:20:d9:e7:2a:85:4a:4c:0d:00:c2:e6:32:82:c6:36:d5:b3:
         aa:4f:e0:ec:ec:5d:8d:9a:15:68:55:41:cc:45:45:c8:d9:12:
         af:20:79:49:9b:41:a6:65:6c:cf:2b:c0:e1:f4:34:98:05:d0:
         e1:41:41:b9:1a:2c:ea:78:60:c5:13:82:f0:f2:3e:9d:d7:6c:
         c4:f2:70:c6:39:21:d3:ed:83:77:8c:3c:df:e2:f0:72:dd:c1:
         7d:6e:8e:2b:ff:21:d2:76:1c:bb:e3:db:4d:3d:17:e0:6a:95:
         98:18:bc:3e:f5:f9:b4:0c:ff:e6:63:c6:20:9e:ff:6a:35:0a:
         f2:4d:70:85:d7:00:91:5a:80:4b:76:9e:f2:ef:9e:19:68:5f:
         3d:0e:46:68:c8:94:77:2c:69:4f:98:68:de:b8:94:19:b6:3c:
         59:56:d9:3d:9b:ce:72:db:bc:d9:54:78:6f:a5:b0:4d:33:b4:
         93:b8:72:b0:61:2e:3c:06:94:86:8c:5f:7c:6b:b1:95:31:27:
         72:21:a0:22:c9:02:60:bb:5c:58:ed:d5:cb:0d:58:69:6e:67:
         c6:73:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:48 2025 by rpki-client