Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File:                     fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier:          aGey4y21sDXek7LqizzhiisxQlZB+b8eOqMq+k0cctY=
Subject key identifier:   F6:E9:90:C2:D4:C1:8D:BA:9D:E1:22:10:B7:D7:41:C1:4A:57:80:90
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer:       /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial:       0197B820D8832AF6877D6E7C5111F94BEA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number:          0FE0
Signing time:             Sat 28 Jun 2025 20:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:49 +0000
Files and hashes:         1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: 6HIKRMuQfOO4akxQngBTpmBWY/c/UXmNM77AmYwO3jU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:d8:83:2a:f6:87:7d:6e:7c:51:11:f9:4b:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
        Validity
            Not Before: Jun 28 20:00:49 2025 GMT
            Not After : Jun 29 20:00:49 2025 GMT
        Subject: CN=f6e990c2d4c18dba9de12210b7d741c14a578090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:91:74:9a:94:f4:c5:08:74:e2:1d:33:90:
                    77:0e:ff:33:3c:da:fa:a3:0c:c4:31:ba:e6:45:41:
                    d6:5a:43:49:41:c1:d7:54:7f:3f:df:38:35:7c:24:
                    01:e8:a4:03:99:d4:80:84:4b:a7:97:c4:7a:4b:59:
                    e9:10:e5:9a:ec:40:20:5a:b8:e9:55:72:23:2e:1e:
                    8c:22:5b:c7:55:58:f1:5b:52:c0:a5:f5:fb:f6:a9:
                    1b:bd:c6:72:6e:65:3c:ac:32:07:06:01:c7:ad:fa:
                    23:57:02:b9:58:3c:21:cd:50:4b:b5:dd:a9:49:87:
                    40:d9:f4:35:d2:58:86:80:37:54:15:8a:e9:61:fb:
                    32:e4:f8:7e:23:50:7a:d7:45:93:25:f9:b2:94:43:
                    46:bb:c2:16:15:b3:ae:eb:4c:d3:2f:c8:b4:92:c9:
                    1a:59:a2:03:54:c1:68:7e:ac:46:0f:fa:02:fa:60:
                    8a:45:b5:c5:3e:52:e8:a7:db:e0:5b:80:94:aa:3f:
                    1b:88:71:ba:b0:f3:8b:7f:1d:cd:40:4c:ca:e6:05:
                    74:6f:7c:2d:23:b0:f9:ef:90:c4:10:b5:a0:82:49:
                    ec:02:dd:b1:b5:69:72:05:de:e6:12:b0:99:6a:ff:
                    95:72:fa:27:c4:c4:82:6b:c1:c5:f4:76:d9:34:42:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:90:C2:D4:C1:8D:BA:9D:E1:22:10:B7:D7:41:C1:4A:57:80:90
            X509v3 Authority Key Identifier:
                keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:36:a1:7d:fe:d0:fa:53:f0:34:6f:36:71:21:8b:96:aa:0b:
         3c:b7:ee:b8:9d:93:a7:24:4d:a1:4b:54:30:a5:9b:53:b9:24:
         a5:d8:30:53:99:84:4e:1d:1e:9d:01:e4:ef:46:61:2c:35:d8:
         43:83:df:23:2a:83:ab:55:a3:b2:ff:50:65:49:02:2b:1a:f7:
         6e:aa:1d:75:e1:49:5a:68:ea:ff:58:5c:05:09:44:2a:7a:33:
         a8:f0:e3:e1:b4:f8:65:41:84:bf:87:4f:54:1d:74:14:67:9c:
         68:8c:d5:ba:4a:84:29:9f:42:e2:5f:68:9d:04:40:60:fe:cb:
         06:da:ce:a6:c8:b4:bb:53:fc:3e:21:fb:b2:82:ab:d4:63:66:
         62:a5:63:58:9b:f6:45:7d:7a:52:e0:a3:a8:87:66:44:6c:7d:
         fa:a3:99:65:2b:d8:22:d1:6d:3c:f1:29:1c:5f:cf:79:0c:18:
         fe:76:13:92:40:67:2c:8d:71:c5:72:a7:f4:84:61:dc:47:f7:
         ad:9a:9f:d8:82:46:22:30:f8:63:1f:7f:c4:8a:62:4f:f8:d6:
         19:ed:70:46:40:ed:f4:66:48:47:30:f1:b8:94:35:cb:e0:eb:
         50:e8:88:f2:d1:73:74:32:bf:85:9d:6b:99:92:18:5e:48:f8:
         d7:a9:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:37 2025 by rpki-client