Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File:                     eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier:          bB70TyGq1fOFI0XSCXYHw/S9BKrc+0X7anWJ/z6c/tE=
Subject key identifier:   34:3E:54:BB:14:89:5B:FE:51:AC:68:D2:78:6E:B0:72:BB:70:27:B3
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer:       /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial:       0197B7B32B28A279D51B62DA9DF1B710AC6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 18:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:01 +0000
Files and hashes:         1: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: EmRTNJt++Dqi1YHJgGaa2qX25Z11J/q13ZT0w8pmVwU=)
                          2: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (hash: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:2b:28:a2:79:d5:1b:62:da:9d:f1:b7:10:ac:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
        Validity
            Not Before: Jun 28 18:01:01 2025 GMT
            Not After : Jun 29 18:01:01 2025 GMT
        Subject: CN=343e54bb14895bfe51ac68d2786eb072bb7027b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:d5:77:c5:f2:db:a6:55:67:82:8d:72:ae:
                    94:07:88:df:77:d5:a7:bd:94:1c:96:3c:f8:f9:7b:
                    ff:85:0a:7a:18:7e:9c:02:26:76:c4:f8:e6:0b:6d:
                    42:2a:fc:32:79:52:01:02:17:87:43:31:a2:35:5e:
                    95:31:b7:60:ac:b9:95:43:70:4a:25:3f:a5:46:94:
                    0a:0f:74:81:3b:96:9c:46:0b:9d:af:b3:10:02:79:
                    5a:a7:01:3b:c9:0d:5d:d5:ff:a3:a5:87:25:90:ff:
                    e6:f2:0f:b2:71:94:53:a8:76:fd:e9:83:ac:36:3f:
                    cf:22:e2:ba:41:39:34:8b:bf:16:39:27:ab:f8:f8:
                    ad:2a:28:30:a5:97:05:59:f0:ef:96:80:24:f5:44:
                    68:2b:1b:98:0d:31:97:48:bc:ec:89:b6:7a:c2:f1:
                    e7:f6:09:18:05:12:ad:b8:08:21:08:75:ae:79:fa:
                    8d:5d:33:48:3e:d1:e7:29:4c:9b:8a:c1:a9:df:ad:
                    6d:01:54:c3:af:1d:bf:9d:cc:dd:13:36:f6:13:e6:
                    ce:ac:c4:39:7f:81:d3:65:80:43:2b:9e:05:65:64:
                    6b:84:c9:a3:be:66:3e:c6:f7:ea:d8:c2:fe:31:1f:
                    38:4c:38:5b:e3:9e:42:d1:c8:39:bb:2f:b0:a9:e7:
                    2f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3E:54:BB:14:89:5B:FE:51:AC:68:D2:78:6E:B0:72:BB:70:27:B3
            X509v3 Authority Key Identifier:
                keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:41:1a:47:a2:a2:bb:59:9d:4a:cc:0b:88:bc:aa:9d:49:85:
         ff:b5:10:8b:10:6b:cf:96:31:55:ac:74:7f:2f:87:a1:f3:83:
         4d:68:8e:04:3b:63:0e:2c:d5:6e:cc:78:d2:41:0b:82:d2:a1:
         a3:5e:a9:6f:28:c8:5e:a2:4e:af:ee:5c:48:6f:62:b8:d1:6f:
         ef:5c:f8:6f:27:41:4d:01:a1:2c:ed:57:1c:a5:75:4a:f4:66:
         ae:df:0a:1f:ca:d4:ee:bc:0c:76:39:70:37:eb:dc:ad:e8:34:
         93:ee:d2:f6:c8:d8:14:5f:55:f7:53:11:60:88:a2:ec:4f:a9:
         9d:7f:07:97:02:30:ec:68:92:36:77:fc:bd:bf:6d:b1:bb:81:
         dc:06:51:27:8c:3c:74:ab:cd:43:75:3e:c5:0c:83:e4:c5:fd:
         0e:f6:be:fd:55:44:30:c6:00:4f:58:c7:75:67:8a:96:ed:1c:
         b1:6f:87:cf:45:18:ad:e2:f0:93:02:1f:ca:e1:02:76:0d:ab:
         d7:91:5e:f0:a0:90:94:8b:51:ec:d8:cc:95:84:6a:37:24:0e:
         83:f4:b6:99:5a:50:40:c1:3f:bb:ac:08:aa:cf:5f:b0:e7:df:
         a6:97:df:91:ee:bf:09:23:1a:19:a5:30:9b:02:4d:84:fb:c6:
         d3:60:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:25 2025 by rpki-client