Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File:                     EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier:          wkynWkGzVrhTv14gw2poxJYsVRextdZiQavo2Mqg8sM=
Subject key identifier:   CF:99:39:5E:FD:19:72:FC:2B:70:65:B7:68:CE:52:7A:08:63:8B:34
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer:       /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial:       0197B70F3FF68E688D28BB331AEB7852CD67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number:          0358
Signing time:             Sat 28 Jun 2025 15:01:59 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:59 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:59 +0000
Files and hashes:         1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: CvOFQf2/9Mvmvpjywj0UIfuksHeivKn7InP8ti/0eF4=)
                          2: sxJ4adnYKO7gli2y2qrSkbqN80g.roa (hash: zIiuKl1GBABWNnrsEF/02SPcAT6HuQK8fZBVndJMElk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:3f:f6:8e:68:8d:28:bb:33:1a:eb:78:52:cd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
        Validity
            Not Before: Jun 28 15:01:59 2025 GMT
            Not After : Jun 29 15:01:59 2025 GMT
        Subject: CN=cf99395efd1972fc2b7065b768ce527a08638b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:52:a0:1a:5d:c0:61:64:08:5b:0e:ef:36:59:
                    46:af:62:ff:da:d4:38:50:ce:cd:14:3e:6d:1e:38:
                    aa:6b:8d:23:f7:8c:db:02:87:66:81:8f:fe:3f:32:
                    cd:81:16:60:8f:ff:8c:32:4e:fc:c7:7e:f1:f5:bc:
                    e7:9d:d2:e7:f7:ff:91:b2:7e:a0:75:2a:25:09:23:
                    41:f3:51:f8:85:9a:01:20:87:4f:98:87:fc:4d:ef:
                    cc:36:33:43:92:9b:bd:5c:59:30:e4:0f:a1:ba:dd:
                    48:5a:49:eb:f2:37:08:f9:fa:97:10:9d:3a:2b:29:
                    f5:a3:af:22:e5:75:d5:0e:9a:f5:b6:bf:bc:0e:66:
                    da:22:d2:e8:ed:05:41:9f:83:ce:70:92:6f:d3:39:
                    04:6b:0f:c5:eb:9f:6c:ac:94:3e:47:5a:f6:cd:f6:
                    3e:86:e5:a7:df:1d:33:cd:cd:73:be:78:47:b0:7f:
                    ba:4c:e9:7f:f9:c5:45:7b:39:17:9c:2b:45:b1:de:
                    ba:4f:ec:b6:cc:77:ba:35:71:04:c3:0d:13:2b:d0:
                    9a:4b:de:d9:55:d5:75:66:ba:3e:cb:15:33:4f:85:
                    46:00:f0:23:c1:87:f0:7e:41:5c:f2:17:ab:db:85:
                    01:f6:f7:37:0f:aa:43:10:69:d3:48:d4:cd:c1:dc:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:99:39:5E:FD:19:72:FC:2B:70:65:B7:68:CE:52:7A:08:63:8B:34
            X509v3 Authority Key Identifier:
                keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:73:a7:23:06:06:05:24:a8:e9:d5:c6:37:23:40:07:a3:f6:
         a2:b0:ca:17:6a:f2:de:67:80:94:72:19:9f:94:9c:ae:3b:bd:
         fd:7b:d8:57:4d:9a:fa:35:b7:6e:ed:f2:01:69:58:9c:a1:8d:
         82:bf:43:6d:50:1c:cb:bb:65:b4:7c:8e:8b:ca:a6:74:ea:20:
         24:09:81:37:b5:fc:f3:78:93:ed:4d:39:41:7b:69:f7:8c:9e:
         39:93:9f:09:0c:65:05:34:6b:1f:c7:c8:5c:c8:1a:60:2a:f0:
         b4:be:bc:3c:c8:27:e0:90:b6:1a:34:b9:4b:5f:b6:03:37:29:
         fd:18:63:46:63:85:6a:b2:d2:39:ce:ab:d1:f5:d8:d8:4a:7e:
         5d:e4:82:95:8b:16:79:52:98:20:19:5b:08:ac:fe:6d:20:50:
         b4:86:cf:91:c3:b5:dc:d4:f2:17:23:e2:5a:10:00:50:dc:d4:
         5c:12:e9:98:6d:e7:58:bd:01:1a:f5:91:88:88:14:89:e4:ef:
         06:9b:c4:b5:2a:86:e2:24:35:50:71:a1:8f:1a:6b:5d:74:65:
         9e:a7:ae:33:83:e1:7a:41:2f:73:83:ce:3c:07:ce:04:d2:e7:
         1c:7d:9b:23:ec:2a:e4:17:a7:43:18:9d:15:1f:2d:e3:c7:f8:
         57:d2:0a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:21 2025 by rpki-client