Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File:                     EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier:          sdVxwyJhcjNX7TLpEXszbfSy+PftW8gN5IWleWw+Ei4=
Subject key identifier:   D6:FA:48:1B:9A:A3:4A:E1:46:B6:A2:4D:21:BB:AC:90:C9:B0:FF:49
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer:       /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial:       0197B5FC4E67CF4CD2D1FA08D28E30506587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 10:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:40 +0000
Files and hashes:         1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: D5uqxAOE9oqHn/1rLRlGuDGdwJujQY9aK64OF0isolU=)
                          2: c5PalyNSyST_aAI1KT3QGDFOwJs.roa (hash: mO2ZdsVC3fTegCqI2v7PXch94it/WJD1mL1+9bQtLsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:4e:67:cf:4c:d2:d1:fa:08:d2:8e:30:50:65:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
        Validity
            Not Before: Jun 28 10:01:40 2025 GMT
            Not After : Jun 29 10:01:40 2025 GMT
        Subject: CN=d6fa481b9aa34ae146b6a24d21bbac90c9b0ff49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:87:c5:a9:ea:ae:fb:39:49:78:14:37:a9:
                    ce:b8:56:a9:12:da:57:c1:b3:d9:82:75:37:8d:d9:
                    34:d6:e4:ee:e3:a3:75:13:0f:74:c1:20:78:95:ea:
                    f2:e1:a8:94:4e:9b:b8:ad:c8:3f:5c:e2:ba:1a:08:
                    70:f7:32:0f:e7:ec:19:43:f7:a5:26:d6:d1:87:15:
                    de:bc:36:97:ab:45:0c:9e:c5:a7:32:58:d7:a6:b6:
                    06:7b:d6:dc:2e:c7:b6:43:2f:c3:95:69:06:af:e4:
                    c3:21:e3:bb:89:fe:07:74:12:98:2c:7e:e4:b4:4d:
                    11:af:a0:cd:c9:42:b5:b9:8e:da:7d:dc:78:3e:29:
                    be:bf:0c:dd:ad:00:af:c6:4f:7b:26:4d:bf:d7:3d:
                    0d:fc:5b:83:c2:7d:96:26:47:d0:7a:ed:b5:95:44:
                    73:74:5f:01:88:3c:81:aa:f0:22:fd:42:47:4a:96:
                    0b:e1:9d:40:f2:a0:6c:29:bd:e1:0b:e7:68:e2:c6:
                    5b:2c:a7:79:c6:6f:dc:09:61:ca:a0:39:a4:02:ea:
                    e5:5a:48:bb:48:b7:af:0c:11:40:e4:b9:f5:b7:82:
                    9e:59:e0:b5:3e:5b:6c:3b:c2:89:82:10:b5:f3:dd:
                    76:31:3e:1f:3d:c2:11:2e:9a:28:39:86:4f:0f:67:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FA:48:1B:9A:A3:4A:E1:46:B6:A2:4D:21:BB:AC:90:C9:B0:FF:49
            X509v3 Authority Key Identifier:
                keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:83:f1:e3:71:21:db:db:ce:76:aa:19:11:6c:82:fe:f9:47:
         77:c4:a9:17:f7:83:7e:ed:88:c9:6b:34:4c:c1:3d:78:6f:66:
         f4:66:4d:ea:95:a4:d3:e0:5c:d1:b1:c0:f8:be:ac:45:e4:52:
         b5:1b:82:c2:45:4d:27:3f:bc:4a:e3:94:f2:46:4d:22:7e:e8:
         95:c6:c0:4b:22:3a:f0:c8:36:ea:9e:cd:04:db:ec:07:1f:a3:
         03:1e:06:eb:e0:da:69:4d:45:e7:cc:41:9e:dd:35:88:a5:68:
         ee:7b:96:eb:cd:6c:7e:f5:17:7e:eb:63:23:2a:c5:ee:2f:8e:
         c9:db:52:05:7a:01:a1:9f:a7:b0:9c:ff:f4:ba:40:aa:70:4d:
         63:f9:0d:dc:bc:96:33:88:e1:30:3e:17:73:dd:47:76:6a:23:
         0f:b0:c6:c1:68:89:5d:17:b6:f3:be:fc:79:7f:b2:83:d0:bd:
         f8:d6:80:5e:44:8a:8a:72:15:2d:2f:8a:db:d9:a1:38:58:89:
         78:c9:6e:7a:00:a0:0c:1c:46:a5:7e:b3:7b:f1:cf:5e:80:ef:
         23:fd:1c:22:70:c9:9f:41:b4:83:7e:a1:33:76:f0:ac:5c:f8:
         8e:7e:4d:d9:c6:07:6f:a8:63:9a:72:ad:f6:b5:4b:7a:55:52:
         f7:60:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:15 2025 by rpki-client