Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File:                     EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier:          Wb2pV5wGaTLWcmR5IwaipFFpJfw0nMXBzhBh1SXE628=
Subject key identifier:   16:DB:C2:78:14:B5:4C:7C:8D:F4:50:E1:1F:8F:FA:4C:D1:D1:1E:FA
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer:       /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial:       0197B8FD27D5A306333708F475BA7AACF9A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number:          15B2
Signing time:             Sun 29 Jun 2025 00:01:27 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:27 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:27 +0000
Files and hashes:         1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: e/HyYwa3V3wi2ClrVwtdH9TY0v2flTXCSMfyWU8TaiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:27:d5:a3:06:33:37:08:f4:75:ba:7a:ac:f9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
        Validity
            Not Before: Jun 29 00:01:27 2025 GMT
            Not After : Jun 30 00:01:27 2025 GMT
        Subject: CN=16dbc27814b54c7c8df450e11f8ffa4cd1d11efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:ba:ac:34:a6:b2:a4:fe:3f:05:9a:0b:25:
                    11:43:cc:ed:6f:14:5a:c6:fb:18:e3:d7:d3:30:ce:
                    85:40:08:7d:90:74:8a:21:9f:5c:28:ef:89:16:48:
                    0f:45:51:71:53:47:fa:e4:65:7d:cf:82:4a:07:4e:
                    a7:e5:f3:21:c2:1e:70:c9:5d:ab:47:02:81:ef:a3:
                    8e:5a:31:f8:c9:b9:2a:d5:27:4f:8f:4b:f7:3c:1a:
                    31:c2:e6:e4:a0:45:f1:0c:f7:63:45:2f:8d:37:c0:
                    f5:af:37:4f:62:e8:40:de:c8:82:34:3e:4b:77:10:
                    78:bf:db:54:ba:09:3e:af:7a:10:2f:6c:1b:d4:51:
                    4d:24:89:3f:83:bc:c7:14:e8:5f:de:b9:ba:34:74:
                    93:f5:cf:b8:bd:ff:8c:be:d1:65:4b:e0:c1:68:99:
                    78:3c:07:f7:d3:3b:4e:cc:4a:82:f5:39:59:87:dd:
                    7a:8e:ab:ef:cc:63:16:a5:81:6f:84:35:ce:6e:1e:
                    0d:c0:bb:95:72:61:87:b2:ad:dd:ef:dc:52:c3:6e:
                    42:9d:1e:4f:d4:5c:bf:63:6b:e3:93:13:40:83:a9:
                    b8:71:bf:ea:9f:56:f1:02:82:d9:0b:64:ff:da:5a:
                    e9:9e:b2:90:7b:b7:0e:d6:12:41:ec:50:a5:d7:ac:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:C2:78:14:B5:4C:7C:8D:F4:50:E1:1F:8F:FA:4C:D1:D1:1E:FA
            X509v3 Authority Key Identifier:
                keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:80:1d:12:25:05:e6:2d:21:d2:12:05:76:10:b8:65:e6:0c:
         0f:46:bc:75:db:e2:87:8d:24:5b:76:eb:4c:bc:eb:80:48:13:
         58:6d:df:9f:c6:8d:6c:60:55:8e:00:07:94:d9:b7:13:98:db:
         e6:c6:6b:a3:5f:b7:72:5b:37:01:86:f6:1e:45:b8:e1:6f:5e:
         24:bc:8b:74:30:c2:dd:7e:22:98:74:8a:1f:24:2c:67:b0:78:
         87:f3:7d:38:03:da:b6:57:dd:f4:f4:04:3d:89:2b:17:26:e1:
         87:84:7d:09:06:b7:99:0d:49:7d:34:cf:b9:58:ce:08:2b:32:
         b7:03:1b:87:01:bc:35:d7:eb:73:b0:34:55:67:ba:f4:bc:dc:
         38:a4:e1:03:80:14:df:03:3b:9d:5d:6b:f9:4d:1f:a5:56:9b:
         9d:d2:47:73:7a:89:b0:c8:a8:70:ca:ef:a0:68:8f:de:ef:14:
         4b:c1:14:ed:45:63:1e:ae:e9:15:49:59:46:8c:98:1a:ec:de:
         0d:52:fe:f4:92:a5:e4:4b:a3:cc:9d:78:19:17:f3:99:1a:bf:
         e0:70:d5:7d:2a:b6:c5:58:ca:57:1c:96:dc:74:4a:29:48:5e:
         d0:6f:83:57:6c:df:ef:89:96:a2:4f:10:51:18:71:a5:e0:be:
         61:73:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:53:52 2025 by rpki-client