Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File:                     EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier:          abvbkT6LVPrX6C57VcGmSaYLzt+L1QxrbmhaJRBLB6U=
Subject key identifier:   9A:E8:37:0F:AA:8F:F5:CC:78:78:D5:E8:61:02:DC:9A:5F:9B:45:FE
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer:       /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial:       0197B6A0B2006B3EE9BB97B439F08C3CEA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 13:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:13 +0000
Files and hashes:         1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: 06TB3N8jO2klmX/05igk1I5chDkZhNSt/jWVPXESqcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:b2:00:6b:3e:e9:bb:97:b4:39:f0:8c:3c:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
        Validity
            Not Before: Jun 28 13:01:13 2025 GMT
            Not After : Jun 29 13:01:13 2025 GMT
        Subject: CN=9ae8370faa8ff5cc7878d5e86102dc9a5f9b45fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:24:91:7b:40:76:e0:d6:7c:0e:2e:50:1e:
                    b3:de:64:b1:0c:39:c6:7a:e5:3c:8d:08:3e:5f:36:
                    8e:6d:74:8a:d5:37:19:5b:92:c6:98:81:a2:d4:24:
                    80:09:f1:d5:00:60:5e:1e:8d:13:c8:e9:44:cc:b1:
                    81:7e:53:1e:b1:d6:3b:db:c9:38:e0:d1:d8:ac:f7:
                    62:ec:74:e2:08:5a:76:e8:73:ba:27:be:ed:ac:68:
                    72:cb:9a:4c:42:78:a5:0e:c6:72:e1:c5:d6:0c:c2:
                    56:03:1e:bc:f7:e0:fe:8c:17:1c:68:02:50:a1:30:
                    10:a6:bd:e9:ee:af:b2:ea:27:96:e3:00:f4:cc:4e:
                    ff:49:32:5e:19:bf:34:b4:50:a2:46:b5:83:d3:1e:
                    0e:07:a0:82:35:e8:1e:f7:79:30:d2:f6:de:70:d0:
                    3d:00:a4:62:13:17:f2:86:aa:7d:2e:af:97:4c:7b:
                    7e:ac:fb:38:bd:20:91:3e:f5:f0:2e:f4:5e:5f:5e:
                    f2:e0:57:52:42:d4:d8:93:6b:f9:e5:03:07:a4:07:
                    68:64:2a:26:1a:fa:ba:43:50:ae:a1:78:87:db:22:
                    b9:74:1b:b8:0d:1b:a2:96:fd:c1:a9:33:83:b5:f1:
                    8e:30:5c:54:45:f8:2b:ae:4d:14:81:0c:0e:6c:84:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E8:37:0F:AA:8F:F5:CC:78:78:D5:E8:61:02:DC:9A:5F:9B:45:FE
            X509v3 Authority Key Identifier:
                keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:14:57:57:0e:c6:e8:ff:0c:d0:91:dc:e6:78:b9:a8:30:51:
         51:a9:7f:aa:b5:06:b2:99:e7:58:0f:42:cf:9b:26:86:f9:5b:
         3a:6f:43:ee:af:04:0b:d7:9b:da:b7:8e:41:4c:e1:9e:91:77:
         38:73:a2:d5:2d:fa:66:61:64:3e:77:e5:82:a5:02:83:a8:65:
         6e:8e:ee:16:f9:6e:81:07:88:6b:74:f8:74:f5:a2:4d:8b:be:
         22:c0:e4:00:1e:74:b5:9a:70:1f:b5:30:0d:d8:0a:33:d2:48:
         de:f6:30:37:d8:3a:c5:3b:8f:2a:6a:40:1e:60:6f:9a:c8:f8:
         fe:be:56:99:05:0e:c2:3c:33:9b:58:b0:3f:70:18:1c:a8:96:
         f5:a8:2d:76:09:a0:96:a5:4e:df:80:7d:42:c0:c0:59:2e:57:
         91:6c:6d:5c:d5:58:45:ec:18:6a:a8:52:fc:7e:da:bc:a5:32:
         d6:58:75:cf:7b:39:3a:af:b8:0e:ce:fa:76:31:ea:b5:a6:ba:
         af:98:40:c2:1c:a6:e7:c4:04:c6:1b:d4:4e:ee:35:c3:bd:26:
         00:39:b8:04:f3:01:7b:8d:85:3e:29:b2:f5:4b:10:29:12:13:
         d1:7e:ad:2b:28:a7:b6:a3:a1:a9:91:d5:16:87:1e:74:cc:99:
         95:79:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:20 2025 by rpki-client