Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
File:                     eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft (raw, json)
Hash identifier:          sTSN0qGM5THxf/S0L5ebi6ZXly5T+ZOomQKsfbvX3ZI=
Subject key identifier:   5C:FE:69:6A:F3:36:EE:4B:6C:D9:7A:FE:06:AB:33:93:E7:EF:29:45
Authority key identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D
Certificate issuer:       /CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
Certificate serial:       0197B77CC9F7E2DF20480F902C1E123F6145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
Manifest number:          0219
Signing time:             Sat 28 Jun 2025 17:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:37 +0000
Files and hashes:         1: eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl (hash: u6j5KrkPJd//rPaUkJhFneDxunGYDCOFqVRDEooOvsk=)
                          2: t4J82APsmp_R6OEftpBkDV2egNw.roa (hash: 8zX3Us/+jsPS0B0DI0Wm7LbIZB+zrk1lXmg8uqQiqvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:c9:f7:e2:df:20:48:0f:90:2c:1e:12:3f:61:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
        Validity
            Not Before: Jun 28 17:01:37 2025 GMT
            Not After : Jun 29 17:01:37 2025 GMT
        Subject: CN=5cfe696af336ee4b6cd97afe06ab3393e7ef2945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:0b:b0:7e:5d:6a:d3:c3:25:07:d4:b4:81:
                    75:72:33:a9:85:22:09:2b:74:60:25:b4:1d:8c:ae:
                    0d:17:f1:47:59:a7:8b:56:61:db:49:d5:f1:74:d8:
                    65:8c:45:4f:44:a0:34:de:90:67:aa:4a:53:6d:49:
                    e7:4a:17:08:e6:3c:37:94:4a:6e:61:c8:76:0f:1e:
                    bb:c5:d2:96:7d:fd:c0:98:26:46:8c:21:0b:53:77:
                    b9:5e:97:5a:e0:5a:65:a8:9a:1f:34:ca:97:02:fc:
                    1c:a8:36:46:97:f0:ed:2f:c9:d5:d1:6f:25:17:c1:
                    1b:ea:3b:40:1f:25:e9:a1:33:e0:aa:d4:aa:31:75:
                    a8:25:02:73:de:6e:51:d2:26:9d:82:09:5b:a9:af:
                    09:8d:26:1a:4b:67:3f:1b:05:fd:c4:14:69:33:13:
                    ae:77:dd:2a:fa:eb:61:3d:f8:a4:16:0b:60:97:07:
                    21:7d:23:d3:a3:88:88:db:88:1f:a3:4a:64:b8:35:
                    f3:b9:76:16:3f:6f:d0:9b:f2:47:06:9a:fc:f8:93:
                    b7:1f:2c:1b:5c:64:dc:ff:8e:66:9b:3a:db:bd:4b:
                    2e:22:10:5a:c5:86:a7:d3:4a:0b:de:6f:19:b9:5b:
                    fa:52:07:d1:c6:dd:3a:cb:62:25:f8:03:72:55:01:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:69:6A:F3:36:EE:4B:6C:D9:7A:FE:06:AB:33:93:E7:EF:29:45
            X509v3 Authority Key Identifier:
                keyid:7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:3d:25:00:d3:4c:97:12:db:63:71:4a:d1:da:9f:05:e8:
         f9:5e:42:86:75:20:70:05:f2:87:fe:54:13:5c:b1:5f:b4:fb:
         a2:aa:d2:3b:d0:e2:0a:ce:f5:9a:8a:e0:a7:4d:e8:18:f2:07:
         6c:2a:3b:cf:2e:70:d4:0c:0b:8f:df:ff:2d:d5:c6:d9:98:24:
         23:a0:00:5e:e6:dc:36:0d:c8:1f:8c:fc:d1:8b:96:a0:58:49:
         7e:78:76:83:1a:cb:56:85:5e:18:a1:16:96:f3:cf:b3:d1:dc:
         b5:47:7b:8a:01:74:b3:26:de:34:27:46:53:02:90:d1:20:c4:
         4a:7b:47:a8:ff:27:32:d0:2d:20:09:72:4a:d5:07:5c:ba:26:
         bf:5d:6a:78:14:fa:f6:54:c5:f2:17:ce:4b:10:74:74:31:72:
         de:47:41:80:6b:ec:7c:5c:68:5d:63:8d:7c:4c:54:64:4f:62:
         58:3a:c3:82:fe:6b:85:9e:f0:00:05:d7:ea:7c:69:9d:52:ad:
         fb:46:ec:b6:60:b0:04:90:0c:79:90:bd:cc:91:ef:55:85:84:
         61:12:3f:d6:90:78:1d:0a:29:80:21:9d:13:10:c8:2f:27:f0:
         86:f7:39:65:72:86:36:dc:29:3d:d8:f7:40:15:43:d8:2f:26:
         c8:f9:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:34 2025 by rpki-client