Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File:                     e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier:          A7dEzPku1fQLCmRkiEHd68euIE3VoIXSPizOFGNb8lM=
Subject key identifier:   9D:0D:4B:BA:97:79:7C:E5:57:BF:81:E8:F5:2D:FD:8F:D1:17:7B:B8
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer:       /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial:       0197C61392A02995866F8A47908F18282339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number:          15B9
Signing time:             Tue 01 Jul 2025 13:01:00 +0000
Manifest this update:     Tue 01 Jul 2025 13:01:00 +0000
Manifest next update:     Wed 02 Jul 2025 13:01:00 +0000
Files and hashes:         1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: gGbY+kggENyXMrRJbLEeffBB2vvN/xm14tIpt6klkUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:13:92:a0:29:95:86:6f:8a:47:90:8f:18:28:23:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
        Validity
            Not Before: Jul  1 13:01:00 2025 GMT
            Not After : Jul  2 13:01:00 2025 GMT
        Subject: CN=9d0d4bba97797ce557bf81e8f52dfd8fd1177bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:00:61:94:84:2e:39:79:97:ef:ed:b5:a1:
                    b4:b1:ec:43:cc:64:3f:e8:02:1b:71:93:be:b0:25:
                    95:af:98:da:91:48:e2:3d:76:e0:2e:33:ba:1e:b9:
                    0a:6a:87:01:90:43:0c:f3:bd:d0:7a:9d:9b:43:e6:
                    a0:c4:d2:51:a9:67:33:51:7d:57:1f:69:32:0d:49:
                    21:c0:24:b1:e6:2b:8b:a0:e0:08:b7:2b:c6:7d:b8:
                    cb:2f:4b:16:7c:2d:c0:aa:eb:f8:89:8f:eb:c6:50:
                    3b:51:43:ef:fb:ba:ee:97:a7:de:90:6f:0d:e7:0f:
                    89:c0:f0:5c:04:7b:1f:08:49:4c:f5:66:f4:c3:89:
                    09:22:d9:37:f7:3d:f6:2f:05:1f:f8:70:ae:32:40:
                    7c:93:76:78:3e:93:93:f8:2b:05:84:97:ab:97:bc:
                    1c:12:e8:86:22:d1:a7:2d:1d:1c:36:4e:12:34:3d:
                    e3:a5:ce:a5:4c:c8:06:ac:2b:c9:74:1d:43:3b:8a:
                    51:af:42:ab:24:4a:88:f2:35:f0:6a:18:a9:19:64:
                    33:54:bf:5d:f0:a4:7e:1d:88:d4:88:9c:93:02:73:
                    0b:f3:7a:28:2f:58:c9:3f:eb:67:ee:d0:0b:87:af:
                    ec:89:81:d6:b6:fa:00:94:e2:42:a3:85:7b:b4:a3:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0D:4B:BA:97:79:7C:E5:57:BF:81:E8:F5:2D:FD:8F:D1:17:7B:B8
            X509v3 Authority Key Identifier:
                keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:fe:87:8d:a1:c6:b5:6f:25:21:0e:32:dc:26:e7:a0:c5:
         7c:4f:f5:7d:a2:17:ec:0a:8e:1f:a9:86:e7:24:34:20:26:43:
         69:65:b6:36:96:b4:7b:fa:f1:31:7a:ae:dc:69:88:67:1a:7c:
         39:69:7f:05:3d:ec:1f:9c:a3:b3:ac:0e:ad:f6:a8:cd:4a:3b:
         6d:87:be:42:4b:0c:90:91:ce:9f:8c:fb:5a:57:21:b1:c6:6c:
         09:4b:5f:b9:fe:72:3b:c9:a6:8d:46:47:26:2a:36:e3:23:b3:
         32:ac:de:c4:0d:1b:c1:cc:0f:1f:78:1d:d8:cd:41:3c:af:34:
         f8:f3:e2:55:46:27:2d:ef:c4:92:20:59:2c:12:f5:d8:52:2e:
         00:3b:13:bd:78:94:3d:14:26:1f:1a:94:94:27:a6:28:5f:b4:
         fb:02:f3:3b:f8:1b:a9:a2:ee:56:de:a2:e0:83:eb:3b:55:a3:
         b0:54:39:5b:15:7e:d9:52:33:6c:db:68:18:ea:1c:46:d0:d3:
         a5:33:0f:9f:e1:cc:1b:6d:ca:10:e6:28:1f:7e:dc:39:a8:27:
         d1:63:ed:a3:94:db:1c:41:81:4b:7c:65:13:7a:9c:53:98:4a:
         8d:ee:c1:36:f0:30:dc:48:fb:c8:b8:ec:2a:b3:3b:9c:fe:2e:
         0e:1d:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:55:59 2025 by rpki-client