Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier:          LwOvWzI96/dyA9AizYvGalsxBg5xBGEx5MGkMMOiVeQ=
Subject key identifier:   C8:1A:C0:61:DD:0C:C8:4E:69:6B:16:B4:2B:4B:C7:FB:91:36:5E:EE
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       0196B96CFAFC3E94573357B7A254E87483A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number:          093F
Signing time:             Sat 10 May 2025 09:00:49 +0000
Manifest this update:     Sat 10 May 2025 09:00:49 +0000
Manifest next update:     Sun 11 May 2025 09:00:49 +0000
Files and hashes:         1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: LEH4XmHozG/cW0F3vXKi/wLQJQQ9tFfN28UDfSFXES4=)
                          2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:6c:fa:fc:3e:94:57:33:57:b7:a2:54:e8:74:83:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: May 10 09:00:49 2025 GMT
            Not After : May 11 09:00:49 2025 GMT
        Subject: CN=c81ac061dd0cc84e696b16b42b4bc7fb91365eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:ba:e1:ac:b8:97:6b:a6:23:21:2d:2c:6c:
                    27:d2:6f:aa:cb:ff:34:86:18:7e:9c:b8:5b:18:a3:
                    92:09:9a:3b:3d:fd:63:3d:ad:78:4d:f2:ff:44:c0:
                    91:93:9d:90:02:0f:5d:1c:e5:57:64:41:59:dd:37:
                    ed:3b:a8:1e:48:0c:17:ec:e6:9f:7f:6e:e5:d7:6f:
                    0c:f7:ac:dc:4c:6e:b4:5e:9f:4a:9e:09:0c:cb:fe:
                    7c:55:a6:61:85:8f:04:6f:a4:27:5a:ad:f7:49:c0:
                    07:2a:fd:99:7c:32:23:c8:63:5d:3a:38:b1:47:d9:
                    a1:ca:cf:36:f8:1e:55:ea:32:74:03:9a:a5:63:8c:
                    c7:99:65:ba:d3:4e:9e:35:08:9d:da:d6:54:19:eb:
                    99:44:63:44:d2:e2:9d:e6:aa:16:fa:ae:7e:da:42:
                    15:76:7d:c8:8e:e6:3b:69:95:1c:fd:2e:bc:9a:43:
                    be:3f:a5:04:1a:63:cd:f3:63:47:88:e2:61:a3:ca:
                    81:23:88:ad:bf:21:c8:b3:d6:e7:6b:c0:3e:8f:53:
                    38:01:99:60:c9:6d:ff:7c:d3:1d:67:02:c8:61:10:
                    9f:f9:d6:1b:28:11:13:fd:7c:c7:a4:64:8d:4a:14:
                    7b:02:36:f4:ba:d0:b2:dc:71:c6:90:78:39:fa:0f:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:C0:61:DD:0C:C8:4E:69:6B:16:B4:2B:4B:C7:FB:91:36:5E:EE
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:a1:8d:fe:55:98:d3:d2:77:a2:8e:d1:ba:1b:3f:c0:f3:d5:
         35:c4:27:cb:a2:68:20:ab:55:d2:3c:2b:02:e4:32:5b:1d:43:
         48:14:49:5f:ff:e7:f0:f2:e5:3f:14:d0:be:b4:4a:ca:7e:27:
         90:c5:99:12:59:bc:5d:f9:01:8e:63:22:c8:7e:26:bd:23:86:
         19:3f:4c:1b:3a:85:79:f9:d1:8a:2a:6e:5e:83:42:ba:10:87:
         7d:80:75:43:55:6e:bd:f8:12:d3:c5:36:27:cd:48:b6:5a:71:
         7d:8a:09:c4:ac:75:25:d1:38:8f:11:36:22:d3:f9:38:c5:51:
         44:c9:74:33:e1:a4:43:2a:21:7c:03:1c:ae:1b:50:1e:bf:60:
         57:13:63:c9:2c:b6:ec:6a:b9:9f:71:9d:df:19:00:c5:a8:dc:
         14:da:ef:73:41:67:f5:3e:dc:ed:98:3d:85:85:93:de:fe:ec:
         27:3f:a6:75:8b:c4:5a:82:c3:ec:b3:0c:c9:28:f7:75:98:6d:
         bc:ac:cc:ca:b4:f5:b7:cf:6b:c1:c2:6f:fc:3d:42:a6:28:82:
         38:71:bd:0e:bb:4a:7c:53:68:56:f5:31:97:b7:41:50:52:01:
         05:c6:3d:83:7f:01:c2:c8:25:61:f5:28:48:be:8a:dd:05:b5:
         c4:c6:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:05:11 2025 by rpki-client