Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File:                     eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier:          6DmhM7EDSCl15gzScFNqZTmdJ+NTcEjYDivgur+xhsI=
Subject key identifier:   7B:52:DE:E8:32:66:37:3B:4E:9A:DF:62:45:C9:AC:C5:D3:63:AD:42
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer:       /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial:       0197CCBAE0E580211B20850B441B4C27E2C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number:          15BF
Signing time:             Wed 02 Jul 2025 20:01:28 +0000
Manifest this update:     Wed 02 Jul 2025 20:01:28 +0000
Manifest next update:     Thu 03 Jul 2025 20:01:28 +0000
Files and hashes:         1: Ox2PlsCArfAxGifmEfuqjyRe0E4.roa (hash: P6BNeUEGLL42TOaGFO8umGbX15BxZNmI6g3Fgb2PRFA=)
                          2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: h0Jovjbx5io42JeH59s7bqkzCl7p8PDTh9n+u54hHNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:ba:e0:e5:80:21:1b:20:85:0b:44:1b:4c:27:e2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
        Validity
            Not Before: Jul  2 20:01:28 2025 GMT
            Not After : Jul  3 20:01:28 2025 GMT
        Subject: CN=7b52dee83266373b4e9adf6245c9acc5d363ad42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:45:ed:79:34:78:f2:5e:83:9d:37:55:4c:
                    a0:78:6a:a0:71:bd:d7:8b:95:a6:ca:f9:b5:95:67:
                    a6:e8:5f:8c:9e:e6:d7:9a:bf:b8:3b:67:77:7c:bc:
                    06:72:de:91:ac:d8:c5:18:14:50:cb:85:fc:16:6b:
                    d9:ac:a3:7f:ef:5e:11:23:82:21:8c:c9:04:1a:dd:
                    fe:72:06:e9:35:0b:c3:af:e0:b0:43:97:47:48:4f:
                    f6:a1:e0:9b:db:e9:ed:d5:97:f8:ce:44:47:da:00:
                    a4:9e:0c:ac:53:8c:4f:1c:49:fb:80:65:45:28:1d:
                    97:3e:2a:f2:58:99:df:a4:5b:02:ef:52:b7:47:49:
                    e1:ea:fc:64:47:f9:ba:18:0e:34:e6:75:d7:6d:8c:
                    b1:5f:4d:a0:97:6c:02:24:6b:d8:e5:49:1f:0e:e1:
                    d7:b4:75:48:61:98:0c:73:ef:3a:e8:f2:d2:98:ae:
                    cf:62:63:7a:b7:3f:19:11:59:14:dd:d4:5f:ef:04:
                    9a:45:6b:51:1d:0a:33:8b:9f:78:33:27:53:b4:2f:
                    0a:6a:55:48:d8:a4:e2:1f:7e:fa:fe:55:71:67:f3:
                    94:27:bd:7a:99:c7:65:db:94:0e:e0:ad:67:61:4e:
                    5b:d4:75:af:e7:f6:c9:6a:b6:65:d4:00:92:72:d3:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:DE:E8:32:66:37:3B:4E:9A:DF:62:45:C9:AC:C5:D3:63:AD:42
            X509v3 Authority Key Identifier:
                keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:95:09:84:a3:90:c4:03:35:49:9c:ab:b0:92:dc:2b:54:d3:
         b9:72:ba:6a:70:49:6f:96:55:33:f6:30:1f:c8:59:89:ef:57:
         22:0e:18:ba:e6:5e:24:1f:64:42:19:8b:39:bb:20:1f:a5:b6:
         c3:b4:a4:0a:bb:89:ae:22:cf:6d:58:c6:70:67:36:c0:31:03:
         8a:f2:20:2f:f4:4c:c0:01:1a:67:fb:61:32:4a:fc:fb:88:e7:
         35:91:dd:bd:5c:8e:1f:07:ed:32:84:62:b9:83:3a:55:bb:1b:
         08:8b:81:25:2b:9c:9b:52:d8:f7:9d:0d:79:12:d7:43:97:fc:
         1b:26:54:56:b8:f4:ec:7c:8f:5b:cb:23:7d:0f:00:da:8e:a6:
         86:1e:ba:b2:a1:80:e1:d7:2b:65:ef:60:85:ca:33:12:e9:21:
         6a:66:f7:90:fe:8a:f8:9a:fe:f0:b0:af:f0:36:ee:4d:b7:f2:
         3d:8a:24:f7:dc:bd:d0:94:1a:b0:49:3c:f1:9f:ce:4a:20:a4:
         74:bc:12:18:e5:bd:e9:c5:de:28:d1:14:ad:74:12:a0:12:cb:
         52:03:e6:7b:0b:0d:73:ab:78:f1:f5:31:cf:9b:57:9b:f6:47:
         95:cd:82:d2:63:60:95:43:43:02:33:dc:7a:fb:68:b2:03:2d:
         77:04:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:59:55 2025 by rpki-client