Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          vw+EvLAlCaF/AmJnEqn5VQ/ydRH5zUKIqj7M0Jkying=
Subject key identifier:   6D:FA:7D:BA:28:AE:BA:EF:C7:19:04:3C:4C:29:CF:DB:0B:B4:80:BC
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       0198A04D31EB10271E494FAFB33AC74FB5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0E45
Signing time:             Tue 12 Aug 2025 22:01:10 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:10 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:10 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: 24sypcns+ootGoHN/OcVm0V17LdmHzdJk5F7QUPmZGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:31:eb:10:27:1e:49:4f:af:b3:3a:c7:4f:b5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Aug 12 22:01:10 2025 GMT
            Not After : Aug 13 22:01:10 2025 GMT
        Subject: CN=6dfa7dba28aebaefc719043c4c29cfdb0bb480bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:6d:a6:ea:f9:23:75:03:49:65:db:ed:5c:
                    ac:d5:6a:cc:96:55:ad:77:f2:f1:d9:ab:c9:bc:7f:
                    0a:2b:b0:82:c2:1e:24:9d:aa:d6:e0:6d:c8:c4:d1:
                    05:25:35:20:6d:44:e7:ef:04:af:84:ef:3c:67:c4:
                    36:b4:02:f0:ec:27:8f:a2:00:0d:63:6f:0f:51:c8:
                    d0:fc:6f:b8:7d:42:04:b5:34:f7:4a:f6:e2:89:67:
                    27:39:c3:aa:80:ae:23:a7:77:05:b2:e2:f7:af:cc:
                    52:d0:ac:e1:9a:89:c3:a2:7d:f5:2b:d2:79:04:f4:
                    81:c7:1a:3f:1a:69:e4:5e:4f:03:b8:59:3e:c6:09:
                    a5:31:91:cd:32:72:0a:7f:d9:d0:91:a5:4e:9a:b9:
                    73:7f:76:e7:44:7b:15:2f:e6:4d:fd:37:76:f2:e6:
                    f6:5b:f2:72:21:07:32:0e:bf:4b:4b:70:5a:dd:be:
                    f0:25:7a:22:37:2e:f7:eb:09:0a:33:85:e2:1c:ae:
                    7c:0b:62:e0:89:4f:a5:8f:bb:e2:67:6c:73:41:f3:
                    47:f1:75:37:d4:af:55:80:fb:ea:28:73:44:53:b0:
                    67:c0:7a:1d:99:1f:d9:4b:0e:b5:e7:57:78:57:f2:
                    ed:38:80:51:70:4c:0f:ce:a8:9e:19:20:f4:84:93:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FA:7D:BA:28:AE:BA:EF:C7:19:04:3C:4C:29:CF:DB:0B:B4:80:BC
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:46:a8:37:50:1e:fc:7b:cc:6a:9b:fb:41:9a:a0:92:41:d8:
         b0:ac:a2:f7:45:7c:9e:35:33:56:03:5c:22:f1:3e:f5:e2:42:
         77:a7:59:ba:65:b7:e2:34:c5:b3:c6:e7:51:11:45:4c:03:be:
         16:53:12:0f:51:03:47:bf:97:78:2f:c3:3b:ce:12:fd:f6:da:
         9d:79:3f:0d:2e:c5:59:92:b1:01:92:b8:d4:d7:c7:46:a0:a0:
         9c:72:6b:50:4b:da:ec:c5:02:07:24:c7:ed:52:84:63:bc:2b:
         83:a7:b5:d6:9f:81:d8:1c:e8:84:aa:f7:f5:75:9b:ed:4b:de:
         d6:72:9d:f8:23:da:e7:7c:1d:8e:6b:2f:69:53:17:75:15:c2:
         07:e1:dd:16:58:23:15:4c:ad:d8:b9:80:77:37:3f:d5:8d:ce:
         6c:bf:f4:98:e4:66:f4:dc:27:ae:e8:09:8a:37:a8:bd:c7:c9:
         36:c6:00:a7:0b:89:55:40:f8:80:6e:f2:5b:fd:ae:60:20:9c:
         67:f7:eb:ab:40:15:dc:c4:ff:0e:aa:39:29:63:d8:23:45:36:
         6b:c9:5a:54:f9:01:3b:b9:a4:ed:84:81:c7:96:d9:8c:6b:9d:
         f3:b2:8d:49:59:85:62:53:a2:92:3f:f7:ec:0f:2b:6d:2b:88:
         c1:ac:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:17 2025 by rpki-client