Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
File:                     i5epFTYKSH1c9dXGZeW_4f_1Np8.mft (raw, json)
Hash identifier:          IXXCM9RsFtAUBQveF1Re+MId0/WUO+70Ox05X588x4w=
Subject key identifier:   EE:34:21:93:28:75:A1:5B:97:EF:C0:36:FD:38:6D:AE:9B:FD:A1:1E
Authority key identifier: 8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F
Certificate issuer:       /CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
Certificate serial:       019873E36DA3DCE178A7FC3A2F1E3F53B492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
Manifest number:          04B4
Signing time:             Mon 04 Aug 2025 07:02:21 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:21 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:21 +0000
Files and hashes:         1: i5epFTYKSH1c9dXGZeW_4f_1Np8.crl (hash: 1phVBCqaXdojXYs7QwQipR0HmfI0Ijtq2EVnPl1FwCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:6d:a3:dc:e1:78:a7:fc:3a:2f:1e:3f:53:b4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b97a915360a487d5cf5d5c665e5bfe1fff5369f
        Validity
            Not Before: Aug  4 07:02:21 2025 GMT
            Not After : Aug  5 07:02:21 2025 GMT
        Subject: CN=ee3421932875a15b97efc036fd386dae9bfda11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:58:70:83:c4:be:00:f1:17:0d:bb:54:8b:
                    f8:bd:a6:9a:29:5c:77:ab:cd:60:de:ae:84:8b:1e:
                    e2:a9:94:ef:3d:ad:93:c2:33:b0:93:84:a1:0f:79:
                    c8:26:2d:36:97:5d:02:a4:f9:7a:70:ba:ee:18:78:
                    bc:24:e4:d7:74:03:a9:2c:a5:73:e7:3e:29:b8:d2:
                    57:1a:a4:85:da:c3:00:2f:65:43:de:be:87:73:01:
                    d6:a1:a9:2e:5a:a0:e0:4c:ab:19:f4:f8:e2:a9:83:
                    ef:b6:d1:a5:7c:77:f5:8b:54:e3:bc:23:9e:24:7c:
                    8b:8a:4b:2d:b7:74:73:ca:c6:58:e0:0d:c2:3c:aa:
                    27:dc:87:6f:09:32:34:87:f8:5c:51:5d:ef:14:c7:
                    e4:21:ff:90:fc:16:8e:a5:79:be:31:cf:02:36:92:
                    15:f9:79:92:6b:bd:e6:00:1a:32:f4:08:86:29:1a:
                    fe:c5:11:8a:fc:1e:10:60:49:60:54:e7:8f:97:f7:
                    c6:16:20:7c:cb:de:ac:f4:58:dc:2c:d2:47:fd:e5:
                    7c:c5:77:a8:b9:09:71:97:be:9c:07:1d:fa:63:c9:
                    e1:c8:74:d4:1e:64:1a:d8:dd:63:9d:c9:2e:1b:d2:
                    cf:32:81:0a:b6:1b:25:96:01:c7:3d:48:a5:40:2f:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:34:21:93:28:75:A1:5B:97:EF:C0:36:FD:38:6D:AE:9B:FD:A1:1E
            X509v3 Authority Key Identifier:
                keyid:8B:97:A9:15:36:0A:48:7D:5C:F5:D5:C6:65:E5:BF:E1:FF:F5:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5epFTYKSH1c9dXGZeW_4f_1Np8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7d4a29-023f-42d7-aab7-d87b361acd89/1/i5epFTYKSH1c9dXGZeW_4f_1Np8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:8e:70:a4:7f:7c:52:d1:f3:73:93:fa:73:b7:c2:95:ce:
         72:5c:8a:c6:f4:8c:9a:e0:9a:5e:c3:a6:4b:88:91:db:4e:93:
         cb:f0:b5:4f:38:5c:d2:01:0b:ca:f2:1b:0a:e1:de:5e:1b:da:
         11:6c:65:69:0c:99:33:81:fa:b1:80:65:c6:1a:51:33:70:14:
         23:ff:1e:95:e0:a3:a0:92:9a:6d:4f:49:e9:a9:ec:ae:f2:f0:
         b1:ac:35:e7:0b:5b:25:9c:58:cf:2a:79:df:07:c2:0d:e6:fa:
         b9:25:62:19:96:46:4e:ca:12:24:0d:77:b8:7a:72:5e:b0:cb:
         f4:74:5e:9a:e7:7a:6c:e3:be:19:cc:00:cd:cb:75:2f:63:d5:
         b3:29:a9:d2:e4:c1:e8:3a:8e:2f:f9:d8:25:e3:ea:f8:01:c0:
         6f:8a:6f:a7:09:9d:2d:15:ba:58:0e:f6:b7:04:3b:3b:07:98:
         0d:02:7b:73:19:4b:ba:ec:b0:3d:c8:01:d5:21:95:24:d9:78:
         68:5e:6c:81:0e:1d:c8:8c:8e:89:57:4a:4b:72:31:98:e9:c9:
         00:5d:9b:2e:26:cf:67:cb:a0:b1:44:3d:a2:16:60:c6:ca:bc:
         3e:da:dd:f9:c4:3e:cf:38:af:2b:58:97:7e:f1:47:24:99:9f:
         3c:fc:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:35 2025 by rpki-client