Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File:                     e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier:          v5Ul2WE4uDxkovxUm4BEY3Fo6VE7b8cQejk/3mZ0Czk=
Subject key identifier:   13:63:DA:0F:90:BB:BB:0D:4B:DA:2C:67:5F:D3:B7:26:6C:EB:C9:19
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer:       /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial:       01988A32D9111D37C85E70DB99AEACAE2371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 15:00:44 +0000
Manifest this update:     Fri 08 Aug 2025 15:00:44 +0000
Manifest next update:     Sat 09 Aug 2025 15:00:44 +0000
Files and hashes:         1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: Q6Fk7R9SM5UqOCFQTPaO+u+rJ1Sekkq6KhDk99dEWMg=)
                          2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:32:d9:11:1d:37:c8:5e:70:db:99:ae:ac:ae:23:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
        Validity
            Not Before: Aug  8 15:00:44 2025 GMT
            Not After : Aug  9 15:00:44 2025 GMT
        Subject: CN=1363da0f90bbbb0d4bda2c675fd3b7266cebc919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:32:0a:97:9c:7a:8d:60:8f:7f:32:3c:cd:
                    c4:2c:85:6b:02:d3:a8:c8:8e:05:16:57:08:e8:b5:
                    ab:3f:9a:27:a5:b4:9a:ff:08:96:5a:e7:d0:cb:c1:
                    89:06:7d:e4:5a:d6:09:e4:f4:ff:ca:a9:bb:26:5a:
                    28:1b:40:c7:6c:75:87:01:d9:ec:c5:c5:c8:4e:51:
                    cd:27:25:51:77:50:a6:38:f2:39:4a:14:f4:77:8a:
                    e8:cd:02:50:f5:e0:c0:74:43:ff:cc:93:60:7d:a0:
                    a8:53:2d:6d:8b:52:69:f6:a5:27:6b:b6:6d:58:ca:
                    0f:c4:c3:8e:9c:18:5a:40:7f:a7:f8:b8:03:5f:ad:
                    f6:4e:da:cd:67:73:aa:27:b2:e9:48:38:85:ed:37:
                    7b:28:d8:30:57:b0:51:19:48:d8:bf:9f:75:4e:ab:
                    dd:a5:0f:c6:aa:47:34:21:1d:df:01:74:36:7f:4b:
                    34:27:d9:87:8e:c9:48:dc:ec:16:11:51:b5:e7:f7:
                    89:59:50:45:12:91:13:db:21:8e:f7:5e:e1:17:51:
                    08:8e:95:16:21:3d:61:c1:09:2f:2e:9f:e5:5e:a1:
                    15:c0:fb:c5:bb:6b:19:c5:ff:fe:96:58:9d:56:0e:
                    1d:98:88:fb:5a:4d:b9:82:ca:36:1c:01:a5:e3:65:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:63:DA:0F:90:BB:BB:0D:4B:DA:2C:67:5F:D3:B7:26:6C:EB:C9:19
            X509v3 Authority Key Identifier:
                keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8a:17:7c:80:81:35:99:88:f8:d1:23:ef:38:8f:39:2e:4f:
         f1:a1:ef:f6:08:31:87:e6:f5:67:0d:da:fc:5d:dc:32:fe:5b:
         d5:53:1e:02:94:0a:7d:16:14:38:ba:0c:bb:10:71:45:25:77:
         ce:b9:eb:d9:97:a9:67:a7:32:7a:77:9f:e0:88:33:1a:0d:cf:
         d6:7e:a6:02:b8:ff:d3:81:91:6f:68:7d:e1:cc:c8:8b:c3:fc:
         24:64:ce:af:70:6d:00:f7:d5:41:29:a8:a4:33:bb:69:83:9d:
         8f:5d:cf:86:cd:33:b2:f5:5b:b5:b8:84:ee:01:78:64:96:b0:
         52:82:df:e0:99:37:46:91:e0:c4:e7:ce:ff:14:86:a8:fb:e0:
         86:6c:50:61:76:dd:3b:33:30:56:93:2e:92:e9:01:c7:8a:b1:
         7d:99:9b:c3:be:6c:f6:36:b7:01:13:e9:ab:d4:87:4a:a7:b0:
         2d:b3:4a:3b:7c:34:8f:83:71:53:8f:e0:39:13:27:9b:4b:9f:
         32:00:69:22:f3:5f:64:21:6d:e0:eb:2e:7a:b9:07:df:31:51:
         2d:55:72:47:f3:ba:a9:71:04:fe:22:c6:ad:53:15:70:b2:6d:
         11:38:f0:f3:f3:4e:b7:8d:ef:5c:21:44:31:f9:d6:c6:fa:6a:
         c4:5f:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:49 2025 by rpki-client