Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File:                     56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier:          u+hM5RiAeDj+Wd2xBNBmkxwF4mveDdhMogf3k51W7/s=
Subject key identifier:   08:D8:85:77:34:7C:DF:63:64:0F:40:54:D7:D2:9F:BC:26:B8:78:2E
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer:       /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial:       0198819E3B3278C36298BAF811CE12904609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number:          013B
Signing time:             Wed 06 Aug 2025 23:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:27 +0000
Files and hashes:         1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: k/5b5sChTaYLAprb/VOFzqZkQiqZY2zRMd4kNPhQYkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9e:3b:32:78:c3:62:98:ba:f8:11:ce:12:90:46:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
        Validity
            Not Before: Aug  6 23:01:27 2025 GMT
            Not After : Aug  7 23:01:27 2025 GMT
        Subject: CN=08d88577347cdf63640f4054d7d29fbc26b8782e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:fe:14:a7:55:43:68:c6:9f:da:de:58:90:
                    55:f2:83:4e:11:93:07:a2:8d:ad:6f:14:7f:8d:48:
                    db:7a:ac:60:df:da:92:a8:4e:e3:ce:ab:20:c5:46:
                    e7:c3:3c:7e:5f:28:98:9a:d9:53:0d:b2:ab:b4:ad:
                    01:ea:a1:a3:56:ef:e1:49:8f:c6:02:c0:b7:3f:1c:
                    8c:21:74:24:e6:b5:2c:7a:07:19:c3:2c:fc:af:bd:
                    76:8c:0c:78:7d:d9:04:d2:35:d8:9a:e3:0b:a2:36:
                    d8:b7:fe:19:db:e8:7f:46:5c:cd:fc:e6:c4:1e:55:
                    5b:7e:4e:5d:9a:0e:77:67:b0:74:b4:42:11:42:8b:
                    aa:6e:b4:70:1f:db:9a:3b:af:8f:9f:a5:b8:69:f8:
                    48:58:f4:18:57:d6:8a:c9:1b:8d:47:9d:58:9c:52:
                    3b:f1:47:a1:9d:d6:4a:1b:2d:ee:0c:f8:f6:dd:02:
                    2e:5e:e4:5e:46:54:2f:41:a5:6b:3b:3b:cf:84:44:
                    10:8b:0c:6a:7c:44:d3:62:33:5d:32:a6:df:f0:4d:
                    ee:0c:9d:b7:5c:b4:96:2f:fe:52:50:83:d9:0e:69:
                    42:07:4c:68:50:7e:95:3a:1b:1c:23:95:ed:d7:ea:
                    c1:ea:a7:d6:77:46:9d:5f:49:1a:f0:a7:5a:f3:52:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D8:85:77:34:7C:DF:63:64:0F:40:54:D7:D2:9F:BC:26:B8:78:2E
            X509v3 Authority Key Identifier:
                keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:02:af:e6:bf:e9:42:aa:41:fa:b6:04:83:fa:92:94:65:73:
         1b:6a:6b:5a:71:bc:f6:7d:14:0e:81:1e:4c:5a:5c:8d:c0:fb:
         3d:5d:27:91:55:1a:e7:d9:43:99:e4:5f:80:3c:fb:d0:3d:b0:
         f4:51:42:c8:df:d4:ce:bf:a2:f0:cc:47:07:df:92:4d:73:2d:
         b8:9b:22:3a:d7:cb:da:fd:d4:ae:94:90:ea:0a:d7:9e:b7:68:
         b7:9e:3d:28:f5:be:95:65:39:65:40:e3:8d:19:17:c1:b1:8f:
         7b:6f:d0:a7:45:77:31:41:69:97:cb:32:88:cf:13:df:6d:1c:
         e3:20:88:a1:5a:14:88:82:b7:a0:92:10:37:0c:a6:03:09:5a:
         11:72:59:c1:ee:67:b0:7c:fe:97:08:7b:b5:4b:0d:f4:c1:aa:
         44:24:8c:1c:84:67:9d:a2:b5:ec:9b:1a:c8:f1:af:f7:a8:f4:
         3c:c6:e1:1d:31:78:6a:ae:56:dd:e5:bd:58:9a:c7:2c:27:e9:
         dc:63:92:7b:78:9c:4f:0e:b7:88:b4:89:bd:86:54:f5:5f:24:
         48:af:65:ef:bc:23:04:cf:8c:dd:28:5f:93:52:62:09:fc:d8:
         44:2d:cd:24:ee:88:6c:52:6a:52:29:97:45:dc:99:a1:0f:1a:
         8f:89:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:41 2025 by rpki-client