Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
File:                     eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json)
Hash identifier:          Eo63JO9L3yrTVhi28QJ/UXigw2FpF/NdAwzWQ98BCEA=
Subject key identifier:   2F:D3:7E:9D:75:C6:A0:CA:04:C6:21:47:A2:4C:C7:33:78:1D:A7:25
Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70
Certificate issuer:       /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
Certificate serial:       019896A4E5AA37AAA17361E4D49174906B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
Manifest number:          0A79
Signing time:             Mon 11 Aug 2025 01:00:45 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:45 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:45 +0000
Files and hashes:         1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: ePmU5fFe2OgnPL9RzYPJ7c8yfz/7e0QHCeoqgVJs+Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a4:e5:aa:37:aa:a1:73:61:e4:d4:91:74:90:6b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70
        Validity
            Not Before: Aug 11 01:00:45 2025 GMT
            Not After : Aug 12 01:00:45 2025 GMT
        Subject: CN=2fd37e9d75c6a0ca04c62147a24cc733781da725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:2d:92:5b:72:a4:c1:b5:7f:24:f9:0f:f1:
                    0e:33:af:31:3d:01:b6:47:d6:0e:7c:83:be:4a:25:
                    f6:bb:fe:b6:3b:e1:b1:93:2f:61:14:bc:46:79:95:
                    03:d3:e7:b4:51:7c:84:22:7a:0d:87:66:11:49:f4:
                    e7:9e:8b:b1:64:8c:bf:65:37:04:65:82:42:00:36:
                    3f:e6:1c:2a:52:de:ee:0b:f0:1a:9e:33:19:24:ea:
                    bd:0e:3e:a3:af:2c:62:b4:87:5a:78:98:bc:08:91:
                    69:fb:af:aa:92:bd:11:75:8a:5f:61:39:f0:ab:85:
                    61:3f:5f:fc:6f:67:92:75:54:02:49:be:5f:3f:4e:
                    fa:6f:a2:01:67:f4:de:65:60:16:07:64:e6:02:2a:
                    a6:21:e5:2b:d5:10:55:41:c5:a6:49:bc:24:bd:dd:
                    9a:7e:4d:7f:4d:91:2a:f2:da:0c:0a:9e:39:d8:91:
                    81:28:62:2f:91:39:45:46:6a:ef:0f:96:ff:68:cb:
                    cb:ad:7a:6d:2f:1a:7c:f2:a8:ce:c9:62:55:2e:c8:
                    88:7f:5c:2b:8f:8a:e2:9b:33:fe:73:a8:8d:33:b1:
                    3b:b3:c4:be:b8:f8:70:dc:c9:ca:9e:79:66:2c:e6:
                    d1:62:1f:90:15:98:d4:dd:2c:7b:c4:ad:8c:b8:40:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D3:7E:9D:75:C6:A0:CA:04:C6:21:47:A2:4C:C7:33:78:1D:A7:25
            X509v3 Authority Key Identifier:
                keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:50:1f:98:55:9b:e7:31:51:93:07:aa:fd:1c:df:46:43:
         39:89:b4:95:49:cf:16:0d:a7:f2:f8:40:ef:cf:63:8e:6b:ec:
         cd:cf:5c:8c:48:e7:e6:ec:d3:6f:6b:11:f2:eb:11:2b:85:00:
         22:b5:be:e0:8a:e3:c9:02:4f:f2:92:46:a6:44:64:aa:59:5d:
         bd:29:3b:32:f3:df:d0:44:cf:ce:dc:9f:09:09:eb:bd:a7:9e:
         2f:56:48:f4:49:0c:5a:ec:b6:9d:e1:64:f5:84:34:ac:ad:36:
         b7:0f:ed:e1:a8:bd:90:af:09:d3:0d:03:e2:f5:38:e6:90:1d:
         2f:c0:d7:d8:44:7e:ba:97:98:e7:dc:cd:55:f8:4e:43:12:6e:
         a1:aa:17:74:b5:20:f7:ea:70:77:e8:df:76:af:05:6a:5e:0a:
         46:2e:9f:80:f4:e9:a6:0a:f1:d1:dc:36:51:a2:6e:83:2c:22:
         e0:00:eb:38:b0:ba:7f:43:49:9f:9d:b3:2b:4f:11:97:51:59:
         48:5a:cc:43:7a:de:48:ed:55:87:c7:5d:ab:2f:c4:1a:e4:7c:
         bc:84:c9:5f:fd:c9:80:f1:97:39:8e:4e:84:92:09:d4:08:79:
         54:61:0d:0d:e4:68:53:9c:f2:74:a2:2a:97:ae:cc:dc:ff:9e:
         eb:34:a5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:21 2025 by rpki-client