Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File:                     EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier:          sqMrAop8wbOospKA6emFFmJPS6Bw7/Nte+cqON0H/Wo=
Subject key identifier:   D7:43:A1:64:43:AD:39:3F:8C:FF:E9:8B:21:2A:42:C9:57:69:BA:B1
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer:       /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial:       01987FE6524DA1477EB21F80FA07CC66BB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 15:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 15:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 15:00:57 +0000
Files and hashes:         1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: ++wmm/aocVgdRI6Ip/NE+dcD+3LSss03WIBJpmMUGjs=)
                          2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:52:4d:a1:47:7e:b2:1f:80:fa:07:cc:66:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
        Validity
            Not Before: Aug  6 15:00:57 2025 GMT
            Not After : Aug  7 15:00:57 2025 GMT
        Subject: CN=d743a16443ad393f8cffe98b212a42c95769bab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:e3:14:23:12:7d:ad:e1:a4:74:7f:e5:5a:
                    7b:ec:bb:e3:05:36:b0:03:19:f8:6e:c9:23:31:cf:
                    2b:af:59:c3:db:86:7e:05:af:58:fd:59:c8:81:27:
                    17:06:bb:da:04:fb:4c:f4:fc:17:1c:02:32:69:dc:
                    90:21:f0:c4:54:f8:58:5c:77:35:4b:68:87:66:35:
                    a5:6e:d8:27:1e:e7:0a:bb:86:7b:69:2d:4c:ca:36:
                    d7:85:9d:cb:b7:69:8f:ac:78:ba:8b:9a:66:c1:5e:
                    fe:d3:b3:af:87:1e:96:b9:e3:30:9c:89:8a:83:8c:
                    a0:ce:c9:1b:54:15:0a:f6:26:0d:5c:92:c4:1a:93:
                    8a:35:e0:0b:17:89:59:77:1c:82:3e:f4:cd:84:0c:
                    a5:3f:79:a0:fe:5d:b9:35:8a:45:d5:8b:c6:f1:9e:
                    ff:4a:6a:85:62:86:ea:33:a0:23:9d:d7:42:0e:f7:
                    c5:7e:43:b0:b4:ee:ea:67:a6:93:e4:5e:72:1c:ce:
                    8f:86:a2:03:57:cf:d7:29:03:b0:16:8e:14:8e:12:
                    ea:27:e1:09:bc:8d:da:26:4f:9c:6b:dd:31:d6:73:
                    5c:da:1f:70:01:f3:78:c2:4b:54:2d:a4:38:ba:da:
                    0a:b0:4f:ec:5e:09:0e:90:09:d2:00:7d:4d:67:4e:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:43:A1:64:43:AD:39:3F:8C:FF:E9:8B:21:2A:42:C9:57:69:BA:B1
            X509v3 Authority Key Identifier:
                keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:68:e1:b4:58:95:9a:a4:ad:8b:7e:06:2f:9c:7e:a7:c8:
         02:9a:71:1f:9c:67:18:41:5a:14:81:21:f7:02:a9:4a:ac:10:
         fd:83:a2:11:78:c9:1a:12:a0:9a:62:b9:1a:45:59:9e:b1:6f:
         25:7e:a0:46:15:4e:0c:83:fd:a1:12:63:63:46:16:e9:67:6b:
         bf:e1:07:66:31:6b:42:52:ee:fc:1c:aa:97:94:8e:2f:e0:e1:
         5d:65:98:5e:3e:64:03:a8:1f:dd:26:2a:a5:a0:00:d8:c6:73:
         c8:80:05:37:62:f1:dd:0e:00:01:b4:7f:df:b8:b3:c8:c6:eb:
         d2:a9:8a:bb:53:19:39:79:b1:42:a8:64:fd:89:ba:40:bc:d1:
         96:df:ec:a5:49:83:06:cd:01:08:55:b2:41:70:2d:f8:eb:09:
         51:d4:39:24:c8:b6:e5:00:03:28:40:c2:24:f2:78:ef:c5:68:
         85:7c:f8:10:03:46:cc:ca:0c:49:35:8f:ad:28:26:4f:1a:17:
         2c:98:a2:b3:06:53:f0:9e:88:09:97:11:07:f8:24:6f:6d:92:
         66:e2:83:d2:07:b5:d5:3c:57:c7:17:d1:68:8c:f5:8b:80:1a:
         47:27:2d:71:04:27:e6:07:5c:29:a0:4d:50:1d:8b:5a:67:9b:
         90:59:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:17 2025 by rpki-client