Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          dhcZbGt9M1/oh6mFqVXYV/quIq+mqh0Dq+2JZKIfz9A=
Subject key identifier:   AC:49:A2:F1:4E:F4:DA:82:95:50:A5:46:F5:F4:91:56:CA:6C:2E:FB
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       01989749D23F63430831F812680C33FE0688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          0BC8
Signing time:             Mon 11 Aug 2025 04:00:54 +0000
Manifest this update:     Mon 11 Aug 2025 04:00:54 +0000
Manifest next update:     Tue 12 Aug 2025 04:00:54 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: 3k2VBerfL8i/5qGSNzSngAstEB2Gn+uqrorEPnVWwmQ=)
                          2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:49:d2:3f:63:43:08:31:f8:12:68:0c:33:fe:06:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Aug 11 04:00:54 2025 GMT
            Not After : Aug 12 04:00:54 2025 GMT
        Subject: CN=ac49a2f14ef4da829550a546f5f49156ca6c2efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:70:0a:12:b4:fc:70:dd:2c:69:d2:04:38:
                    84:e0:fa:27:c2:88:d6:c5:55:21:82:36:a7:11:04:
                    44:7c:90:91:d9:0f:23:44:27:a3:bd:91:cf:94:d6:
                    e8:fe:aa:6b:ae:9c:b9:71:91:f5:a1:8b:3c:40:4b:
                    86:2b:53:e9:4d:4e:45:d1:df:e1:8a:40:72:c9:3e:
                    aa:81:0f:9f:0d:ec:14:3f:b8:45:d3:cd:ff:b7:98:
                    0a:ec:01:01:7a:6e:2f:f9:9a:4d:8f:04:c7:c2:ac:
                    2b:ad:5d:9f:98:ba:a8:6d:cb:48:d8:07:1b:8f:96:
                    26:61:58:76:f7:e4:12:78:1a:0d:b3:e7:16:24:74:
                    81:1d:65:26:1c:88:73:cf:56:29:9c:7c:b2:59:fe:
                    57:33:41:ea:ec:23:f3:32:e9:a4:8e:57:86:1f:b4:
                    85:70:dd:0e:4f:37:b4:66:c9:b2:5f:b5:4f:c0:52:
                    53:79:27:93:56:46:3e:0c:65:d3:f7:af:41:3c:47:
                    29:39:da:1c:a3:e8:a2:bc:e5:18:d0:56:96:ad:2f:
                    b3:ce:73:9b:1f:55:ec:e1:23:a1:a7:a4:09:e5:7c:
                    6c:7e:87:a6:f6:f3:70:40:64:35:30:d7:6a:98:cc:
                    90:d8:33:ad:26:a7:44:cd:6e:e5:63:2c:a7:0f:b7:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:49:A2:F1:4E:F4:DA:82:95:50:A5:46:F5:F4:91:56:CA:6C:2E:FB
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:6f:48:37:9a:b1:c3:8d:3c:86:c3:06:3a:07:28:45:1a:
         68:4f:b8:0f:40:5a:b1:7f:cd:2a:e8:f5:90:e5:65:dd:79:bc:
         26:5f:9b:37:1e:b1:6f:bc:38:c6:fc:bd:6a:ee:ec:4e:31:c1:
         84:23:69:fd:e8:5e:f7:c3:ba:f1:4e:de:e6:18:e8:71:52:6e:
         88:55:9a:34:fe:dd:93:a7:60:2d:62:22:0a:1a:2c:f6:2c:81:
         37:bc:fe:79:3f:64:53:87:28:6c:be:e0:6a:ce:2f:90:5a:7c:
         32:40:6c:f2:c0:7d:bc:f0:0e:2a:6d:a9:34:28:0c:d7:d4:ea:
         4f:11:4a:67:2f:3d:89:5e:b1:ea:7f:06:0e:16:91:2f:9c:29:
         4d:a7:80:72:6c:34:51:d9:74:1e:6a:0b:21:b2:70:92:86:bf:
         b0:ed:b7:22:23:ce:60:05:c8:52:89:a9:89:6f:29:6a:53:1c:
         63:86:cc:93:13:a3:53:4c:15:a2:a9:f4:d0:4b:df:89:41:b3:
         51:eb:aa:14:1c:bc:bf:8d:8a:47:91:1d:87:74:b2:21:41:bd:
         ef:24:d4:a5:cc:fd:03:fe:d2:18:ef:a5:77:a3:0b:99:93:62:
         60:9d:d6:9f:f8:8a:57:f6:6c:cc:00:be:17:06:60:5a:30:c4:
         c3:a9:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:58 2025 by rpki-client