Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier:          eYNJCOHJTDCLrFzMyuO4+0fsfS2P/Q6Je5AAwgkFYlI=
Subject key identifier:   4A:50:51:9D:57:C0:71:BD:15:65:27:FA:30:4D:A8:F9:6B:87:DD:7F
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer:       /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial:       01987E2F2546C999A51806D1C329A9790E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 07:01:15 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:15 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:15 +0000
Files and hashes:         1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: 77OWKF7gRF3AX8qy4m0utoqcJRp85RpSrg7FfIqqltA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2f:25:46:c9:99:a5:18:06:d1:c3:29:a9:79:0e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Validity
            Not Before: Aug  6 07:01:15 2025 GMT
            Not After : Aug  7 07:01:15 2025 GMT
        Subject: CN=4a50519d57c071bd156527fa304da8f96b87dd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a3:b5:9a:51:db:61:45:56:98:56:41:29:90:
                    fc:79:4f:c5:fe:43:82:cd:9a:b6:f9:b0:31:40:a6:
                    21:69:fd:e5:19:de:15:0e:8f:66:ac:f3:e6:0d:ce:
                    07:0d:3d:86:c1:7b:cf:f0:6d:62:c9:f3:a7:0d:82:
                    b0:e4:fe:c1:29:0f:0e:52:ca:8f:6b:eb:ac:46:2b:
                    d2:45:db:55:7c:ab:48:f7:0a:c6:61:1b:89:f1:cd:
                    93:89:2f:f1:6a:33:85:51:2b:bc:ad:6d:88:56:bb:
                    9d:8c:c7:c1:f1:ab:dc:f3:8d:8f:38:fb:a4:c6:dc:
                    40:57:f9:47:1c:d6:5f:1f:ec:65:f1:37:08:af:cc:
                    d1:84:b0:08:7b:76:19:0c:89:d9:21:e5:52:5f:bc:
                    83:e4:02:75:8f:cb:7b:5a:11:36:ed:7c:31:6f:34:
                    b3:d3:05:29:fd:d2:ed:db:2e:e8:c2:97:16:2b:c2:
                    f1:7d:7f:ae:29:9a:f1:22:2a:40:6f:76:b4:22:54:
                    dd:2a:95:39:ca:fe:1e:72:87:a3:03:ed:c4:d8:7c:
                    c5:5a:7f:08:0b:dc:da:a3:71:73:d9:a7:63:82:14:
                    eb:30:af:f0:e8:9e:38:29:76:4e:27:ca:a1:69:e5:
                    1b:69:8b:85:9a:e5:8c:42:23:56:ef:87:29:24:eb:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:51:9D:57:C0:71:BD:15:65:27:FA:30:4D:A8:F9:6B:87:DD:7F
            X509v3 Authority Key Identifier:
                keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:69:22:cc:45:52:55:80:30:2e:8c:47:78:3f:59:7d:b6:d6:
         18:01:ae:08:89:99:ec:8e:de:d2:d7:31:31:95:4a:f3:c7:4f:
         36:45:e2:92:42:9b:ca:88:1c:54:6f:8c:95:9b:fb:a4:25:4d:
         cd:ba:c4:55:d7:3a:55:d0:bb:2b:58:b9:38:ca:3f:e9:1b:41:
         15:b4:c7:27:16:84:e9:31:94:49:63:6e:29:fa:d6:b9:63:25:
         b2:b2:b4:d7:ea:4d:d6:75:fa:b1:55:28:db:de:5b:d5:13:ec:
         87:0b:85:65:88:10:3a:b3:d5:7c:86:25:13:91:18:af:5a:11:
         00:68:83:86:32:ff:c9:48:c0:5e:4a:dc:2b:b4:c0:33:d1:fd:
         2d:1a:bf:29:a5:05:98:8f:7c:fc:40:33:81:7f:e1:94:25:e5:
         1a:38:29:fd:64:12:76:71:fe:0f:29:a7:b9:66:bc:0b:9f:07:
         1d:94:02:46:f9:5a:2e:62:c0:18:d7:94:91:5c:8a:db:35:5b:
         5b:28:23:d3:f8:14:0e:5e:9b:12:2c:a5:a5:5b:ab:9d:c7:d2:
         48:c3:80:64:ad:68:c0:75:20:89:96:c2:56:a6:ac:6a:2a:c0:
         af:66:5d:62:91:00:85:5d:5e:4a:ea:19:d0:07:8b:75:c8:8a:
         e8:c5:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:58 2025 by rpki-client