Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File:                     eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier:          MBUBh0rKG7eO5PYNxCuQlOSHF93+AdvFClB5wOaF+Bk=
Subject key identifier:   6D:8F:8A:7D:06:8A:AB:98:5A:F8:9C:36:35:74:9D:F2:76:B7:40:99
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer:       /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial:       019874503AE8492EFB2D0B9D816B0520F819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number:          1612
Signing time:             Mon 04 Aug 2025 09:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:11 +0000
Files and hashes:         1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: aYVEoq8PIP1tEUtcvH2VsDRKrM0VitBggt+1qnXEgoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:3a:e8:49:2e:fb:2d:0b:9d:81:6b:05:20:f8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
        Validity
            Not Before: Aug  4 09:01:11 2025 GMT
            Not After : Aug  5 09:01:11 2025 GMT
        Subject: CN=6d8f8a7d068aab985af89c3635749df276b74099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:9a:c8:13:95:d2:aa:2b:9e:21:fd:c6:6d:
                    bb:3d:f7:03:a9:9c:d5:10:bf:5f:b4:c4:01:8f:a9:
                    4c:24:38:6b:5b:fb:4e:59:e2:14:17:20:51:93:48:
                    08:29:a9:d7:2a:4e:09:a2:ff:1c:b8:21:c5:19:96:
                    02:9e:35:17:de:9b:8c:8b:8d:06:7d:96:6b:23:bf:
                    33:85:27:9d:50:49:0f:8f:71:73:6c:60:c1:cf:48:
                    f6:36:25:64:5b:1e:eb:90:3e:c0:cd:dc:4e:97:bb:
                    d0:fa:eb:1f:ba:6a:0d:49:ca:8d:dc:25:45:71:1f:
                    af:d6:22:75:a9:52:b8:ee:75:eb:3e:a4:72:5a:bf:
                    60:50:bb:80:6e:10:95:ff:a9:46:b4:df:45:66:41:
                    50:3a:cb:e0:43:d9:d2:8f:5c:cd:c1:e0:d0:2b:bf:
                    a4:80:91:f1:96:f1:df:a2:4e:d6:2f:37:54:c5:59:
                    79:7b:7c:ae:54:c6:b4:ac:b8:f8:2d:8a:b6:78:80:
                    1a:f5:9c:55:ff:5f:f8:26:27:bf:98:e1:46:23:6a:
                    66:33:49:ec:f7:0b:e5:18:a4:39:de:be:d6:36:d2:
                    bd:5d:31:03:db:85:b4:8b:d8:4b:fc:de:81:4a:78:
                    7f:2a:af:72:85:1a:d6:0c:12:06:37:b1:50:52:d5:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:8A:7D:06:8A:AB:98:5A:F8:9C:36:35:74:9D:F2:76:B7:40:99
            X509v3 Authority Key Identifier:
                keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:dc:0c:ba:b5:f1:20:28:a2:bf:b8:a8:20:6c:12:8c:ba:
         a7:4e:ba:34:49:48:74:e4:ae:fd:1a:8b:d6:6d:31:22:3d:6d:
         80:d9:4f:58:87:a2:e7:16:5a:ca:cd:bc:34:0a:9f:29:f1:62:
         f7:04:50:d4:66:ed:f8:71:26:b7:8f:be:af:9f:00:01:53:ab:
         33:46:46:74:d9:35:c9:f9:e1:c8:fa:4a:37:b7:83:5d:70:88:
         4c:9f:39:47:85:6a:d3:0f:a7:0a:3b:4d:9f:03:30:2e:c4:a0:
         6c:0c:2e:1e:6c:09:72:88:10:41:78:ea:0c:4d:ea:b6:bf:8c:
         c4:68:ad:21:0d:a9:56:e5:69:6f:b9:9c:1c:71:31:55:e8:a6:
         45:93:05:62:97:4b:f2:b7:63:77:3e:4d:5a:12:0a:86:5d:a9:
         70:0c:b7:61:1e:a5:b4:c2:88:84:62:6d:35:83:cc:c3:6e:d4:
         67:ad:e5:03:0d:6c:98:fc:b2:44:1d:70:fd:75:fa:ba:f4:67:
         e2:c4:6a:80:6e:89:57:fd:95:3b:f6:2e:0d:d7:a4:77:57:8a:
         a4:42:0c:4b:9a:de:5a:01:34:9a:64:b4:13:2a:9a:a0:cf:3b:
         1d:37:62:ce:1a:bc:bf:9c:29:91:7b:62:33:9a:8e:70:1a:d1:
         6d:22:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:39 2025 by rpki-client