Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File:                     TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier:          9wVZUdO0sRGFP9+/fSHJjqZtcOGeYaouSIUjHcb/AYY=
Subject key identifier:   EA:7B:65:60:38:37:82:E5:A5:64:8F:19:63:1E:6A:97:37:7C:04:7C
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer:       /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial:       01987C77633DE69A4C6E90D1F293DFF3BE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number:          0E19
Signing time:             Tue 05 Aug 2025 23:00:55 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:55 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:55 +0000
Files and hashes:         1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: CXVZMTsKxnx/yxgUQ/auDXeMgxMMYAjIbouQ66ZTa9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:63:3d:e6:9a:4c:6e:90:d1:f2:93:df:f3:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
        Validity
            Not Before: Aug  5 23:00:55 2025 GMT
            Not After : Aug  6 23:00:55 2025 GMT
        Subject: CN=ea7b6560383782e5a5648f19631e6a97377c047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:ea:6c:b8:da:1b:15:09:a1:07:fb:e8:34:
                    89:1a:18:e2:bb:7b:5e:b0:d8:40:bb:5a:1f:3d:b5:
                    b3:ff:e2:1b:74:7b:2f:8c:de:2e:70:21:0d:53:70:
                    74:00:d2:9e:e2:7e:04:36:61:07:79:b1:6e:77:78:
                    5f:f7:28:ec:29:81:0a:6a:ab:81:b7:e2:4f:d1:17:
                    19:a8:a9:ab:cc:11:f0:6f:b5:bc:a0:4c:7a:c9:7b:
                    79:f8:97:27:7d:5c:6c:01:37:1e:0c:13:48:ff:e7:
                    ba:99:96:9c:28:22:af:23:94:7e:eb:21:fe:03:e7:
                    4d:05:c3:42:44:07:3d:4c:c9:c9:3f:fb:70:70:09:
                    e5:98:4e:c3:11:b3:90:57:66:43:9c:7c:c3:2e:0d:
                    09:66:22:49:d4:9c:25:3c:e1:3b:93:20:00:10:9f:
                    1b:6a:df:79:66:7b:d6:59:7c:e4:5a:97:5c:94:a0:
                    5b:cc:b5:30:65:cd:f0:9d:a9:90:61:42:32:68:bf:
                    8b:55:70:35:53:2c:3a:87:9a:7e:92:46:35:46:49:
                    37:5b:a9:98:b0:15:5c:42:6e:90:f6:8e:c2:07:4b:
                    c0:cb:bf:b8:1d:de:36:19:a0:12:ad:bb:d9:36:fd:
                    93:e7:ee:ad:e9:63:02:89:7d:90:01:cf:77:ee:39:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7B:65:60:38:37:82:E5:A5:64:8F:19:63:1E:6A:97:37:7C:04:7C
            X509v3 Authority Key Identifier:
                keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:d4:4e:06:75:8b:37:c3:34:9b:97:6b:b6:0d:d8:05:43:f8:
         26:ef:ef:57:5d:7f:80:23:42:0e:22:08:ec:4b:5d:83:8a:c9:
         84:3e:81:44:b8:bc:37:44:49:f8:14:55:db:50:10:1c:3e:5c:
         0c:e9:d4:8d:dd:3c:54:25:f0:57:a0:32:2c:0d:60:46:85:0f:
         09:8a:1d:f6:d3:49:b8:c4:9f:04:c1:35:8d:93:8c:13:1d:ff:
         e8:ae:f7:7f:4c:1f:66:24:17:d3:fe:4a:48:8a:d9:72:8d:e8:
         16:da:85:6d:78:40:44:35:4d:a3:96:8a:11:73:2b:a6:be:d1:
         40:94:0c:00:26:bc:1b:3d:a2:07:a5:82:0b:05:53:a4:f2:5a:
         d2:77:79:47:a9:fa:b6:91:1e:0d:be:c5:18:db:f9:f6:e5:dd:
         7d:7c:44:e9:6b:55:63:47:e6:b9:b4:a7:e8:18:28:22:e7:7e:
         a0:c7:c1:66:c4:c2:7e:32:12:4a:22:1b:b9:4b:18:52:06:ef:
         9a:76:86:16:ec:31:2f:ac:96:87:a7:dc:13:f6:77:68:a5:a5:
         fc:2e:ab:1f:25:8e:24:32:4f:f6:30:a4:f4:01:fc:7a:f7:48:
         2c:5c:7e:64:82:ae:ba:4a:fe:c4:fa:b4:d9:c6:ee:b2:e8:e7:
         30:cf:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:00 2025 by rpki-client