Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File:                     EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier:          uR5yPns7xFd45/pdu0SVietgFFObomVQgXFXXK7AmkQ=
Subject key identifier:   61:5A:E0:BC:53:31:CE:03:E0:B5:E3:BB:76:97:ED:1D:BD:42:67:21
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer:       /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial:       019896A53D073CC26CF44F1BC84CD6E61EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number:          0CD0
Signing time:             Mon 11 Aug 2025 01:01:08 +0000
Manifest this update:     Mon 11 Aug 2025 01:01:08 +0000
Manifest next update:     Tue 12 Aug 2025 01:01:08 +0000
Files and hashes:         1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: DpBVnIFcmCzXiOLCWeoJkpJeDdaKlI1SM8GH3LKDj88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:3d:07:3c:c2:6c:f4:4f:1b:c8:4c:d6:e6:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
        Validity
            Not Before: Aug 11 01:01:08 2025 GMT
            Not After : Aug 12 01:01:08 2025 GMT
        Subject: CN=615ae0bc5331ce03e0b5e3bb7697ed1dbd426721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:b8:9e:c2:78:fc:f1:33:14:ea:ad:10:46:
                    41:70:94:b5:ef:0e:4a:31:26:75:4b:f2:55:9d:61:
                    38:a8:24:02:f2:74:54:34:fd:52:49:08:d3:6b:20:
                    43:ba:36:33:93:a9:ef:f5:4a:91:79:6b:aa:8a:1a:
                    2d:81:bb:4f:08:13:4c:91:7b:4a:d8:53:b3:45:7a:
                    e4:d2:d1:60:12:e4:b8:6c:91:7a:72:4f:37:60:fc:
                    95:c9:fa:1a:f8:ba:09:2f:0b:cf:7f:3d:f0:d5:66:
                    42:db:7f:ba:5e:28:00:03:2f:28:aa:66:a1:c7:d3:
                    65:a0:a3:54:21:02:ee:13:9a:3f:34:89:70:d2:6d:
                    83:c8:79:4f:93:07:b5:59:3b:bf:cc:a6:30:4d:2a:
                    c4:b9:32:6f:fa:cd:95:16:25:a3:12:e3:59:0f:77:
                    4c:90:ab:8b:fc:3c:7d:b5:7e:e0:8b:62:93:fc:19:
                    ad:34:0c:2a:26:ab:c5:68:63:3f:94:6f:bb:aa:c0:
                    47:d1:f1:e7:9d:02:61:49:27:02:70:02:63:cf:14:
                    49:a6:da:52:eb:36:70:ab:52:ad:19:ac:76:c1:d8:
                    f4:75:74:ab:b5:44:58:bd:cf:d0:de:b9:59:9d:c2:
                    e1:72:b7:8f:a6:71:e6:3f:3f:73:54:de:bb:77:ac:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:E0:BC:53:31:CE:03:E0:B5:E3:BB:76:97:ED:1D:BD:42:67:21
            X509v3 Authority Key Identifier:
                keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:a7:94:4b:fc:22:0e:8f:34:37:34:f7:1b:94:bf:fb:e4:
         27:b3:ed:66:98:09:f4:3d:3b:e7:ac:a8:d9:c6:28:80:43:9a:
         6e:d4:ea:4b:c7:f6:2a:8a:b6:98:e7:79:86:42:a8:fb:a5:1d:
         fe:90:3f:91:1d:e6:7e:8a:7e:ac:8c:c2:c2:6a:ab:33:1d:a1:
         b1:8f:72:cb:f3:3c:3a:e0:e3:95:88:eb:55:c5:06:02:aa:74:
         e5:73:80:86:7a:7a:45:84:80:90:8c:f3:5f:04:26:51:b6:c3:
         49:3c:ba:f2:5a:37:19:46:6a:f7:51:aa:45:28:1b:53:94:59:
         85:8d:3c:9c:61:86:ab:c3:4c:45:21:eb:dc:93:62:d9:02:70:
         48:46:b3:d3:9f:8c:b3:8c:1b:72:7f:96:3b:4f:87:14:32:4f:
         1e:cb:e5:ef:a1:1f:d8:a4:ad:31:44:2d:aa:1a:d8:35:c8:df:
         ec:6f:4f:3c:42:2e:5c:92:77:0b:b0:35:e9:8d:20:dd:f6:7b:
         00:e7:49:f7:7f:48:6a:61:62:52:5b:b7:29:bf:5a:b3:68:40:
         aa:e4:d6:34:7b:94:e4:39:1e:b5:1d:19:06:3c:ba:47:bd:77:
         b5:1c:87:66:4f:fc:cc:f1:ea:ec:dd:38:e3:e3:c0:48:c7:2c:
         54:66:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:53 2025 by rpki-client