Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File:                     e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier:          puJXG+b7jNJTZxzda9w4TsQkuTFTv6M5Da/hoqzOQJ4=
Subject key identifier:   A5:DE:E8:D5:AF:0B:A5:F0:9F:F8:F4:91:12:1D:C2:9E:FC:03:11:F6
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer:       /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial:       01987D89B304484CE9AFE35885B3955ABC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number:          1616
Signing time:             Wed 06 Aug 2025 04:00:32 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:32 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:32 +0000
Files and hashes:         1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: xiO9KN+DLDHeU1KauG3E5OCl9S82FOsW9UrNNdY1MvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:89:b3:04:48:4c:e9:af:e3:58:85:b3:95:5a:bc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
        Validity
            Not Before: Aug  6 04:00:32 2025 GMT
            Not After : Aug  7 04:00:32 2025 GMT
        Subject: CN=a5dee8d5af0ba5f09ff8f491121dc29efc0311f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:65:a4:2d:47:63:67:64:f4:c6:d9:1d:7d:
                    e6:8b:65:f3:f5:c7:35:69:40:3f:44:d6:e9:f9:86:
                    86:b0:9c:ac:84:db:3f:fc:6b:b1:63:4c:e7:26:5a:
                    e8:51:a3:64:43:0d:9f:c3:3a:9d:92:a5:19:71:f3:
                    fc:9c:cc:3b:f1:a1:df:26:ae:94:a1:65:25:97:95:
                    c5:dd:13:19:e6:2c:fe:87:aa:32:58:43:38:ca:5c:
                    c0:9a:c5:a6:b3:a2:dd:64:a0:83:56:5c:1d:ec:b3:
                    41:96:c8:23:16:f9:3c:79:18:0b:b8:69:77:4a:1f:
                    10:c1:bf:f3:ad:0d:c6:a5:93:dc:14:de:1b:a0:e1:
                    07:81:af:b9:f8:21:eb:d0:22:7e:99:3c:7c:9a:2f:
                    6b:7e:2c:28:cd:5f:9f:58:45:0a:e1:1f:95:5a:0d:
                    d0:47:91:52:ad:2b:41:1f:91:06:1f:fb:f8:7f:71:
                    72:d7:d1:ca:6c:b3:5c:e1:1f:e4:39:39:1d:52:fc:
                    2c:da:7c:f0:2c:26:05:22:d5:42:99:c9:7c:73:0f:
                    90:ee:ad:3e:22:20:91:d5:7c:b4:8f:cc:dc:2e:a7:
                    49:c6:68:41:f7:b1:e6:de:74:ed:b5:60:65:e0:6b:
                    88:7e:75:a6:0d:d8:77:4e:71:ce:85:ee:60:c6:9c:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:E8:D5:AF:0B:A5:F0:9F:F8:F4:91:12:1D:C2:9E:FC:03:11:F6
            X509v3 Authority Key Identifier:
                keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:51:29:9e:13:f6:60:cf:25:45:f9:ba:5c:43:53:d6:56:be:
         aa:70:00:57:64:ed:80:b1:4c:49:2e:c1:50:6d:2d:32:d1:83:
         e5:64:05:2d:d0:ed:ac:00:d2:fa:84:38:b7:34:c1:fa:40:70:
         33:46:e6:2c:97:76:d3:fc:e7:8d:93:07:3a:a4:78:e9:b2:2c:
         9b:b7:39:a7:4f:89:7c:9f:ad:bf:36:6a:97:38:86:48:21:43:
         93:d8:45:39:e1:7b:68:16:57:b1:28:14:01:1e:42:ab:6c:7f:
         bb:7c:a4:d3:00:d5:0e:ec:e7:81:62:05:6d:e4:57:db:ff:6b:
         f4:ba:ec:b5:e1:3c:3c:6c:18:d2:be:68:6b:e6:77:af:6a:e6:
         2e:ae:11:4d:dc:f3:dd:e1:a7:af:9a:5c:d1:a4:97:ae:63:69:
         16:f7:10:d5:c5:a8:79:bf:86:8e:ad:6d:6c:6e:c0:ba:b7:40:
         77:b7:67:ca:2b:e2:0a:fa:24:d7:41:f4:04:ef:dd:a3:11:9c:
         76:42:e1:b5:7f:50:ce:66:fa:d5:5c:9c:29:b5:4f:1c:3f:73:
         83:4a:8a:97:3e:e7:17:cf:81:b1:3f:08:ac:ac:98:66:6f:9b:
         70:df:11:4c:ad:5b:63:f4:f7:5c:ee:7f:12:e0:aa:55:44:96:
         1a:1d:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:46:30 2025 by rpki-client