Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
File:                     EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft (raw, json)
Hash identifier:          cezkmqg6qhfx4k9m/plRIcXmC/aBh/mdpxwoOBnxZYY=
Subject key identifier:   7F:03:AA:38:AC:A1:5A:84:BB:F6:48:19:A0:BA:51:FF:A8:B5:01:4B
Authority key identifier: 12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18
Certificate issuer:       /CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
Certificate serial:       0198730686B3C23360B84618B4214505BE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
Manifest number:          1223
Signing time:             Mon 04 Aug 2025 03:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:03 +0000
Files and hashes:         1: EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl (hash: HqTSXjDcvFPsqJUHslny4jY3AgtjllEOeenIDp9DX8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:86:b3:c2:33:60:b8:46:18:b4:21:45:05:be:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
        Validity
            Not Before: Aug  4 03:01:03 2025 GMT
            Not After : Aug  5 03:01:03 2025 GMT
        Subject: CN=7f03aa38aca15a84bbf64819a0ba51ffa8b5014b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:ab:1c:e2:c3:25:b4:50:37:2d:f7:85:f2:
                    52:1a:04:ba:8a:8a:47:d0:a3:d3:e4:f1:d2:e5:45:
                    c1:ec:a4:5c:75:1d:96:13:6f:85:77:2c:73:17:82:
                    ae:d6:8b:b9:24:13:1f:28:81:60:3d:16:3a:25:8c:
                    13:d7:22:2a:4b:99:9a:d3:32:41:1e:01:4d:c6:0f:
                    cf:11:b3:67:c9:31:a8:bc:f5:e0:09:dc:cd:fe:87:
                    da:6a:1b:f4:ed:76:a6:55:5a:53:21:64:77:a5:88:
                    a1:15:c9:6f:18:bc:1a:01:3e:06:2c:d9:df:42:51:
                    59:58:a8:c5:35:e3:7d:31:f7:78:af:80:41:20:43:
                    c9:07:e1:61:a1:4c:03:2a:b9:ef:f6:68:c7:cf:0c:
                    45:38:45:fc:7b:03:b8:b0:bf:24:0c:08:2b:a9:84:
                    ff:07:96:7c:df:f3:a3:58:b1:e6:3c:87:8f:57:06:
                    70:1f:1e:75:f7:1b:b0:ba:05:6b:68:bb:4f:6c:6a:
                    46:7c:b0:47:ed:87:4a:b7:22:e0:ea:52:bb:06:91:
                    f2:af:ab:96:c0:ee:53:40:c8:09:c4:7b:bf:ff:87:
                    5a:2b:27:ea:ff:f0:a8:26:cb:18:cf:ec:8e:39:32:
                    2b:ab:ee:62:2d:82:75:a2:b8:af:b5:31:c3:c2:9b:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:03:AA:38:AC:A1:5A:84:BB:F6:48:19:A0:BA:51:FF:A8:B5:01:4B
            X509v3 Authority Key Identifier:
                keyid:12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:07:4f:2f:2d:0a:ea:a6:6a:d3:f2:a2:46:71:6e:78:38:
         f6:79:42:93:84:f2:3d:bd:5a:80:8e:1d:9e:f6:d0:28:75:54:
         02:a9:2d:27:0d:da:83:34:00:15:41:f8:10:66:31:cf:52:49:
         43:a7:50:bd:9b:01:da:ec:02:72:ad:3b:db:b7:83:ef:a8:77:
         66:54:e8:82:ff:d4:72:bc:85:47:6a:73:3b:41:6b:8a:a9:61:
         92:a8:75:b3:2b:11:c5:7f:af:69:b5:6d:cd:00:ad:44:71:9d:
         69:dd:16:cc:d5:df:f3:b3:85:51:70:bc:7d:a2:58:f0:61:43:
         21:15:ce:f0:61:7f:84:e3:c7:9a:7f:55:7a:dd:80:2e:38:12:
         d6:d7:12:bd:65:9d:8a:4e:b6:7b:2f:f9:f2:69:cd:d2:5a:6a:
         a4:b2:48:52:c9:5a:9f:a4:17:46:8a:59:d8:30:ca:8c:b8:f9:
         d7:40:69:68:48:9f:34:bf:7a:9d:40:98:68:1f:1f:f2:a8:58:
         0f:33:5e:44:cd:e9:8d:b4:4b:59:3b:b3:cd:16:83:2d:ac:ff:
         86:1a:fa:21:20:f7:52:2c:42:52:49:a5:4b:ad:54:99:4d:a1:
         a7:18:77:87:e8:da:46:a5:65:f1:aa:16:d3:7a:81:43:b6:30:
         fe:65:60:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:13 2025 by rpki-client