Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File:                     RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier:          khqm7EOu18HUO+Qw7SX4dHJtrrL/NgvjZZoqY4/QbZo=
Subject key identifier:   0A:AB:BE:05:02:2C:C0:50:2B:D0:36:E0:1E:F2:E0:81:91:93:F3:C6
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer:       /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial:       0198925A383FACF458EBD21E940A1AABB9BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number:          04FE
Signing time:             Sun 10 Aug 2025 05:00:42 +0000
Manifest this update:     Sun 10 Aug 2025 05:00:42 +0000
Manifest next update:     Mon 11 Aug 2025 05:00:42 +0000
Files and hashes:         1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: kZo67D6x/8E7WvudJhHnDCyjvCbOCXlz7hWzBEdPGdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:5a:38:3f:ac:f4:58:eb:d2:1e:94:0a:1a:ab:b9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
        Validity
            Not Before: Aug 10 05:00:42 2025 GMT
            Not After : Aug 11 05:00:42 2025 GMT
        Subject: CN=0aabbe05022cc0502bd036e01ef2e0819193f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:a9:74:1b:af:da:5f:fb:60:86:df:99:9b:
                    c6:93:ab:81:02:43:12:9c:1c:4e:e6:f1:54:23:4e:
                    9a:8d:7b:88:d1:1d:88:2a:29:e0:ef:00:14:61:b6:
                    61:5c:9e:b7:8b:67:fb:e0:6f:03:6a:fe:03:67:66:
                    0b:f6:d5:2f:15:0f:9f:a4:8b:e7:4a:78:01:7c:bc:
                    86:db:36:c9:bc:a5:f7:16:7a:04:88:9f:99:0b:fa:
                    a0:93:58:9c:5e:1d:f6:44:5c:39:df:30:ad:05:56:
                    c6:18:8d:42:99:72:04:6a:80:bc:47:ab:84:ab:cc:
                    f9:54:67:c8:70:95:db:55:aa:e5:9e:3a:66:14:a9:
                    c2:18:71:ed:b4:57:cd:6d:82:e8:bf:d0:a5:9d:16:
                    8b:c8:e6:e6:db:f5:a0:81:2a:c7:9d:ae:33:8f:9a:
                    55:4b:a0:13:de:10:d1:e1:91:d7:40:49:b3:39:61:
                    87:c3:0e:b3:ad:c7:02:98:bd:ed:ab:fe:9a:57:81:
                    4b:6f:a4:5f:b1:2e:be:af:b6:e0:32:a1:90:9d:be:
                    c9:e3:94:f9:c9:1d:16:03:4d:74:3e:21:c5:b7:8a:
                    ec:8d:e1:63:f3:b7:dd:36:a6:01:5c:f7:d2:3b:19:
                    2d:7e:c3:e8:1a:dd:8e:10:09:ec:ad:a5:8d:5f:1f:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:BE:05:02:2C:C0:50:2B:D0:36:E0:1E:F2:E0:81:91:93:F3:C6
            X509v3 Authority Key Identifier:
                keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:ee:14:9a:3e:e3:80:25:eb:f3:de:3a:16:51:09:fb:1c:
         4d:5e:51:19:75:3a:5d:3c:ea:ca:93:0c:1f:c9:94:6e:57:ff:
         82:9a:a5:eb:04:ef:8f:8b:47:a0:5e:ac:4f:48:f8:f5:bd:3f:
         1a:e9:bd:c9:22:cc:56:ae:a6:8d:ed:e5:ee:1e:d1:12:c5:be:
         63:31:66:18:8f:84:91:27:cd:39:43:47:37:b3:af:30:0d:1b:
         95:6e:7b:5c:cc:c8:5a:f6:50:b6:57:9b:a9:69:6e:da:f4:5e:
         91:44:80:7f:cf:b1:73:5e:c9:26:f0:40:38:8e:e8:5b:e3:60:
         1a:65:e8:57:6c:32:62:09:fb:a7:56:07:6e:82:87:57:01:c1:
         ec:7d:e7:e0:68:c3:17:3c:a6:b0:80:cf:4e:72:59:8c:8f:0e:
         b1:32:ba:8d:99:b0:0c:f4:7c:b5:6d:ec:b3:f9:1b:8a:1a:a0:
         31:de:ed:23:84:ca:c3:c4:cb:9b:cd:ba:77:f9:33:48:24:f9:
         8d:76:58:16:98:ab:43:5c:28:02:42:53:50:28:3d:8c:f8:1a:
         d4:aa:49:c9:88:d2:21:a9:8d:ad:8f:22:ca:19:c2:4c:99:ec:
         be:85:a1:0a:ef:ed:6d:02:de:5d:ac:c7:10:80:75:0a:e4:2f:
         bb:6e:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:29 2025 by rpki-client