Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File:                     EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier:          V2X0CUidN2gdOcZ8jibhXeFbircSkoLbCTiUlUlx5Zw=
Subject key identifier:   46:55:D4:2F:29:CA:D5:D8:C0:28:B4:99:58:6C:83:C2:ED:65:10:C8
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer:       /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial:       019882E7A57725769ACC9D9D2312017DD25B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number:          1620
Signing time:             Thu 07 Aug 2025 05:01:15 +0000
Manifest this update:     Thu 07 Aug 2025 05:01:15 +0000
Manifest next update:     Fri 08 Aug 2025 05:01:15 +0000
Files and hashes:         1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: WctDx4IHeejNtzn71BTT5bS9jen06s+vVgyU0dPJYps=)
                          2: sT8bdOMkOBuJcpLSNUJLIn8pNo4.roa (hash: vHy12CSxlbxHZ+bWYL5tzLyPAoKn74EaWNP0Myp+xyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:e7:a5:77:25:76:9a:cc:9d:9d:23:12:01:7d:d2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
        Validity
            Not Before: Aug  7 05:01:15 2025 GMT
            Not After : Aug  8 05:01:15 2025 GMT
        Subject: CN=4655d42f29cad5d8c028b499586c83c2ed6510c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:81:0c:e1:cf:45:41:be:d2:45:d6:a9:c5:
                    04:c3:52:4a:c6:41:90:cb:a4:12:01:6c:5b:62:bc:
                    da:07:f1:51:01:ad:d3:8d:d5:3a:47:47:53:48:8e:
                    8a:24:df:0e:91:a0:88:e0:c1:19:db:85:df:9b:a9:
                    c6:40:f0:fc:70:e2:42:c8:29:ef:0e:f3:53:02:58:
                    e2:bf:ab:52:b0:91:7e:1d:26:08:cd:5a:92:dc:82:
                    0c:a1:c4:c0:5c:b9:5d:88:93:86:8a:9c:52:a0:33:
                    d1:13:47:d0:f4:0d:01:e1:64:10:c0:dc:c7:93:1d:
                    3a:4b:8a:1a:58:43:37:16:c1:25:00:31:48:92:1d:
                    e1:03:8d:8b:26:ab:1a:f3:e3:dd:e3:58:a6:c0:52:
                    3a:7e:36:76:3f:f9:dd:95:bf:19:38:cb:e1:aa:82:
                    b5:12:37:68:9d:bb:ae:c8:4b:73:7d:14:87:bd:17:
                    46:68:25:ae:4d:71:f1:52:df:86:2c:e4:8b:27:10:
                    39:e5:70:c7:f8:e9:48:1a:49:7f:9d:05:4a:e9:fd:
                    89:49:33:d9:cb:c9:79:f0:06:4f:6e:17:93:63:e8:
                    87:89:64:16:3c:1d:75:9a:5c:64:7f:57:39:02:92:
                    68:89:06:f1:c2:43:28:aa:62:e1:1a:22:4d:27:e3:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:D4:2F:29:CA:D5:D8:C0:28:B4:99:58:6C:83:C2:ED:65:10:C8
            X509v3 Authority Key Identifier:
                keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:7b:4b:f0:6d:84:89:6d:6b:68:40:7f:48:96:28:55:68:
         eb:df:60:83:94:39:ce:4b:95:a4:1f:0e:3c:e6:4e:20:5b:83:
         a3:eb:5c:bc:50:a2:b3:5a:eb:9a:dc:83:41:62:eb:46:04:85:
         85:87:ce:e3:46:35:e0:6e:25:13:76:6c:02:50:59:9b:c1:64:
         13:5f:af:15:95:1a:2d:a9:e8:0c:68:7e:45:74:21:dd:e7:96:
         b6:44:7a:ae:45:ad:24:8f:a7:a1:e3:3d:0f:10:2c:c6:33:73:
         53:2c:5b:34:4c:a9:eb:7c:f0:3c:da:a1:ab:7a:38:9c:bd:f8:
         9c:85:ff:a3:a2:ec:09:a9:38:0d:34:05:a2:e5:73:8b:d6:0e:
         91:d8:d4:e3:68:54:89:bc:1b:46:79:38:d9:82:41:7f:d8:df:
         23:6c:86:99:7d:a9:f7:7e:76:c1:0a:e5:1c:90:f8:51:62:d4:
         1b:e5:93:f6:63:d6:48:97:13:ae:2e:77:97:ca:99:c6:a3:4a:
         3a:2c:b1:4f:64:06:02:e8:19:70:c2:17:16:eb:cf:ba:37:fd:
         6a:fe:57:21:cf:9c:20:1b:fe:26:1a:42:a3:07:d5:c6:5b:e7:
         39:2a:4f:c0:51:65:67:96:ee:57:19:0e:50:91:bd:d5:8d:63:
         e6:61:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:50 2025 by rpki-client