Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File:                     EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier:          m9gpuW3GZFnrEnukWzM+arSSdtWE8c+/VlXQBDiGhyo=
Subject key identifier:   B6:35:23:9E:66:40:9F:93:EB:3C:56:3F:EB:1D:5E:8B:6E:F9:21:4C
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer:       /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial:       01988B0FF189702361B924EAA6711F0A0348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number:          132E
Signing time:             Fri 08 Aug 2025 19:02:14 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:14 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:14 +0000
Files and hashes:         1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: 1p1j1xwgusKlPLNx6AdUtW7LVw+nmQ2SDOlEKcp4aTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:f1:89:70:23:61:b9:24:ea:a6:71:1f:0a:03:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
        Validity
            Not Before: Aug  8 19:02:14 2025 GMT
            Not After : Aug  9 19:02:14 2025 GMT
        Subject: CN=b635239e66409f93eb3c563feb1d5e8b6ef9214c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:65:ca:ca:ac:ec:8e:90:78:c2:5e:f6:08:
                    15:20:cd:fc:3b:90:55:4e:c9:e7:cb:f8:b5:42:29:
                    26:92:26:48:63:95:48:26:fc:97:7c:94:a3:63:15:
                    9b:eb:1b:19:db:04:66:0f:9d:3c:a4:c8:db:00:a5:
                    45:b5:f2:8a:11:c0:3d:d2:2f:7b:bc:b1:8e:11:e8:
                    82:86:08:f1:35:52:46:9c:59:48:73:f0:de:ca:f9:
                    9d:f0:68:2e:96:88:54:3a:b7:21:94:2c:af:5f:12:
                    e7:8c:92:75:45:b4:d8:d6:ff:ca:d0:27:ee:81:ae:
                    8b:65:e0:22:a2:f2:3f:2d:b2:e3:da:3c:28:29:f7:
                    36:35:5d:f0:57:ab:fd:ab:b8:85:d4:2d:7d:33:6d:
                    aa:0c:59:f4:7a:b7:f8:7a:18:fe:bc:24:8b:af:25:
                    fc:cf:36:22:1e:37:92:b7:e0:2c:12:b8:85:31:23:
                    33:b2:2f:d9:7d:e9:11:f3:46:cb:ce:05:2f:e3:e8:
                    b0:69:87:63:4a:c1:d2:26:b7:e0:56:c7:af:e7:16:
                    a3:10:e8:95:fb:5a:1d:cc:8f:03:39:d8:92:b0:c7:
                    bf:bd:24:24:ce:31:6d:e9:17:a8:0d:fb:e9:75:b2:
                    dc:2a:a1:cb:8d:72:06:09:f4:c4:01:c6:bd:69:29:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:35:23:9E:66:40:9F:93:EB:3C:56:3F:EB:1D:5E:8B:6E:F9:21:4C
            X509v3 Authority Key Identifier:
                keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:1d:56:86:a3:1a:f7:94:b6:05:42:93:5e:1a:bd:90:51:
         64:19:eb:31:22:ee:c0:d7:69:46:5c:52:14:cf:aa:ed:c3:a2:
         79:bb:26:c0:ba:b0:c2:d0:f3:95:20:09:1a:af:a5:be:b3:fb:
         86:be:df:be:2c:dd:0e:b1:75:d7:bf:57:9b:53:37:5d:67:00:
         a1:01:83:93:65:32:b2:35:09:3b:60:c6:58:cf:7e:15:9d:e6:
         46:5f:8b:a0:4c:7b:99:79:4f:62:be:33:72:91:bc:77:b3:8f:
         ca:08:ea:e0:87:ed:1b:5e:c3:96:87:c9:b2:0e:c7:2c:a0:ab:
         ec:6f:74:bd:63:ec:92:7e:09:4e:8d:47:7c:93:da:8b:7a:bb:
         2c:ce:5f:23:0a:86:fb:eb:1b:c0:14:73:25:39:56:a7:93:49:
         e9:ed:ef:e3:73:b0:5c:bc:0e:32:81:a3:bf:e6:ac:be:de:80:
         d8:ef:a7:d9:d1:5a:4a:49:46:16:44:f9:8c:cb:87:c5:5d:b4:
         f9:a9:cb:3d:83:14:ab:02:da:4a:6f:8c:a6:c6:0d:a1:b3:0e:
         62:0e:57:1f:96:b5:aa:77:25:9d:5d:60:07:22:7c:86:cc:a0:
         7e:5a:1d:57:e5:21:18:fd:f0:33:07:7d:d5:a8:05:51:3e:b5:
         7f:2d:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:58 2025 by rpki-client