Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
File:                     EmCsDOT0xtDo2rrIOva4aYvEjpw.mft (raw, json)
Hash identifier:          qu/dif317DS+I8ZVC7KVpeuAN7a3UQ2hoEz+k9mk+Y0=
Subject key identifier:   B6:20:59:C9:AA:30:2A:8E:94:C7:EB:58:1B:21:9E:AE:79:46:8D:EA
Authority key identifier: 12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
Certificate issuer:       /CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Certificate serial:       019873AAD54FD96DA006324C82F9E0417CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
Manifest number:          32
Signing time:             Mon 04 Aug 2025 06:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 06:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 06:00:32 +0000
Files and hashes:         1: EmCsDOT0xtDo2rrIOva4aYvEjpw.crl (hash: 5gkwSK2W4ya00vWYrT55CYoTU9/44xNDibQcZw0LJxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:aa:d5:4f:d9:6d:a0:06:32:4c:82:f9:e0:41:7c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
        Validity
            Not Before: Aug  4 06:00:32 2025 GMT
            Not After : Aug  5 06:00:32 2025 GMT
        Subject: CN=b62059c9aa302a8e94c7eb581b219eae79468dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:e4:1e:d1:7b:ea:33:ba:e6:7e:b6:2e:37:
                    0c:a0:4c:25:5d:9b:5d:e5:9e:78:83:63:ad:9f:4b:
                    b5:c0:58:60:51:23:16:c4:d6:fa:ae:f9:3e:ff:80:
                    ab:71:07:26:0d:88:d7:5d:ba:7b:d0:c9:ac:43:9f:
                    d5:c3:68:5b:09:8d:3a:21:2d:e5:3c:fc:e1:6c:49:
                    a5:f9:6e:f1:71:80:8e:f7:ae:82:28:cc:f8:9d:29:
                    92:dc:15:b2:91:d2:d0:30:4e:4f:3c:d1:19:69:e3:
                    3f:65:7a:95:ab:02:b5:0d:85:a5:5a:51:b4:4b:b3:
                    65:05:f6:99:45:82:82:cc:be:6e:f9:82:d5:74:4c:
                    f4:d8:d1:21:f5:a9:62:70:93:e2:84:58:9f:5c:00:
                    89:c6:60:fb:6b:23:05:e4:2b:75:86:ce:cd:c3:25:
                    c2:16:a3:16:f5:bc:bc:a1:e1:c8:0b:56:99:24:31:
                    e3:10:30:09:04:c5:d6:0d:fe:20:ae:38:de:f7:6e:
                    dc:23:96:90:4c:74:40:6b:f3:0a:f7:53:d7:47:5a:
                    81:12:28:a5:c6:40:c0:f4:bc:49:66:c8:a6:5d:f9:
                    76:11:28:cb:a1:7c:bf:9c:f4:e3:55:0e:f5:a0:66:
                    5b:2c:1f:78:85:09:8a:4a:4d:cc:29:69:6c:e7:ce:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:20:59:C9:AA:30:2A:8E:94:C7:EB:58:1B:21:9E:AE:79:46:8D:EA
            X509v3 Authority Key Identifier:
                keyid:12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:aa:6f:48:68:a1:12:57:b6:69:25:51:78:cf:fb:a1:5a:3e:
         6a:46:cc:6c:26:0d:32:7f:93:12:f6:85:be:1f:dd:4d:17:c6:
         40:5e:ee:3e:71:86:a4:12:66:32:1e:4a:1b:89:e7:5e:23:7f:
         ac:f4:eb:87:39:b0:b0:8f:b3:bc:a7:4f:f7:de:ba:e0:04:c7:
         8b:64:55:a5:f7:34:9f:67:e2:e5:79:5d:52:73:f4:f4:08:8b:
         3a:eb:8d:5b:12:b8:bc:ac:d0:8a:04:c4:c2:c2:d5:10:33:13:
         f4:cf:f7:c4:dd:06:90:d8:4f:33:81:97:cf:ad:15:45:a1:2c:
         d9:a0:83:5d:7c:1b:40:ce:77:46:4b:53:2f:2a:2c:d9:06:71:
         3a:26:93:fc:97:dc:24:c0:28:1b:ae:e8:8f:7f:4e:de:fd:f6:
         da:2c:c9:44:67:e3:40:2c:1f:99:25:b6:86:54:0c:7a:a9:6b:
         02:c6:75:90:18:53:c9:2c:9f:48:15:27:1a:10:71:56:14:08:
         2c:b6:bc:41:4d:e1:05:bd:f1:c5:93:12:b6:e3:06:12:57:bf:
         25:7d:69:a3:4d:25:1b:e6:ad:dc:4e:88:a2:91:41:2f:e5:28:
         10:45:d4:1b:46:5e:bc:f7:23:77:f7:2c:fb:91:72:b1:c4:93:
         b6:18:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:05 2025 by rpki-client