Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File:                     E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier:          o2r3/ENwST9lbCN7W/F/ED0O8O1jTGtuBHXLNGtNtlc=
Subject key identifier:   A1:21:EB:04:33:28:15:45:57:7D:8A:64:CE:91:81:1F:7F:F0:A2:AC
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer:       /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial:       01987298F6FEE27F076C9A8CCBC80C46901E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number:          1354
Signing time:             Mon 04 Aug 2025 01:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:23 +0000
Files and hashes:         1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: vIZWUEt6hU0a5x59tOajDibebHdEMpBU8UAYmEgkQrQ=)
                          2: zB_eI0R_E9fHHHjTeKsfbCfUNfE.roa (hash: ojS7UDvnpbti0L0m+Z7X9vfIKPOWqVpCsWT632+KxOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:f6:fe:e2:7f:07:6c:9a:8c:cb:c8:0c:46:90:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
        Validity
            Not Before: Aug  4 01:01:23 2025 GMT
            Not After : Aug  5 01:01:23 2025 GMT
        Subject: CN=a121eb0433281545577d8a64ce91811f7ff0a2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:11:5f:bb:c4:27:fb:12:fa:ac:4f:c9:f8:
                    f6:84:b6:cd:f9:41:a2:dc:8d:6b:73:81:e3:86:fe:
                    ab:8a:fb:53:63:10:d3:4b:3e:46:11:37:50:5d:1d:
                    a8:3f:1a:f4:9e:fc:59:37:c4:a8:bc:df:1c:f1:53:
                    91:22:e5:f5:6e:d2:d7:22:a3:0e:3a:f6:39:c1:4b:
                    89:57:cd:e7:6d:7c:f7:d4:f5:8e:6c:47:f8:e0:05:
                    18:fb:d2:98:3f:e9:7c:bd:4e:c7:18:a4:f9:d3:bf:
                    36:2a:88:8d:6f:0c:60:4d:2c:8d:4c:1b:4f:61:21:
                    40:f5:9b:9e:c3:48:1c:ed:35:ec:37:28:f2:ce:56:
                    10:3a:b3:b5:6d:7f:61:f7:10:c5:bc:ca:27:0d:f4:
                    7d:83:2a:c8:23:ef:f4:de:53:ac:49:2f:4f:e9:18:
                    6b:89:5c:62:6e:7e:75:db:3b:4f:3a:e3:5e:9d:35:
                    30:50:04:80:ef:3a:66:a7:bc:77:76:6b:d5:35:ec:
                    ea:b0:71:a0:43:f4:25:7e:7b:99:79:d4:8c:df:2c:
                    bd:21:a9:1c:f2:d3:a8:c7:14:b4:93:70:46:68:80:
                    09:78:5c:b6:33:f0:59:96:d8:7f:7c:82:e7:52:5a:
                    6b:9e:84:89:a9:96:35:0b:7a:be:65:47:2d:e6:cd:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:21:EB:04:33:28:15:45:57:7D:8A:64:CE:91:81:1F:7F:F0:A2:AC
            X509v3 Authority Key Identifier:
                keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a0:d6:7a:1d:57:b3:32:be:99:95:45:e1:9f:72:7d:e0:fb:
         21:b7:fb:03:73:bf:71:73:c5:9a:13:11:eb:db:00:ba:e9:b9:
         78:c7:55:c4:f7:0c:56:bd:ba:e5:27:a4:94:61:c6:2b:2c:6f:
         f0:c3:c4:d2:e5:0c:f3:fb:01:77:43:9d:e7:90:c1:4f:b1:ad:
         81:ae:f6:a6:53:eb:9a:22:0e:d7:b7:e5:92:0e:03:54:51:26:
         86:0d:85:73:22:ab:16:29:b1:81:56:b2:50:8f:95:55:21:b1:
         77:f1:1e:37:89:bf:63:13:cc:f6:d7:94:06:df:5b:13:24:88:
         12:8f:08:92:71:5c:43:9a:5e:92:21:9c:26:59:93:76:87:cd:
         18:c8:b9:14:14:bb:73:96:7c:9f:4e:00:4c:4b:7a:65:ad:e0:
         ec:f2:3c:07:29:43:d5:b0:02:b2:e4:55:d2:e0:44:8f:cf:8a:
         e2:60:35:33:db:ff:23:c0:31:4c:ce:17:9f:18:23:a4:fb:0a:
         48:51:ac:62:79:4e:1f:5c:0a:4b:c7:7e:df:99:aa:b8:dc:9b:
         8b:36:72:7c:9b:e4:02:0f:e6:14:92:e1:b0:ae:c2:e6:33:e6:
         b5:65:a4:84:2c:d4:6d:69:bb:c5:cf:21:0a:e0:30:44:2d:d3:
         f4:8d:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:03 2025 by rpki-client