Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File:                     eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier:          eBwhLpd21RafsIV0I5+kIa5Uz6JlT4R6VxnszryUMSc=
Subject key identifier:   53:51:CB:29:9D:7C:0E:E0:7C:16:12:C2:8C:93:60:3D:F0:7C:FE:DE
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer:       /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial:       0198816733476EDE3CF63349AC8811BDBEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number:          10F6
Signing time:             Wed 06 Aug 2025 22:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:20 +0000
Files and hashes:         1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: ZCHaOuYwfsudz25VaNtizlWLzGTzCRQvdBAU3J6uYs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:33:47:6e:de:3c:f6:33:49:ac:88:11:bd:be:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
        Validity
            Not Before: Aug  6 22:01:20 2025 GMT
            Not After : Aug  7 22:01:20 2025 GMT
        Subject: CN=5351cb299d7c0ee07c1612c28c93603df07cfede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:35:81:02:61:6d:8a:30:3a:ad:c0:13:c1:
                    2a:2f:ed:ca:8f:0e:55:85:c5:58:73:7b:8f:85:5e:
                    dd:be:df:c9:37:0c:b4:85:7d:b5:20:2e:59:58:e0:
                    04:a1:f8:82:1d:57:34:63:38:e8:f6:51:6a:9f:44:
                    80:80:ae:db:45:24:8c:a1:bf:ff:bf:cc:c4:8c:e1:
                    65:f8:00:0d:56:44:bf:a0:51:1f:a3:b4:b8:7b:0c:
                    2b:75:b7:60:5f:e9:07:ca:9e:a4:ea:55:a8:c0:93:
                    6c:0f:6b:dc:03:db:c4:f4:64:56:05:1d:da:c2:cc:
                    ed:c6:00:58:28:88:a3:d6:09:49:ec:d8:c6:73:b8:
                    58:ed:50:43:be:b8:26:23:85:ff:3c:24:39:69:1c:
                    95:fa:63:8d:90:ab:1e:6d:bc:a9:19:86:54:1b:52:
                    28:f2:b1:82:a6:2d:a5:09:f5:31:81:5e:a7:55:13:
                    09:a6:47:77:e7:23:91:4f:e6:5d:ff:dd:5b:3f:ea:
                    b4:94:48:56:e7:46:43:ac:cb:a3:52:f7:28:c4:1a:
                    82:50:ec:03:4e:de:78:4e:cc:c4:4c:7b:bd:f7:9e:
                    fa:3f:da:5f:bd:8f:75:f4:71:9a:82:27:c5:82:92:
                    5c:9e:c5:78:a6:5f:97:0f:a0:d9:8e:84:14:0e:3d:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:51:CB:29:9D:7C:0E:E0:7C:16:12:C2:8C:93:60:3D:F0:7C:FE:DE
            X509v3 Authority Key Identifier:
                keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:22:77:3c:50:d7:6d:6c:cb:3a:36:4a:fe:87:fe:02:6d:
         25:bc:58:6a:d6:4c:af:9a:8e:16:33:32:2c:4b:29:1b:21:56:
         96:0b:44:5c:1e:0f:d2:2d:c2:e5:21:1d:0a:c4:0b:0d:7f:ab:
         7d:ad:0e:bb:c1:cb:91:5d:fd:1a:79:2d:c7:ad:86:9c:4f:50:
         a9:10:22:7b:31:8f:03:e8:f9:e4:42:db:e0:59:6b:56:bf:32:
         c8:cd:f3:88:30:d7:9a:5b:92:a3:6e:3f:19:df:af:8a:3d:46:
         b6:43:c8:5a:47:ef:1b:6c:42:94:38:06:57:18:9e:54:91:bf:
         0c:96:3e:e5:52:96:a5:1b:02:7d:6c:24:78:f7:28:3f:56:a4:
         83:50:9f:66:b3:30:fd:67:2c:29:a6:e8:56:ad:7d:7d:9d:d4:
         9e:fe:e0:7f:bf:4b:6e:df:bc:a3:78:25:76:60:dc:2a:f2:b7:
         53:f2:3b:31:f7:aa:50:b2:58:f7:52:2a:a0:f2:e7:49:8a:8f:
         ee:70:5b:c5:5e:8f:6f:54:dc:42:bc:10:91:ad:2c:dd:3e:be:
         f3:6c:31:84:d0:48:e9:f6:2d:fa:fb:33:1e:a6:99:95:a1:fb:
         9b:46:0a:e3:73:8d:16:c7:15:51:7e:71:18:54:5f:b8:59:d2:
         de:10:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:43 2025 by rpki-client