Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File:                     EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier:          /je/YRJ4x+I435yB/zL03GzY3MfIIQH9s8vELPLjs+I=
Subject key identifier:   27:EF:1A:28:BF:E8:8E:83:71:55:E6:5B:3A:72:2E:96:0D:AA:AC:E0
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer:       /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial:       0198737488B6B25954709A516E18D76D5D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number:          055D
Signing time:             Mon 04 Aug 2025 05:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:13 +0000
Files and hashes:         1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=)
                          2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: OkZ7wOKfvZ+gSkLuf1t5/roviC452BCAaBAv41wQgf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:88:b6:b2:59:54:70:9a:51:6e:18:d7:6d:5d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
        Validity
            Not Before: Aug  4 05:01:13 2025 GMT
            Not After : Aug  5 05:01:13 2025 GMT
        Subject: CN=27ef1a28bfe88e837155e65b3a722e960daaace0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:aa:93:2b:aa:45:16:f7:7f:21:83:00:da:
                    21:f0:5c:bc:2f:20:b7:2d:2b:94:dd:c9:b7:93:9d:
                    3e:9f:33:60:1f:0e:8b:f3:ef:58:eb:a2:0d:11:3b:
                    a9:a4:9b:e2:83:70:ef:ab:a4:3d:c9:25:d7:33:00:
                    b8:8d:1d:8d:a6:54:f9:5b:ef:b5:39:49:1f:93:d8:
                    41:db:10:c8:94:33:c6:dc:63:90:92:fe:f3:26:9d:
                    83:b2:0a:f4:a4:f3:fb:2c:89:23:32:33:c9:ba:33:
                    b9:dd:42:f7:47:ce:d4:e7:e7:36:e4:88:83:02:18:
                    05:79:c5:4c:b4:d5:03:04:44:f2:fa:85:5c:14:e1:
                    e9:88:b7:b3:ae:23:73:89:ae:1e:c2:f7:b5:79:fd:
                    b6:81:5e:9d:e0:7e:00:d4:f0:73:98:1e:ae:03:3a:
                    4f:a0:e3:fa:e6:26:22:f6:ce:31:d3:95:af:bb:3f:
                    49:98:64:2f:86:8e:f4:ca:ec:7b:43:28:62:8b:9a:
                    bb:1a:f9:b4:47:40:0d:a6:8a:63:2a:ed:05:33:c3:
                    92:6b:55:8f:91:74:d1:1f:80:7c:c6:5c:5d:66:31:
                    d0:d6:d7:6a:37:6e:3b:1d:8c:33:7b:98:e5:db:c2:
                    db:84:75:f9:b6:10:8c:62:0d:70:04:64:81:63:d0:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EF:1A:28:BF:E8:8E:83:71:55:E6:5B:3A:72:2E:96:0D:AA:AC:E0
            X509v3 Authority Key Identifier:
                keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9c:16:a4:3d:db:38:8c:97:a9:81:0f:33:c9:98:e4:ad:45:
         c0:87:fb:19:66:27:67:73:86:6d:91:52:b5:73:bb:fa:a2:d9:
         c2:13:58:f1:cb:4f:73:4e:2c:6a:75:48:d5:1f:9f:cf:dd:7f:
         39:fd:9f:5e:f9:07:fb:f5:50:d7:77:ef:9f:92:65:56:15:34:
         39:e1:8b:72:45:8f:7e:de:73:3a:96:50:1f:ed:09:8a:5a:41:
         cc:06:fb:e6:af:ee:fc:38:9f:46:fd:26:c5:79:38:7a:ff:aa:
         e6:3c:12:11:c4:5d:bc:bf:d6:b7:b7:a7:71:59:a3:5d:c3:97:
         93:9e:a8:7e:b4:a6:7e:ba:e6:7d:39:b3:f7:e2:dc:de:20:98:
         e8:8b:e6:1e:7b:7f:0a:08:71:db:56:d5:f8:08:ce:a9:47:00:
         24:ce:3b:3f:1c:56:6d:a8:07:5f:4e:53:16:b0:57:0b:4e:ac:
         0b:72:3d:f9:e7:5f:83:92:e4:a9:72:b7:2a:ed:3b:9e:57:2b:
         c8:40:8f:6b:24:c8:5c:41:c8:1d:da:ae:ba:78:d7:e3:f0:48:
         f1:aa:b1:69:af:5b:ea:12:30:f9:10:71:7e:1b:e0:8e:31:7b:
         da:e2:03:fa:91:4d:4b:a5:e1:c7:3d:f9:8d:f0:45:2e:4f:2d:
         33:a5:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:12 2025 by rpki-client