Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File:                     CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier:          X/2jkwRpROlZPWnfBVNpylaWX4jfta9G4xEZV/uhhQo=
Subject key identifier:   63:84:9D:93:39:47:20:4F:CF:A8:19:41:66:70:DD:9B:82:29:39:C7
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer:       /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial:       01988BB38247D09EB74718021AEE87A88B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number:          15EB
Signing time:             Fri 08 Aug 2025 22:00:53 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:53 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:53 +0000
Files and hashes:         1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: TQXHac9ZWoWuB6gCG4BISg6GmK+A73ckOOuC8dKDxZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:82:47:d0:9e:b7:47:18:02:1a:ee:87:a8:8b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
        Validity
            Not Before: Aug  8 22:00:53 2025 GMT
            Not After : Aug  9 22:00:53 2025 GMT
        Subject: CN=63849d933947204fcfa819416670dd9b822939c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:31:cc:b1:1c:25:5c:21:8a:c7:e7:83:4f:6c:
                    5d:3b:bc:b7:26:79:38:9c:6e:4f:cd:dc:e8:66:42:
                    91:b5:cc:85:24:ea:9c:1e:b1:d8:b8:8d:ad:7e:f7:
                    a6:f4:f2:b6:97:c7:fa:50:8d:1e:68:72:b3:e5:76:
                    c9:d4:ab:3c:c7:a8:3e:20:7e:ce:8f:f1:52:cb:02:
                    e9:bc:ab:d5:bd:41:6c:06:5f:f3:16:ad:d6:44:85:
                    04:06:2f:72:0f:1c:5a:80:4f:fd:47:06:b9:db:30:
                    40:c6:5a:c8:1d:38:3c:60:41:c5:a6:d6:1a:f4:77:
                    fa:64:37:6a:03:94:22:3d:f3:f4:f7:be:ba:c1:22:
                    9b:71:d1:ae:71:ea:8b:28:0e:26:0c:d8:cf:0a:8c:
                    09:c2:b2:4f:90:47:be:b6:41:b2:5b:a9:58:55:da:
                    b8:c5:82:61:1d:14:e1:dd:90:60:e2:1e:8d:30:a2:
                    e3:8a:28:ac:4f:28:c9:ce:d2:af:82:e5:8e:e2:d6:
                    6c:e7:cf:6a:9e:0e:d4:84:88:19:c4:94:6a:e7:4a:
                    5f:0e:ab:24:ac:ee:20:60:11:3c:98:4d:e5:53:8d:
                    32:57:98:6d:2a:b8:b3:9e:16:84:ac:9f:5c:7c:d2:
                    92:1f:3c:a1:bf:d9:ff:71:00:7e:a6:35:a4:f4:b5:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:84:9D:93:39:47:20:4F:CF:A8:19:41:66:70:DD:9B:82:29:39:C7
            X509v3 Authority Key Identifier:
                keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:df:08:39:fa:b1:2e:d9:c2:cc:dd:16:69:39:a3:d8:0f:80:
         c2:d7:9d:56:4a:90:11:13:c6:bc:f7:f1:78:36:80:46:b8:a0:
         96:06:1f:bf:9c:0b:6b:56:0e:79:4d:7d:93:f1:8a:d8:81:2e:
         14:6b:19:50:eb:01:45:ae:b7:b2:4c:26:0f:8e:63:ea:42:d0:
         48:34:d1:b7:06:36:aa:36:48:ff:fc:7d:cc:f3:a9:47:4b:79:
         8a:ff:1b:02:46:7c:22:df:87:4b:62:a2:69:e0:69:a8:28:79:
         93:b5:59:0f:46:80:3e:71:30:f1:41:cf:fe:89:ca:d0:db:fa:
         90:0d:a7:58:d5:ff:ab:52:02:a0:b1:70:c7:64:86:36:bc:34:
         5c:e3:a9:88:1f:2d:9d:a2:20:d6:f3:a9:2e:cc:e8:ff:17:dd:
         e9:ec:3b:81:3b:08:91:2b:97:4b:92:f7:11:9b:4e:b6:5b:e9:
         58:0d:3e:46:43:3c:ba:e0:5f:d2:41:22:17:1e:e7:27:96:a0:
         f1:50:f7:b5:ed:17:d5:40:ba:3e:a7:03:99:48:94:43:48:2d:
         ec:69:d1:43:e9:57:52:7e:45:8d:de:2a:27:47:a3:0d:d8:c8:
         bc:0a:7e:65:d4:43:d0:bb:63:95:5c:e6:ed:b0:1d:87:84:53:
         00:4d:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:17 2025 by rpki-client