Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          sk3d+RHe4JTYT4tyyzsF5Ut/MQPr/gQlmr6/BHK9gGE=
Subject key identifier:   55:AA:2A:15:8F:62:88:E7:CB:94:BE:B7:CC:D0:AD:BF:DD:CF:AA:2E
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       01987418D3BBFB0F0312DB7138C3BC3D35FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          15A8
Signing time:             Mon 04 Aug 2025 08:00:40 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:40 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:40 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: VxCik4O4VwdVoITRPXWECMKeXDJ3Sko+LgGx3YfqR6c=)
                          2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:d3:bb:fb:0f:03:12:db:71:38:c3:bc:3d:35:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Aug  4 08:00:40 2025 GMT
            Not After : Aug  5 08:00:40 2025 GMT
        Subject: CN=55aa2a158f6288e7cb94beb7ccd0adbfddcfaa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:db:3b:e5:bf:b9:64:e6:24:55:c6:11:90:
                    71:1b:b8:b2:48:3c:01:e9:d1:7f:d7:9c:d1:39:ff:
                    37:c5:ed:92:c9:b2:12:d9:79:7a:ac:bf:4d:d3:95:
                    ab:ff:3f:da:d1:0f:e0:d6:cf:52:60:8d:b8:cc:fa:
                    b0:30:34:79:07:9a:40:b4:7e:68:6c:05:4b:45:44:
                    9b:8d:51:a1:51:86:fb:c1:55:bf:fd:46:06:04:d1:
                    4d:c0:0e:76:14:c9:86:26:f3:1a:ff:d5:d4:d0:20:
                    ad:09:e9:4e:8b:1f:83:56:06:3b:ec:39:d2:c2:1f:
                    56:67:84:24:8b:93:ec:64:ca:44:10:1e:c9:c4:80:
                    c2:dc:8f:e4:7a:d6:28:97:d6:f2:cb:47:8b:ea:d4:
                    7b:b9:73:ee:cb:0e:c2:ae:77:fe:5e:07:0a:77:f6:
                    84:7e:cc:a1:cd:72:8d:eb:f4:ac:57:e1:53:9b:bf:
                    89:00:21:cb:70:b0:5e:bf:47:0a:67:df:a3:ac:a7:
                    a5:41:b3:48:80:57:ca:b4:29:95:a1:63:d0:98:fe:
                    c1:de:b0:6a:d2:28:87:8b:92:65:2f:ce:b4:6e:03:
                    59:80:d1:4f:5e:59:3b:55:97:31:cd:ae:a4:8f:2c:
                    d8:b2:6e:a1:64:9e:8d:c7:88:f9:17:27:98:f5:4a:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AA:2A:15:8F:62:88:E7:CB:94:BE:B7:CC:D0:AD:BF:DD:CF:AA:2E
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1d:3c:76:0d:78:7f:34:ec:0c:50:8e:b0:86:f7:6f:0d:66:
         15:39:18:bf:99:b6:76:7d:6f:d0:c0:a2:41:c1:c9:c4:4d:2f:
         9e:d1:a8:85:d7:76:4a:0c:2c:f0:af:ac:bc:45:6c:d3:7a:77:
         03:fc:54:e5:43:1a:45:3e:a9:78:6d:4f:a8:21:00:55:cd:8a:
         59:99:59:33:03:2c:55:81:6c:ec:91:5a:95:3b:f5:87:2e:48:
         78:2f:22:69:e5:51:f6:7e:c0:23:08:7f:7b:d3:02:a6:5e:d4:
         14:c2:b6:d3:2f:1b:ff:37:c1:72:37:3f:79:57:a4:83:f8:9a:
         42:29:85:1d:5a:f3:be:9f:d3:69:6c:c3:97:b7:17:af:c6:5e:
         25:24:5a:b1:ba:92:d4:88:89:06:91:11:ab:e4:e1:7b:df:8f:
         7a:a1:5e:0f:d2:00:58:e8:54:b6:69:cf:35:9f:d6:c2:78:6c:
         3d:7c:f8:42:35:7a:d3:4b:4e:3e:80:a2:26:5c:d3:a7:02:fc:
         85:a5:74:73:5d:9c:35:d8:64:7b:3b:b9:c6:4b:8c:00:2b:e6:
         c0:43:dd:6a:88:a2:f7:b1:91:eb:96:b7:65:95:76:52:3d:44:
         0e:f9:ba:84:02:8b:13:a2:f7:a1:68:9b:24:52:66:f4:c3:59:
         6e:a3:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:59:18 2025 by rpki-client