Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          avT/OWWLYjAiFjdrkBFQUJznSbJvOAeg0IOGfLPtNU4=
Subject key identifier:   EA:71:69:FD:4B:66:21:0D:FD:B7:ED:BD:03:0B:C2:2D:0C:1E:BA:21
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       019873E3881EABCD7E6508CA0FB9FCC55125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          047B
Signing time:             Mon 04 Aug 2025 07:02:28 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:28 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:28 +0000
Files and hashes:         1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: 8pz0MB57EbTKuG57v+r7XmC9Dq03FMrPiDWYa4ts/b0=)
                          2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:88:1e:ab:cd:7e:65:08:ca:0f:b9:fc:c5:51:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Aug  4 07:02:28 2025 GMT
            Not After : Aug  5 07:02:28 2025 GMT
        Subject: CN=ea7169fd4b66210dfdb7edbd030bc22d0c1eba21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:ab:3b:b7:8c:30:5c:c4:f1:8d:55:e0:c3:
                    f1:69:37:83:64:1f:ed:44:8c:f2:24:56:a7:94:6e:
                    20:bf:be:b2:17:9e:41:2a:28:fd:6b:8a:12:8c:d3:
                    f6:d3:5e:cc:23:aa:41:a0:1a:00:77:7a:80:22:1a:
                    80:d3:ee:9f:63:3d:63:e5:ff:06:35:4a:3b:4e:93:
                    1f:46:e5:74:52:00:1f:d7:69:e6:c6:47:d3:d5:f2:
                    f9:e0:43:7d:a5:99:f0:15:d3:7a:ab:6f:1e:1f:ba:
                    c3:3c:d7:00:5c:66:96:94:de:36:53:ef:75:c5:d0:
                    87:10:fc:32:b1:a0:3a:09:48:7a:b1:39:5e:0b:f2:
                    7f:60:35:6c:90:2c:4a:34:1c:ec:aa:73:3b:b7:5f:
                    b3:cf:5d:85:8d:f3:ce:0b:d5:b1:b4:e8:17:65:39:
                    8d:eb:04:c3:5c:fc:e8:1e:7f:35:c8:69:22:d4:54:
                    6b:ac:5b:85:69:3f:22:f6:55:c1:94:0e:b5:02:a2:
                    88:4b:06:b8:00:7e:d9:3b:3e:d1:dc:f1:d0:af:ea:
                    f6:6d:51:78:69:37:65:0d:e7:2a:c7:84:d0:56:01:
                    03:6d:06:26:b8:c5:69:6c:82:d3:91:57:e0:4f:7d:
                    42:7f:cb:4c:4e:a2:aa:3c:5e:be:e7:a3:a3:6a:8c:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:69:FD:4B:66:21:0D:FD:B7:ED:BD:03:0B:C2:2D:0C:1E:BA:21
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:89:87:ef:99:2b:99:9e:34:b7:09:2c:fe:a0:bf:8c:a6:
         8f:9e:14:3e:27:7a:9b:4d:80:2f:2e:62:1b:77:b8:2c:6c:19:
         bb:5b:7c:b0:92:5a:b8:6f:ba:b3:16:78:8c:4e:7f:1b:cd:7f:
         68:b8:a2:bb:4a:73:5a:d3:45:52:08:f4:36:c5:95:fe:f5:cb:
         9d:c0:dd:82:45:25:9d:e1:0c:3c:c3:cf:f5:6f:5e:e7:3c:7f:
         c6:37:40:17:94:7f:0a:d4:16:27:ec:2d:44:ff:1c:0b:8f:a9:
         c0:fd:6a:77:42:a1:d5:e7:d3:5f:d5:cd:3f:14:e5:5e:f0:cb:
         cd:27:0c:cf:62:84:64:3d:96:5b:29:d7:f0:79:a4:e5:ad:00:
         82:16:51:94:a4:f1:ac:a9:2f:dd:46:6c:46:0a:cc:6d:cd:9a:
         04:fd:e8:68:08:92:dd:b7:36:4e:84:a3:0c:13:9b:92:1c:8d:
         f9:85:e4:1f:e9:40:8a:4c:d4:ce:f5:5e:41:57:1c:5a:89:dd:
         a5:f7:71:52:a0:ab:ff:35:ad:bc:99:7a:aa:36:77:af:35:60:
         3e:59:c5:17:6a:96:98:32:7f:0a:ab:ea:91:25:3f:86:57:c3:
         8f:69:69:fd:07:ee:84:54:06:c4:7a:9a:b8:9f:fb:b3:aa:2d:
         ee:d0:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:59 2025 by rpki-client