Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft
File:                     ehKIruzRFJyedF-YZT5okK-iU6s.mft (raw, json)
Hash identifier:          AU+6gwBcrMnOR7dj313cWNGm1G/GS+nI8EjWnrgqycc=
Subject key identifier:   32:B6:44:E1:76:58:FC:D1:93:C6:41:66:02:A3:BD:E3:8A:0C:5C:C8
Authority key identifier: 7A:12:88:AE:EC:D1:14:9C:9E:74:5F:98:65:3E:68:90:AF:A2:53:AB
Certificate issuer:       /CN=7a1288aeecd1149c9e745f98653e6890afa253ab
Certificate serial:       01988F902942ECE1FC9DD8EA1D6BFFFD8679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft
Manifest number:          0113
Signing time:             Sat 09 Aug 2025 16:00:46 +0000
Manifest this update:     Sat 09 Aug 2025 16:00:46 +0000
Manifest next update:     Sun 10 Aug 2025 16:00:46 +0000
Files and hashes:         1: ehKIruzRFJyedF-YZT5okK-iU6s.crl (hash: KSh5mZnomYmErRCTvD/Tlf4fufcqEmczKZ4wuhzNxaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:90:29:42:ec:e1:fc:9d:d8:ea:1d:6b:ff:fd:86:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1288aeecd1149c9e745f98653e6890afa253ab
        Validity
            Not Before: Aug  9 16:00:46 2025 GMT
            Not After : Aug 10 16:00:46 2025 GMT
        Subject: CN=32b644e17658fcd193c6416602a3bde38a0c5cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:74:dc:7b:39:b6:cc:e4:7f:10:92:cb:7e:
                    7b:39:36:27:d7:f3:75:77:26:4f:81:fe:7f:3b:3a:
                    31:4d:b2:93:b0:12:5e:3b:fd:5c:b4:c4:f4:e0:9a:
                    3e:88:e1:ce:43:ac:6b:4a:78:f4:c8:0f:65:f0:6c:
                    1e:5c:ac:da:d7:6a:d2:d9:14:74:bd:54:ef:87:eb:
                    b6:22:bc:89:a2:54:e9:1f:bb:de:07:8c:99:1f:c0:
                    e1:d9:b5:3c:89:85:84:b1:1c:82:7d:16:73:98:44:
                    3f:3e:99:22:af:3f:1a:32:85:37:c6:fb:0d:2e:40:
                    6d:aa:21:0b:31:1f:00:5d:12:3f:8f:bc:cb:63:cf:
                    04:3f:96:15:af:29:30:4e:ae:44:ad:c9:e1:cf:66:
                    76:6c:65:b8:2c:3d:05:4b:b3:e3:ab:db:e9:74:7c:
                    b0:89:3a:10:5b:11:b6:dc:0b:01:f9:8d:29:bf:2e:
                    8b:00:47:a2:36:b6:d3:43:f7:0e:78:ba:f9:d9:70:
                    ce:05:84:12:93:9a:9e:21:1a:39:a6:93:a5:71:ce:
                    2c:07:a6:cc:5d:dd:67:96:ea:03:76:45:60:bf:70:
                    5d:b9:cd:a2:44:4b:fa:f0:8d:bd:d1:ae:47:ad:f6:
                    3f:d7:05:81:e8:db:c3:9c:0d:e1:f8:c1:59:18:48:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:44:E1:76:58:FC:D1:93:C6:41:66:02:A3:BD:E3:8A:0C:5C:C8
            X509v3 Authority Key Identifier:
                keyid:7A:12:88:AE:EC:D1:14:9C:9E:74:5F:98:65:3E:68:90:AF:A2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b8:3f:e0:cc:36:a5:f6:48:73:11:14:d8:76:03:bc:af:81:
         a7:d2:81:9a:7d:f3:b2:e5:87:b7:8e:e5:e8:32:75:4f:82:8f:
         51:0e:48:21:7c:2a:6a:0e:7b:bc:5b:84:91:c0:12:43:f8:30:
         95:8c:4c:10:08:ff:3d:96:93:9f:f5:61:90:8b:b5:e7:34:61:
         37:b6:76:c9:76:16:ee:de:0f:b9:1e:be:d7:b2:87:ea:9f:5f:
         f3:a6:13:78:b1:5e:39:a5:66:06:cd:a5:d5:52:8a:df:fc:e0:
         61:a5:3b:75:c5:01:c6:cf:3f:cb:c2:17:50:58:36:48:e5:9d:
         ea:75:82:8c:87:13:a2:38:85:c6:b1:09:56:1c:70:7b:d5:84:
         0d:a9:d9:b4:90:1a:81:ec:32:0f:2e:28:da:83:e0:1b:ad:55:
         b3:33:f7:89:d1:d3:cf:bb:40:fd:12:34:7d:31:bd:45:89:d3:
         d9:09:5c:5b:5c:6e:61:d8:c1:3e:4a:0c:85:c2:10:7f:46:95:
         05:e9:e1:a8:7a:ba:98:7e:40:fc:15:26:cb:27:6d:e8:7c:60:
         1a:78:d0:df:52:62:6d:04:73:02:3b:db:23:0b:2c:02:7d:e5:
         26:e1:3e:b8:6b:b5:a0:e2:c1:3f:c7:b7:21:f4:03:b0:84:57:
         26:d3:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:46 2025 by rpki-client