Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          wRCnkl/cPNalyrEr7lZAoMFZyREnDmlPaNdql0tPxAc=
Subject key identifier:   B5:B5:DC:AD:44:62:66:D3:AF:CE:66:AA:21:DC:4B:D2:59:D4:F7:65
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       019874501E126FD6D1961622C2DD993E8DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 09:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:04 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: Xm3SdN/Th79rPu+NRJenIFCcMiL91u6cE7mwRdL1bUM=)
                          2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:1e:12:6f:d6:d1:96:16:22:c2:dd:99:3e:8d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: Aug  4 09:01:04 2025 GMT
            Not After : Aug  5 09:01:04 2025 GMT
        Subject: CN=b5b5dcad446266d3afce66aa21dc4bd259d4f765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:65:7d:28:21:fb:c4:7e:2c:7e:47:6a:2b:
                    fc:a0:7b:c6:25:a4:4d:97:5f:46:e1:6c:de:55:0a:
                    8f:66:01:07:e0:5a:dd:97:60:64:4f:cb:9e:e3:fa:
                    95:76:e1:24:31:36:76:b0:bb:b7:75:5b:fb:01:8d:
                    d4:89:54:fd:d6:97:cb:df:10:a5:32:b4:f1:bb:25:
                    6f:01:e5:d8:97:f5:07:75:78:60:51:51:b6:96:5a:
                    cf:85:75:ca:29:bf:e2:c0:37:82:7c:84:e1:88:ec:
                    79:9a:93:12:c8:d9:c0:5d:77:4d:31:4a:a9:e6:bc:
                    5d:50:2e:70:d2:e8:57:75:70:41:fc:b0:85:45:56:
                    25:6a:7d:a0:8f:13:e8:d2:19:10:2e:ee:4a:4f:64:
                    e6:53:74:ea:36:e9:4b:12:b1:b7:56:53:a2:74:e9:
                    ce:a3:2e:10:98:42:01:6c:75:f3:1f:4b:9f:93:cb:
                    82:e1:83:31:15:21:87:a0:1e:ff:f9:99:ca:e0:5d:
                    01:85:63:ba:cf:c1:35:a7:61:27:11:de:8a:47:44:
                    6e:7b:3e:77:35:e3:07:a4:bc:fe:0f:99:70:38:d0:
                    d0:6a:34:15:d7:d1:a3:aa:a8:34:8b:a0:33:fe:56:
                    84:49:fb:65:ad:3a:a3:c2:a3:8f:94:a2:59:c8:ba:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:DC:AD:44:62:66:D3:AF:CE:66:AA:21:DC:4B:D2:59:D4:F7:65
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:51:a0:a8:f3:ba:02:01:fe:e7:23:40:42:59:63:e3:e7:61:
         df:1b:5e:28:42:fc:c4:e2:a4:67:1f:e9:6f:86:55:d3:86:ad:
         c9:2f:b6:3c:64:22:fb:45:4d:84:02:44:30:f3:4d:83:46:37:
         3b:04:54:89:cc:50:a9:f6:9d:74:02:fd:58:5e:da:dd:2f:64:
         09:c7:0e:9d:e0:ce:f9:77:aa:8a:f8:47:74:12:45:c8:dc:27:
         4c:90:8a:a2:7a:2f:62:42:b5:94:92:1a:83:cb:41:46:c5:d0:
         3d:a8:88:7a:ee:b5:03:af:f2:64:b3:df:0e:6b:3c:e9:f4:a4:
         d6:c8:42:04:b2:25:cf:ea:ea:9b:34:e8:e3:81:d3:b0:f8:01:
         26:b6:5f:74:f2:ee:f7:5c:84:5f:70:2a:04:84:4f:75:68:40:
         9c:1a:01:61:90:30:1f:8e:12:79:c4:55:d3:80:f9:0c:78:a1:
         de:19:db:23:55:ed:5e:82:70:e5:93:54:ad:26:d9:38:f7:fc:
         48:94:0d:4a:9b:ec:b0:3f:0d:e9:a1:e9:6a:84:b9:53:9d:d1:
         70:4c:5c:7f:4c:34:6e:ff:9e:1c:72:2c:cb:94:99:03:54:4d:
         1c:38:ee:7b:f5:83:6f:d4:6e:5d:cb:37:f6:94:87:ad:e0:b7:
         69:b2:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:04 2025 by rpki-client