Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
File:                     69xd5v5ftQVVoFyXxbDdR369C_U.mft (raw, json)
Hash identifier:          JbWfWugVBBGR83FNx6UL7qrXoaw9y4AAXQ9PlXqL5Lk=
Subject key identifier:   F4:ED:88:9F:07:A1:BD:2F:BB:1B:6D:29:CE:F4:A4:AE:47:77:D4:9D
Authority key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Certificate issuer:       /CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Certificate serial:       019896A4F9147735CD13584E59F6C0404926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
Manifest number:          1624
Signing time:             Mon 11 Aug 2025 01:00:50 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:50 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:50 +0000
Files and hashes:         1: 69xd5v5ftQVVoFyXxbDdR369C_U.crl (hash: Kk8KtOwuC8zgBd0kwMHPwg8ATkO6EIOsi3GZA8jn1iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a4:f9:14:77:35:cd:13:58:4e:59:f6:c0:40:49:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
        Validity
            Not Before: Aug 11 01:00:50 2025 GMT
            Not After : Aug 12 01:00:50 2025 GMT
        Subject: CN=f4ed889f07a1bd2fbb1b6d29cef4a4ae4777d49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:4d:8f:38:5a:11:f6:98:db:46:0a:76:e1:
                    02:f2:6c:5a:47:7c:87:1e:8d:0e:91:bd:c0:80:ab:
                    7f:84:de:d1:78:11:e4:fb:30:3d:87:72:a9:9a:c7:
                    10:19:a7:1e:60:da:31:1e:aa:8b:19:5c:a1:27:4c:
                    c3:33:3c:72:49:96:e3:14:60:20:e9:1f:27:c7:75:
                    ac:f5:9d:5d:97:b5:2c:0c:39:07:a3:94:f9:79:da:
                    a7:9b:58:4a:6a:ba:f9:e4:60:0f:e0:2e:cd:47:d4:
                    2f:4e:71:5a:45:87:44:a5:9a:85:1a:42:d0:93:51:
                    03:02:d8:dd:41:ca:0a:46:c2:de:7e:ab:5f:c1:15:
                    6a:2d:ec:df:ce:86:95:1a:bf:e5:02:33:b4:12:12:
                    3c:50:20:9c:f4:c6:5b:84:b1:40:54:dc:0b:a8:84:
                    d5:b6:07:e5:b5:6d:fa:93:9c:43:b0:ab:31:ec:61:
                    1d:2a:b9:42:c7:49:a8:4c:fd:fc:72:11:3c:16:f0:
                    1e:0e:e2:f5:57:c1:74:5a:a6:ad:38:23:99:19:b8:
                    05:34:3c:df:a3:6e:b8:49:32:02:be:91:a0:ec:81:
                    1e:df:f4:5c:f5:03:41:6e:a3:ba:fe:0e:d7:05:2e:
                    2c:18:ff:d5:7c:11:55:9c:f1:65:0b:af:e9:0b:cf:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:88:9F:07:A1:BD:2F:BB:1B:6D:29:CE:F4:A4:AE:47:77:D4:9D
            X509v3 Authority Key Identifier:
                keyid:EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bf:78:10:8d:af:d3:5d:fb:51:c3:f0:15:5a:67:48:2d:25:
         ec:01:c3:27:0d:2a:4f:e3:e8:46:59:26:dd:f8:be:b1:70:a0:
         99:ed:cd:1d:af:ef:34:9c:2b:6b:54:21:4b:a4:49:32:f6:35:
         c9:c1:38:cb:be:31:69:ad:d3:b8:bd:9c:fd:70:ae:e9:db:2d:
         89:b0:f2:01:16:a5:53:d4:b2:e2:a5:7a:aa:ad:7f:14:96:44:
         2a:7e:b8:ae:39:eb:8a:2f:8a:e3:60:f0:b7:fd:b5:7a:36:d0:
         df:74:d5:f6:30:1f:50:4e:63:27:d9:0d:dd:9f:48:34:02:32:
         f7:e2:29:fc:c2:56:cc:40:6b:3c:f9:bf:95:dd:b7:46:60:df:
         83:78:7f:b0:3b:2d:35:af:90:8a:00:57:0d:4a:e6:8c:b7:82:
         d4:34:fc:e0:3f:0e:f9:a7:b3:17:60:2e:95:61:f3:b9:00:f4:
         e5:51:f6:cb:dc:21:8a:f1:e7:e6:c0:6d:68:5a:c0:25:2f:46:
         26:67:6d:92:ab:35:75:74:a4:7c:18:7b:b4:ba:60:66:7c:98:
         4d:ca:43:f9:38:aa:65:2f:d3:d8:01:0f:db:31:1d:db:4e:5c:
         94:99:9f:42:06:8f:14:5e:89:4b:92:52:fb:79:da:73:19:aa:
         36:c2:0e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpPkUdzXNE1hOWfbAQEkmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZGM1ZGU2ZmU1ZmI1MDU1NWEwNWM5N2M1YjBkZDQ3N2Vi
ZDBiZjUwHhcNMjUwODExMDEwMDUwWhcNMjUwODEyMDEwMDUwWjAzMTEwLwYDVQQD
EyhmNGVkODg5ZjA3YTFiZDJmYmIxYjZkMjljZWY0YTRhZTQ3NzdkNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDhNjzhaEfaY20YKduEC8mxaR3yH
Ho0Okb3AgKt/hN7ReBHk+zA9h3KpmscQGaceYNoxHqqLGVyhJ0zDMzxySZbjFGAg
6R8nx3Ws9Z1dl7UsDDkHo5T5edqnm1hKarr55GAP4C7NR9QvTnFaRYdEpZqFGkLQ
k1EDAtjdQcoKRsLefqtfwRVqLezfzoaVGr/lAjO0EhI8UCCc9MZbhLFAVNwLqITV
tgfltW36k5xDsKsx7GEdKrlCx0moTP38chE8FvAeDuL1V8F0WqatOCOZGbgFNDzf
o264STICvpGg7IEe3/Rc9QNBbqO6/g7XBS4sGP/VfBFVnPFlC6/pC885IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTtiJ8Hob0vuxttKc70pK5Hd9SdMB8GA1UdIwQY
MBaAFOvcXeb+X7UFVaBcl8Ww3Ud+vQv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjl4ZDV2NWZ0UVZWb0Z5WHhiRGRSMzY5Q19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGE2NjgtZmJkNi00NTUzLWFlOWYt
MGJiYjIzODFiYTg4LzEvNjl4ZDV2NWZ0UVZWb0Z5WHhiRGRSMzY5Q19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGE2NjgtZmJkNi00NTUzLWFlOWYtMGJiYjIzODFiYTg4
LzEvNjl4ZDV2NWZ0UVZWb0Z5WHhiRGRSMzY5Q19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr94EI2v
0137UcPwFVpnSC0l7AHDJw0qT+PoRlkm3fi+sXCgme3NHa/vNJwra1QhS6RJMvY1
ycE4y74xaa3TuL2c/XCu6dstibDyARalU9Sy4qV6qq1/FJZEKn64rjnrii+K42Dw
t/21ejbQ33TV9jAfUE5jJ9kN3Z9INAIy9+Ip/MJWzEBrPPm/ld23RmDfg3h/sDst
Na+QigBXDUrmjLeC1DT84D8O+aezF2AulWHzuQD05VH2y9whivHn5sBtaFrAJS9G
Jmdtkqs1dXSkfBh7tLpgZnyYTcpD+TiqZS/T2AEP2zEd205clJmfQgaPFF6JS5JS
+3nacxmqNsIOVw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:27 2025 by rpki-client