Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File:                     hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier:          8Liob+p5fRmzM44HvNfA6JOxzA0In++2aKasoqrPGDo=
Subject key identifier:   53:E2:38:A4:1A:EE:D2:79:01:31:70:3F:67:03:D8:01:0F:F6:17:82
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer:       /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial:       01987B9B5882ABEFE89C09EA08F23AC1FB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number:          0EEB
Signing time:             Tue 05 Aug 2025 19:00:34 +0000
Manifest this update:     Tue 05 Aug 2025 19:00:34 +0000
Manifest next update:     Wed 06 Aug 2025 19:00:34 +0000
Files and hashes:         1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: z2II4WePwZ58GJw4R9ZXTkQp0Orlp7NwyCxseku62e4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9b:58:82:ab:ef:e8:9c:09:ea:08:f2:3a:c1:fb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
        Validity
            Not Before: Aug  5 19:00:34 2025 GMT
            Not After : Aug  6 19:00:34 2025 GMT
        Subject: CN=53e238a41aeed2790131703f6703d8010ff61782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:32:ff:d9:37:0a:84:71:e5:4b:7c:0e:3d:
                    e2:4e:a3:86:de:b8:df:06:11:a9:1e:e5:9a:d3:f8:
                    36:43:9b:a0:ac:99:ae:bf:da:6c:4c:d3:d4:28:4c:
                    c9:76:25:77:40:98:97:ce:0a:75:aa:d3:b2:76:a5:
                    da:4e:41:57:7a:c7:a7:33:55:e4:53:58:43:c5:63:
                    e4:13:11:d6:4d:ae:2c:3f:6d:3c:07:ac:a0:c6:5c:
                    9f:92:e5:0b:04:6d:2d:12:10:da:6e:6b:f8:df:52:
                    94:11:3d:05:99:88:bb:f2:0d:e8:fc:e9:0f:18:15:
                    bd:81:77:d8:a7:d6:b2:76:18:88:76:91:41:00:47:
                    e9:1a:8b:95:99:a4:f7:01:6e:b8:37:4e:ad:28:cd:
                    27:89:b6:60:7d:64:3e:5f:24:74:7d:31:09:b0:74:
                    cb:01:3a:7e:eb:88:41:fe:72:8d:1a:f5:46:80:35:
                    2e:a5:28:2a:0b:15:83:f8:f5:2c:1a:74:6a:23:89:
                    c0:42:97:72:ae:37:fd:16:c8:5b:4a:b3:15:a7:f5:
                    db:72:6f:14:05:15:9d:ba:48:12:eb:11:3c:cc:d6:
                    63:89:7f:5b:da:db:0a:e6:fa:7f:a3:2e:d7:5d:b5:
                    11:2c:bd:42:41:ee:62:f0:97:5a:8d:fe:d2:fc:b3:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:38:A4:1A:EE:D2:79:01:31:70:3F:67:03:D8:01:0F:F6:17:82
            X509v3 Authority Key Identifier:
                keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:eb:02:41:3f:ae:13:1e:21:58:88:1c:bf:28:c7:fa:e4:3d:
         0e:ec:3f:d0:87:65:36:02:3c:ab:df:27:05:8b:89:ed:b0:03:
         f3:72:70:49:1d:f6:31:37:80:c4:24:ad:4e:87:f2:92:65:46:
         ff:ce:b9:b0:0a:fc:d7:91:1b:46:80:f1:a1:0f:8c:78:e6:eb:
         7f:f7:72:e9:d8:6c:7d:12:b4:5b:a4:d6:2d:0f:c1:69:3c:e7:
         14:ce:60:24:d4:40:79:6f:45:74:fc:f1:e3:87:ac:2e:90:85:
         38:1c:be:1e:d6:be:b8:1e:05:f5:fe:bd:68:cd:32:34:e0:1f:
         f0:08:9b:61:7a:df:52:83:01:73:fc:d1:f1:65:58:ed:44:0d:
         6c:5c:b6:c3:b7:89:d8:ee:2e:18:04:61:cf:00:89:8c:7f:f2:
         69:3b:86:02:e2:26:ef:db:ef:16:ec:8e:9d:c8:de:c3:78:61:
         bd:36:bd:b8:b5:cf:06:63:4e:4b:ac:28:a2:be:17:21:61:2b:
         a9:d0:4f:9e:0a:75:15:e5:2d:4f:c9:a9:c9:ce:ff:71:49:99:
         df:72:5a:27:81:c2:c5:cc:47:d2:11:bc:29:66:04:01:d9:d0:
         5a:23:71:32:a4:52:cb:80:eb:16:76:91:41:8b:41:39:2a:72:
         8e:5f:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:43 2025 by rpki-client