Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
File:                     ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json)
Hash identifier:          HbICEqGYeRIYQe8kABLWtjKCjtGwuH96mZ6UGx14SfQ=
Subject key identifier:   70:58:EE:6F:A2:93:38:5E:2C:91:BB:39:5B:01:83:07:C1:46:FF:90
Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
Certificate issuer:       /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Certificate serial:       01987DF7C0F92224F4D05678823D6684F096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
Manifest number:          0CFE
Signing time:             Wed 06 Aug 2025 06:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:45 +0000
Files and hashes:         1: RI4n8PF4rBIO32JAZiAFIMrum4w.roa (hash: 5SmITQJiZpZC1yYBE1LcmqDZ6YGT1Ir0nVy19fwLnlQ=)
                          2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: 6mahwjGryYbGDTmpBd4q09srZzJUWp0MvKI38cy49ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:c0:f9:22:24:f4:d0:56:78:82:3d:66:84:f0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
        Validity
            Not Before: Aug  6 06:00:45 2025 GMT
            Not After : Aug  7 06:00:45 2025 GMT
        Subject: CN=7058ee6fa293385e2c91bb395b018307c146ff90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:6d:2a:8d:d2:46:a8:f7:9b:d4:fe:eb:32:
                    05:21:e3:d0:3c:3d:7d:72:8b:db:41:a0:b1:d8:ab:
                    af:44:36:98:09:65:a4:09:6c:9e:13:22:8c:42:8d:
                    30:6a:56:89:13:4c:a5:f9:1d:c8:70:1e:9e:08:b7:
                    fc:b4:ab:dd:f7:77:b1:1b:e3:f4:f1:a2:8e:65:11:
                    99:a1:3b:35:f1:39:02:f6:e6:90:d3:ee:fb:17:91:
                    51:42:ea:b2:b7:50:e5:66:cf:c0:94:6d:bf:16:9e:
                    7a:6e:bc:79:ac:4c:16:1c:49:b2:fa:02:de:fa:4a:
                    53:7d:10:d9:1b:bd:a8:ff:93:03:68:9e:d2:b3:af:
                    fd:18:cc:27:64:cf:cc:56:05:80:a1:27:1d:b2:5c:
                    cb:61:53:63:a2:39:4d:df:9e:26:ff:69:09:de:84:
                    69:b6:d8:b6:7f:d0:24:d9:10:ab:c9:7b:56:cb:7a:
                    bd:fb:1f:9c:61:d4:a2:4c:7b:6c:4e:b8:3c:d6:4f:
                    cd:56:1e:75:35:4b:e6:f1:61:a4:83:ec:93:36:41:
                    ce:a0:0e:25:c6:d7:20:37:83:a9:2b:b6:ff:f2:08:
                    e0:f1:8a:46:f9:7b:a1:61:52:8a:fe:4e:52:46:14:
                    78:4d:7d:83:3d:b8:45:87:35:ac:63:1e:54:09:9e:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:58:EE:6F:A2:93:38:5E:2C:91:BB:39:5B:01:83:07:C1:46:FF:90
            X509v3 Authority Key Identifier:
                keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f0:cd:24:3b:43:8b:51:2a:ba:56:68:e1:0c:ee:c5:7e:b1:
         4a:7b:4a:43:a6:94:5f:07:8b:15:5e:27:f1:56:65:96:0d:bf:
         67:86:13:99:21:12:38:69:4f:33:46:9d:92:bf:64:5c:d6:58:
         bd:12:b7:43:cc:03:f1:11:02:04:36:7a:88:07:f4:0c:bd:f6:
         26:fc:c3:9c:0a:45:54:40:9b:5c:70:3c:6f:91:20:9c:db:cd:
         74:41:a7:55:11:2e:41:49:c5:c2:f2:4c:20:99:78:86:89:ab:
         ad:35:82:4d:b1:5c:eb:51:f6:95:aa:8f:eb:6e:23:96:23:8e:
         b3:d8:c3:41:98:07:3e:ab:ea:fd:70:f2:0d:e0:1a:1c:13:60:
         e6:d1:e3:ff:b3:8a:a4:30:89:2d:c6:7c:cc:41:42:a5:ba:58:
         36:28:83:fe:28:ca:7d:49:45:03:4a:5a:2c:06:e8:f4:11:9d:
         38:00:ef:60:23:37:8b:a9:55:92:23:9f:bc:cc:be:e9:06:92:
         32:8f:e6:62:ee:bb:32:48:11:1e:38:c1:79:e6:0c:71:9e:6c:
         99:c3:47:bd:cb:ce:b0:86:9b:44:09:b4:a9:ab:4c:3e:1a:4d:
         00:21:5f:a4:9e:51:ac:60:57:b0:2b:51:c4:5f:26:09:02:bd:
         26:69:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:57 2025 by rpki-client