Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File:                     Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier:          2MJir97VeRllz9Q2A4cn/Zbb0eR1SSQrQhYOfd6X4gw=
Subject key identifier:   E5:42:B8:E4:81:FE:B1:17:34:A8:8E:44:65:44:06:E5:B0:76:98:6A
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer:       /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial:       019875D0365BBFC8F976054FA7E3BA72B476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number:          0426
Signing time:             Mon 04 Aug 2025 16:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:36 +0000
Files and hashes:         1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: yU7+wcaV6P0Y6yfFu0pmnjrClPFb9AMul9o94Tb7ymI=)
                          2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:36:5b:bf:c8:f9:76:05:4f:a7:e3:ba:72:b4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
        Validity
            Not Before: Aug  4 16:00:36 2025 GMT
            Not After : Aug  5 16:00:36 2025 GMT
        Subject: CN=e542b8e481feb11734a88e44654406e5b076986a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:4e:ce:e1:61:91:af:29:c4:1b:84:d7:28:
                    62:99:e3:0e:33:9e:1a:8e:e8:df:c3:34:71:04:95:
                    78:16:e0:34:04:0e:d5:ec:fc:17:fd:6a:32:bf:18:
                    82:d1:a2:ed:b9:9b:b1:fa:dc:a5:16:43:1f:cc:67:
                    6e:4d:17:bb:19:eb:ea:eb:e5:09:6b:97:9d:43:e8:
                    58:4c:15:5b:a3:c3:01:8b:f8:fa:54:ac:a4:68:bd:
                    b1:3e:76:db:5d:41:b3:bd:5f:78:17:b3:91:54:c0:
                    cf:7d:82:a0:67:3c:ed:f5:b4:42:b4:30:06:f0:d4:
                    02:e7:34:2b:50:d0:be:10:33:fb:4f:5e:3a:c6:17:
                    92:83:94:10:e7:76:f5:48:65:a0:3c:f6:f1:23:55:
                    cf:ed:e4:78:76:b0:68:ca:6c:78:3b:68:68:40:af:
                    9d:27:fd:27:54:04:11:ba:4c:e0:98:05:e7:2a:e6:
                    e2:75:de:c5:e9:40:ef:f6:96:fc:d6:fa:b2:87:9f:
                    91:87:84:11:55:70:e5:f0:f5:e1:8d:74:1d:fc:26:
                    bb:bb:a2:9e:74:e5:85:85:47:8e:0b:a2:59:84:16:
                    c3:9f:ac:56:2e:3a:d9:fa:bf:5a:a1:60:c0:5c:22:
                    2b:b0:d5:74:82:f5:01:e0:c1:93:3b:8d:fd:c8:a8:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:42:B8:E4:81:FE:B1:17:34:A8:8E:44:65:44:06:E5:B0:76:98:6A
            X509v3 Authority Key Identifier:
                keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:26:da:4b:3a:e5:64:03:77:37:87:07:cb:b6:8d:7f:cf:90:
         57:52:5b:66:5d:59:1a:64:3c:ad:c1:a4:e5:60:62:42:30:eb:
         9a:f5:9e:2c:7b:2f:b7:30:fe:6b:0a:79:6f:6f:6c:77:76:8e:
         b7:5c:3e:b3:26:9c:5d:cd:4d:0f:53:5a:da:20:ee:53:6a:aa:
         cd:5c:5b:0c:ce:eb:39:17:05:fe:bf:22:0b:88:c3:ff:76:30:
         13:90:5d:27:b5:45:bc:ee:48:5f:9a:25:5a:81:20:7a:f1:f1:
         9d:33:0a:6a:6b:a9:41:7f:ef:3b:57:6f:24:49:55:33:b7:a2:
         87:23:fe:57:f5:09:3f:1b:69:9b:0c:2c:f6:7a:5b:9f:9d:26:
         ea:74:cb:a6:9a:b2:f9:c8:c2:8f:89:72:a0:45:13:f9:58:8e:
         ab:64:ae:08:d8:80:bf:23:54:2b:6d:aa:51:eb:44:47:86:dc:
         9d:c5:74:0b:29:44:57:58:7e:0f:a1:cf:34:bf:ac:06:a4:94:
         62:aa:73:50:14:9b:25:13:45:30:1f:bc:f3:83:7f:7f:14:be:
         c5:36:fe:6e:70:30:7c:d0:1f:2e:ab:57:e8:ce:7c:5a:89:9c:
         51:24:da:d8:dc:0d:13:bb:79:e4:6f:b9:4c:2e:ae:d7:31:ef:
         8e:84:c9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:22 2025 by rpki-client