Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
File:                     5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json)
Hash identifier:          h8vmY1qWpsa30KlktQQuIsg4PBH8Y3s+L+9ftYaeeF0=
Subject key identifier:   E4:EE:67:23:FF:5B:B8:5D:6D:55:44:64:B7:02:86:CF:95:C5:7E:15
Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2
Certificate issuer:       /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
Certificate serial:       01988B7C66D8FECECBCAD6929EAFE4FB44A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
Manifest number:          08D9
Signing time:             Fri 08 Aug 2025 21:00:42 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:42 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:42 +0000
Files and hashes:         1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: FPI6Ej6meVyul33YyfY4TB7vbnhDDLvC3ujDeT5cnEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:66:d8:fe:ce:cb:ca:d6:92:9e:af:e4:fb:44:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2
        Validity
            Not Before: Aug  8 21:00:42 2025 GMT
            Not After : Aug  9 21:00:42 2025 GMT
        Subject: CN=e4ee6723ff5bb85d6d554464b70286cf95c57e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:24:07:ea:dc:71:7e:fd:88:27:5c:61:34:
                    92:56:24:a6:22:20:61:79:ff:b2:94:c6:75:e7:68:
                    77:3d:4b:20:a7:b2:3d:06:6b:d2:e4:57:79:07:57:
                    c4:02:0c:c7:e1:f7:12:ef:12:a3:87:96:23:03:9e:
                    eb:4e:f8:54:d6:56:b1:b0:65:d4:8b:73:46:b9:71:
                    ce:1b:74:a9:db:a9:f6:d5:bf:a3:dd:39:45:40:1a:
                    35:dd:ae:c2:ea:73:b2:db:4e:9c:44:89:27:e4:8f:
                    f4:1d:bd:97:4b:20:02:9c:61:f2:02:49:c5:90:90:
                    22:8c:ab:e1:94:69:0b:5e:49:3d:de:8c:3a:4c:70:
                    f6:6c:4e:c3:63:b9:17:dc:ed:14:3e:9b:91:af:b1:
                    25:61:a1:2c:c6:e5:76:74:07:bb:57:cf:5a:43:a9:
                    a8:b2:c4:be:19:a1:8c:1b:f7:a2:f2:cf:50:60:5a:
                    51:d0:7a:24:20:5b:a5:a4:e2:09:9b:4f:22:f0:e7:
                    f7:fb:82:09:f8:00:ec:0a:e5:49:ec:29:f2:c8:41:
                    cc:d2:c6:29:a4:52:a7:79:69:f3:c7:c3:d4:02:9a:
                    2c:9e:10:33:72:1a:f2:56:2d:c7:38:63:79:5e:16:
                    2f:5a:ca:4b:7e:67:c5:67:c1:03:8d:c5:64:9f:91:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:67:23:FF:5B:B8:5D:6D:55:44:64:B7:02:86:CF:95:C5:7E:15
            X509v3 Authority Key Identifier:
                keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:c1:77:3f:3d:8b:e1:b2:98:95:ca:9c:03:49:ba:ce:9f:
         ff:05:c9:cb:18:4f:fd:14:70:cd:61:fa:20:ef:6e:ac:25:fc:
         05:ee:4f:68:d7:24:b1:83:96:8f:21:a0:42:5d:8e:07:a5:40:
         30:12:5c:36:2d:5e:c2:7e:11:83:5f:db:a3:af:56:d6:e9:1d:
         e4:c9:31:14:39:e8:a6:52:6c:05:6c:19:b5:3f:e1:07:dd:a5:
         6b:84:07:80:3b:5d:ad:5f:39:5b:ce:8d:e7:77:e5:65:b6:5f:
         39:30:58:a6:86:81:81:d8:53:ad:c6:f3:20:52:79:11:95:4a:
         dc:35:89:05:6d:4c:05:e0:71:5e:73:9e:37:f5:8f:1b:ad:52:
         98:61:89:0d:39:3b:fc:4c:be:ec:a1:21:33:ee:c8:e2:5e:36:
         5c:11:29:77:f4:b4:a8:72:7c:a4:55:5e:8b:6a:ae:1a:cc:aa:
         df:e5:0b:1b:2f:05:50:b7:24:76:65:b1:a5:03:24:3c:18:b2:
         61:a9:7d:2c:11:65:4a:d7:84:8b:71:d2:bb:6e:8f:ab:6a:d2:
         c7:57:57:99:71:b4:50:b0:7a:44:0d:9d:75:80:0d:c4:ad:dc:
         21:df:3a:a0:b9:c7:8a:2c:87:15:05:40:20:71:94:5c:4b:8d:
         8a:ea:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:17 2025 by rpki-client