Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File:                     e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier:          RIQPY0Z9ugB335GlO9xJT16hxb66OkqT+gD4HEcSgeI=
Subject key identifier:   C2:97:E8:B8:6A:3B:2B:12:54:DE:34:0D:EB:91:7C:F9:7D:DA:9D:1B
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer:       /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial:       019873E304BC47F1D1B682AC4939E72C293F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number:          05CE
Signing time:             Mon 04 Aug 2025 07:01:54 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:54 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:54 +0000
Files and hashes:         1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: Pk+7XvBfh5Rq5rZYVgC7NI8/R0UP/akkxfb4YM+7UTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:04:bc:47:f1:d1:b6:82:ac:49:39:e7:2c:29:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
        Validity
            Not Before: Aug  4 07:01:54 2025 GMT
            Not After : Aug  5 07:01:54 2025 GMT
        Subject: CN=c297e8b86a3b2b1254de340deb917cf97dda9d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:b0:7f:25:92:1e:32:a0:0c:b4:85:95:9e:
                    e0:b1:2e:6b:70:07:88:2f:7b:b6:9e:6f:3b:e6:e0:
                    71:ef:06:57:d6:84:14:d6:b3:7b:6d:90:b6:b3:52:
                    0e:a1:f6:c9:72:fe:88:11:f8:1b:57:fa:ed:60:37:
                    38:28:f2:35:bd:8b:3f:70:ed:d7:5f:0b:47:f8:fb:
                    b1:40:74:90:2a:7e:55:8f:2c:b3:a0:39:fe:c3:f4:
                    8e:31:f1:5c:eb:21:be:93:a0:44:f4:09:7a:b2:55:
                    1e:1a:cb:07:16:aa:25:29:59:84:e2:8d:19:7d:6d:
                    1e:ad:d0:b1:42:ca:88:9b:d7:86:b6:81:b3:06:ab:
                    4c:36:cd:e7:14:58:5b:b9:02:71:03:57:80:5f:3f:
                    6c:b0:ec:69:86:cf:da:9f:7e:80:21:ae:2a:99:b8:
                    97:ac:ed:7e:f0:8f:4b:08:70:18:d7:e1:7d:0b:95:
                    53:a9:7c:7c:5e:21:66:dc:50:f5:d9:ff:82:bd:17:
                    8f:9a:e5:f7:3a:6d:3b:4d:e2:dc:0b:df:4f:6d:24:
                    07:3f:aa:24:03:22:4d:23:73:3d:95:5e:fb:d8:22:
                    08:7a:4d:6a:56:13:5b:cf:96:74:a2:19:9c:71:c7:
                    0c:a9:96:31:db:10:2a:ce:8e:c9:cc:e8:17:95:0a:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:97:E8:B8:6A:3B:2B:12:54:DE:34:0D:EB:91:7C:F9:7D:DA:9D:1B
            X509v3 Authority Key Identifier:
                keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ec:85:42:8d:9a:28:6e:54:f9:6d:45:fd:7f:e0:d0:64:29:
         5d:96:da:87:03:76:d7:9f:62:35:da:7d:f3:25:84:8d:cd:fe:
         f4:e5:c1:da:bc:36:ed:eb:6a:92:d8:f2:92:d2:af:cf:14:13:
         3f:22:0a:53:83:4e:37:44:6e:40:73:74:e9:93:9a:09:3f:f8:
         18:c9:eb:8a:be:e7:57:be:16:b0:d2:9f:4a:51:65:8f:36:4c:
         0b:72:a1:0e:77:1b:9f:df:da:00:f2:d4:05:c7:6a:8e:d6:5a:
         6a:2e:f0:62:f3:4b:6a:9d:6d:38:ce:5b:67:36:3c:0b:60:2b:
         84:df:32:d9:73:35:a9:9d:1e:03:c2:0c:bd:81:93:3d:9d:b7:
         77:4a:21:94:9e:d3:0c:93:23:f2:52:04:cc:03:a9:61:dd:e2:
         49:9d:9d:96:b3:69:61:71:0c:b3:8a:ff:1a:39:af:87:b0:12:
         89:6a:d4:54:99:83:6a:99:6c:6b:39:ed:dc:fc:59:8b:09:ee:
         e7:e9:d1:ec:b0:40:a4:b1:86:25:1b:9d:9a:20:27:5f:c9:cf:
         b2:6b:88:c8:5a:35:3d:cb:63:b9:35:df:c8:84:5c:ef:a2:c8:
         1d:85:47:ae:f4:44:28:35:fa:cf:4a:d2:fd:9e:e8:a3:ce:ca:
         ea:0c:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:54 2025 by rpki-client