Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          0LJijagDXb+M3ddtaRtUKU1EgZMaVCoNkB8tbg+BOHo=
Subject key identifier:   51:FE:3F:0D:E0:CB:98:4A:15:19:73:AF:24:C6:E4:55:00:F1:26:3D
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       01988EEC9442548A4224490EFAF172BD7908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          0742
Signing time:             Sat 09 Aug 2025 13:02:05 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:05 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:05 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: xvuChlVjwtdZ/QBU8UnDeJJcNPEWOo8vkwJYbZHOY+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:94:42:54:8a:42:24:49:0e:fa:f1:72:bd:79:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Aug  9 13:02:05 2025 GMT
            Not After : Aug 10 13:02:05 2025 GMT
        Subject: CN=51fe3f0de0cb984a151973af24c6e45500f1263d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:6d:7a:53:a6:cf:a0:f9:4a:4a:43:de:7c:
                    7d:68:6d:da:2c:01:72:7a:16:50:05:dd:14:91:29:
                    af:b7:dd:71:93:3a:55:d2:a1:8c:1f:c1:bd:c2:22:
                    69:09:2a:95:0e:24:d5:ba:ff:c4:c5:b6:bf:cd:bb:
                    d8:b5:f4:c7:d3:35:13:6b:70:c7:6e:08:f4:74:3e:
                    62:d5:2e:8a:3d:ef:c6:4c:ce:01:e5:5a:50:dc:dc:
                    37:4d:42:88:17:5c:41:9f:39:58:05:d5:a5:ef:a6:
                    b3:0a:dd:47:57:64:c8:d4:0e:e1:09:18:28:e8:86:
                    81:19:d3:15:98:85:17:82:cf:a0:97:4a:c8:af:b6:
                    72:10:ac:81:85:cf:97:8e:d4:12:5e:13:bf:d7:4e:
                    9c:e4:1b:1d:d7:4e:3a:37:fa:f6:b3:36:97:e6:01:
                    ce:c3:d2:ba:9b:c3:c3:19:2b:27:eb:d8:62:b9:21:
                    1c:f3:ab:f7:f9:1f:aa:0d:c1:b2:aa:77:78:1e:49:
                    61:73:a3:7c:70:92:d5:7a:93:23:ca:aa:24:d0:85:
                    12:ea:af:0d:10:85:12:9c:c5:d6:9d:8e:c0:d9:07:
                    0f:a7:cc:ad:69:fc:c6:f3:a6:d0:50:a6:c5:66:19:
                    c4:b7:90:3f:ce:78:e5:31:7a:18:6e:50:4e:b0:d5:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:3F:0D:E0:CB:98:4A:15:19:73:AF:24:C6:E4:55:00:F1:26:3D
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:e1:db:ff:1c:ad:69:60:a5:01:d9:d0:94:d6:1d:75:f5:
         7b:9c:bf:a7:83:38:00:18:72:ec:56:96:09:9e:fd:c2:20:cc:
         50:2d:fd:51:f1:d0:00:a4:b5:17:26:f2:1a:43:51:d5:77:bd:
         91:77:89:08:9e:1a:06:5a:af:90:55:46:e2:f6:3a:e8:25:52:
         c4:2c:0b:3a:1f:05:3f:a7:d5:44:77:11:ed:ed:a2:01:42:e1:
         fe:2f:49:a8:52:fd:48:fb:5a:a0:46:62:03:1a:6d:0b:e2:1e:
         e5:e8:07:1f:69:f6:9e:ae:ad:93:8e:28:d3:8d:72:7f:6f:e8:
         41:6d:62:15:c3:e1:5c:7b:9e:2e:3a:40:51:89:0c:df:70:c4:
         a4:02:87:e3:90:8e:a0:09:da:0f:fe:c9:37:32:83:e2:ea:2b:
         8d:b1:47:0f:37:77:3d:33:34:eb:8a:5c:f7:81:e7:aa:55:31:
         3d:91:af:95:17:1e:7f:71:7d:53:b8:70:f5:e7:47:51:e5:22:
         77:0f:7e:96:be:a6:21:df:c5:b0:3f:91:be:91:04:d4:96:ab:
         37:43:b5:92:c7:6e:35:7b:ac:13:b7:23:39:eb:5c:fe:3c:74:
         3e:e5:55:70:9d:09:ef:ca:ef:f4:17:16:7e:f0:8d:5d:a2:77:
         7f:31:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:19 2025 by rpki-client