Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File:                     EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier:          1Ix0sRW4h+L04+o1Eld1HX+Efl6ZO3c1S6JdFjngBT0=
Subject key identifier:   7A:B0:6A:B3:C5:3A:12:26:BE:9A:F1:B5:5D:53:F2:DB:76:87:06:72
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer:       /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial:       0198D54EC6ADDD9AF0432B017973FAF69B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 05:02:46 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:46 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:46 +0000
Files and hashes:         1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=)
                          2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: f4iTcHL1g1aU5DhOvhbblr8Tqz9QSv1dhOGeDR4DNXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:c6:ad:dd:9a:f0:43:2b:01:79:73:fa:f6:9b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
        Validity
            Not Before: Aug 23 05:02:46 2025 GMT
            Not After : Aug 24 05:02:46 2025 GMT
        Subject: CN=7ab06ab3c53a1226be9af1b55d53f2db76870672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:5e:98:5b:78:58:eb:50:d2:0a:1b:0d:6d:
                    35:f1:f2:66:ab:ee:2d:ab:b4:57:50:db:df:38:eb:
                    f0:39:de:53:b3:8e:4f:2c:81:2c:1c:9d:e4:fd:83:
                    16:03:e3:6a:48:ff:5c:ac:dc:b8:b7:bb:ae:51:55:
                    c3:f4:d4:77:6e:87:30:8f:d9:31:c6:c4:5e:c4:38:
                    b1:d6:c5:7e:35:5a:7d:c9:b2:97:5e:97:24:6c:28:
                    7a:25:45:87:e8:4c:d3:26:17:21:c2:56:40:f3:87:
                    9e:0b:41:fd:24:de:f9:ab:c7:bf:35:57:b7:9c:60:
                    e1:86:05:95:d1:94:e4:3c:53:fb:90:d5:6d:be:fe:
                    bb:0f:80:00:3a:2e:6e:39:a6:aa:81:e7:e7:55:71:
                    6b:eb:81:27:07:8d:3a:4f:4f:b6:00:73:c3:5a:1c:
                    c4:88:c0:90:92:a3:9d:e4:4f:bf:98:71:28:b1:fe:
                    de:10:d4:92:c0:cf:64:3a:0b:d0:01:1f:de:90:12:
                    b4:a5:4f:18:12:90:79:9d:23:e2:ab:db:3d:15:97:
                    63:18:98:8d:26:c3:90:db:0c:81:cf:d1:14:15:6a:
                    1c:c7:13:5d:8f:ee:61:bd:de:76:f2:14:75:5a:1d:
                    1d:e8:f4:eb:75:ea:9a:45:9e:61:cc:18:4b:b9:0c:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B0:6A:B3:C5:3A:12:26:BE:9A:F1:B5:5D:53:F2:DB:76:87:06:72
            X509v3 Authority Key Identifier:
                keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:17:44:19:53:af:52:de:be:b2:46:de:dc:80:ed:39:91:
         be:df:42:18:5f:2e:b0:ed:56:f8:19:81:3d:3a:f8:65:cb:e1:
         f2:f5:ef:16:5e:6e:41:8c:09:b3:82:06:2d:66:d6:0d:91:21:
         ab:06:25:c4:a0:44:08:d3:c9:1c:0a:f4:89:71:3a:9d:1b:e4:
         d9:b0:52:00:49:44:d2:44:c6:72:05:09:48:eb:c0:64:67:4d:
         e9:90:4a:50:b8:73:5e:3a:c3:bb:88:18:66:4c:b8:63:9c:e8:
         f0:8b:94:cf:17:ea:da:97:f9:0a:33:65:6e:f6:4e:1b:a0:45:
         5b:3b:90:1d:eb:5f:7e:51:f0:09:ec:47:29:bf:83:29:dc:0f:
         bc:d6:67:fd:c1:60:ea:df:4c:ad:b3:9b:d3:19:55:c6:67:6c:
         52:98:c0:7f:bb:b7:af:82:3a:85:f3:22:8c:a8:62:9a:99:df:
         52:6d:c1:20:62:5e:85:81:41:b9:1f:87:41:68:ae:b5:ca:aa:
         ee:b0:71:9d:a5:ed:98:72:f0:1d:97:5c:ea:59:07:94:80:a0:
         be:06:8e:ea:50:7a:b3:48:d0:80:a6:7b:bc:73:aa:fd:9f:78:
         01:d9:d6:de:8f:65:8a:43:8a:be:b5:47:92:92:98:51:92:46:
         c0:07:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:42 2025 by rpki-client