Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          LHKcD07fK+w2VfYMI79BlTPbDS7HOrAHrlrb0OAqtxQ=
Subject key identifier:   18:85:5F:C1:5E:48:E3:B4:00:83:C4:41:2C:D8:05:7C:EA:9F:7B:35
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       0198D5163381E9F06110278F1D9857C8D0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          11DF
Signing time:             Sat 23 Aug 2025 04:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:58 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:58 +0000
Files and hashes:         1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: woTZ8GE8QI5Aywa3ags9Hk9ru7CECuVtm8RtD2kJRz4=)
                          2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:33:81:e9:f0:61:10:27:8f:1d:98:57:c8:d0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: Aug 23 04:00:58 2025 GMT
            Not After : Aug 24 04:00:58 2025 GMT
        Subject: CN=18855fc15e48e3b40083c4412cd8057cea9f7b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:14:94:ef:48:6d:e1:46:15:93:21:49:e4:
                    22:5d:93:1e:e7:52:3e:e0:a0:b5:00:5e:8f:32:5d:
                    00:d9:8a:1e:0b:55:24:63:c4:ea:2b:cd:81:b1:b4:
                    fa:25:33:90:03:04:6a:82:0a:06:0f:c2:be:fd:a6:
                    8c:e0:74:ff:72:83:ad:57:cc:0d:56:ee:02:52:4c:
                    37:98:8a:ce:42:d5:12:42:37:8d:f2:ca:a4:67:4e:
                    32:99:c8:d0:c8:02:fd:a3:58:9b:fb:8a:3d:4e:1b:
                    67:ac:b1:e7:ed:5c:34:7b:7d:63:7a:55:a3:91:1f:
                    3a:56:42:18:94:d4:10:30:4d:c6:b4:b6:48:68:18:
                    0b:5d:d4:b0:4e:fc:23:e1:5c:c3:0e:84:96:79:aa:
                    41:96:5c:d2:22:6b:cc:7e:40:d0:e6:1f:8e:7c:07:
                    23:48:2f:83:21:c9:6b:85:9e:e4:1a:76:f5:1a:83:
                    d7:c5:12:f7:43:b0:15:1b:bc:b7:f3:ac:14:49:dd:
                    5d:e3:5c:17:69:3e:eb:a1:f1:c9:5f:6e:d8:b0:48:
                    e7:5c:aa:4f:7c:54:ae:b3:fa:13:29:63:d8:2d:7f:
                    59:4a:7e:1c:40:02:a4:b3:83:c7:ae:5e:09:8e:f8:
                    48:e5:3e:19:2f:34:4e:4f:7b:3d:b2:4e:5f:fd:28:
                    e8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:5F:C1:5E:48:E3:B4:00:83:C4:41:2C:D8:05:7C:EA:9F:7B:35
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:37:dd:fb:67:97:76:5e:f8:4e:f8:e8:d6:ce:0f:c9:85:
         1c:3f:e5:53:c8:ad:19:43:03:96:f1:8b:49:ef:ac:d9:09:df:
         88:89:67:4e:87:a5:a4:38:9a:24:5d:07:da:70:5c:bf:ff:cd:
         6d:64:0b:4b:52:fb:70:8f:09:8a:01:52:3d:31:d6:e4:69:12:
         fb:95:3d:ee:c7:ce:18:ba:39:0b:38:d2:42:76:cf:89:46:8a:
         52:ea:2f:0f:a8:de:f5:cc:91:07:80:7e:c6:de:15:dc:55:4b:
         8f:99:57:3e:52:d8:0e:30:31:ca:39:a5:ac:ff:67:f5:57:35:
         54:59:27:4d:1a:f9:17:4b:33:09:43:20:91:cd:f8:64:07:29:
         9f:77:70:8f:63:26:0d:0e:5e:8f:0b:55:be:28:9c:f4:bb:f9:
         3f:28:9d:9c:ad:da:23:06:37:f3:18:2f:31:d9:50:fe:b2:91:
         6e:41:b6:a4:b7:92:a6:a2:fd:f0:8b:ca:d2:1b:85:bf:f3:cb:
         08:b9:82:95:f8:42:a0:e2:17:52:08:e0:fe:42:f7:20:dd:34:
         4e:55:55:10:ee:89:c4:e8:bb:30:de:b8:a4:44:40:67:0f:12:
         bb:e8:e0:e6:3c:b0:65:21:36:da:91:90:9d:be:46:a6:e7:a1:
         04:0c:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:04 2025 by rpki-client