Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
File:                     eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json)
Hash identifier:          2cqBe9fc+Zv7rDapfGLvprkshOzHGIwvLPK9Zp2HyBE=
Subject key identifier:   24:4A:AF:DE:46:78:4C:E1:47:8A:86:87:24:0C:81:5C:13:F2:B6:2A
Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Certificate issuer:       /CN=7b243b732e564690482cc825199f8b591b01f6f2
Certificate serial:       0198D4734260D40D34CB9EDA427E0D6FA2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
Manifest number:          11EC
Signing time:             Sat 23 Aug 2025 01:02:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:59 +0000
Files and hashes:         1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: gEDglEoqz40+QpafQHG2ecmpsSGtuthlzVRw2ajSjkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:42:60:d4:0d:34:cb:9e:da:42:7e:0d:6f:a2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2
        Validity
            Not Before: Aug 23 01:02:59 2025 GMT
            Not After : Aug 24 01:02:59 2025 GMT
        Subject: CN=244aafde46784ce1478a8687240c815c13f2b62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:f3:b0:3a:ee:8d:b3:90:b4:aa:95:9c:0c:
                    3b:92:10:3a:7c:dc:78:05:1d:48:4e:9b:5b:33:37:
                    f7:ac:e6:54:e2:64:77:87:24:f8:d9:d8:4b:2b:e2:
                    16:79:ba:ec:96:3c:9b:5d:6a:a1:d0:e6:45:79:21:
                    52:c7:0e:e4:1a:4e:cc:bf:00:02:e7:96:dd:a2:60:
                    19:5c:1d:ac:08:46:d0:3d:49:5c:80:ed:19:d4:5d:
                    e0:fd:ef:41:b3:7d:30:c4:e7:92:cf:59:7e:a4:cd:
                    af:3e:20:7a:52:6f:76:38:d0:bd:9f:20:30:ff:43:
                    97:82:02:09:8a:81:49:1a:6d:02:c6:90:fb:9b:06:
                    f5:3e:d2:6c:db:86:f5:b3:47:f4:f9:c1:7e:6f:69:
                    63:ca:a3:c5:0c:42:06:71:ac:a4:52:88:45:e7:a6:
                    0d:0a:6f:ca:46:74:8d:9b:af:3b:50:c8:fb:43:48:
                    5b:1f:17:3f:16:ac:b8:67:69:87:68:5b:95:56:22:
                    35:1e:e6:79:d6:d0:72:50:d3:ae:59:02:a4:d9:aa:
                    ce:fa:df:e3:c9:6e:0f:ca:fd:bb:b9:cd:42:93:64:
                    57:a8:3f:55:cc:c3:3a:44:32:cc:d1:5b:99:c8:2f:
                    cb:48:be:f5:4b:0c:64:c1:af:54:12:19:cb:aa:5c:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4A:AF:DE:46:78:4C:E1:47:8A:86:87:24:0C:81:5C:13:F2:B6:2A
            X509v3 Authority Key Identifier:
                keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:ce:68:da:49:0e:29:2b:a1:c9:1c:74:4d:0a:78:ef:62:
         c1:4c:8f:6c:51:bb:f4:16:40:75:31:36:95:49:78:d6:58:0f:
         b7:c5:24:a3:c8:c1:fa:15:28:58:07:2b:28:2f:41:44:d8:c5:
         5f:31:80:60:d9:5e:3f:99:be:89:10:21:f2:06:3d:7b:f7:c0:
         b1:7b:9b:3d:bd:0a:ea:fb:ea:17:45:69:f8:fc:44:c9:77:6b:
         c6:ff:5d:ff:49:26:80:c1:fd:fd:c7:16:8d:bc:34:fd:4d:da:
         95:82:9a:c6:2c:39:89:fc:27:c1:b8:94:2b:b9:40:2c:f7:19:
         9f:1d:a9:c2:7d:29:1b:29:28:6b:a7:7e:1b:5c:d4:3f:5f:79:
         70:18:46:d9:63:9b:8d:b6:89:bd:11:ea:c8:32:96:6e:ba:24:
         06:ae:d6:28:9f:01:09:8d:a4:66:be:ac:fb:48:f6:94:93:14:
         af:cd:db:e0:60:ed:19:97:a3:23:07:63:28:08:0f:8c:21:97:
         d4:dc:0b:33:3f:56:4d:90:18:a8:fe:80:c5:58:a6:b6:dd:3d:
         c1:d2:07:99:55:c7:01:69:c0:75:c1:8d:58:1f:d8:c2:3e:46:
         68:7a:1f:cc:75:f9:2b:09:fb:e2:00:ea:d4:73:1c:48:39:a6:
         25:bd:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:50 2025 by rpki-client