Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File:                     E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier:          4hJtUgllviuwLKoCIalax/jT+0gt2/s7wd/oXgnUrWc=
Subject key identifier:   6B:B9:43:17:8B:DE:33:36:3F:3C:30:EF:1E:C6:8C:1A:75:3B:34:54
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer:       /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial:       0198D5836ECD77B448F214F399FCA189C24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number:          0239
Signing time:             Sat 23 Aug 2025 06:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:17 +0000
Files and hashes:         1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
                          2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: gdczsFxpCw1W8u2srlw4/Ek4LlzuWbsBB7Zh+fhTwog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:6e:cd:77:b4:48:f2:14:f3:99:fc:a1:89:c2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
        Validity
            Not Before: Aug 23 06:00:17 2025 GMT
            Not After : Aug 24 06:00:17 2025 GMT
        Subject: CN=6bb943178bde33363f3c30ef1ec68c1a753b3454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:1e:c3:c2:5b:db:07:73:84:5b:33:2b:0d:
                    01:ae:d4:23:f2:b1:95:70:be:f2:7b:40:b4:b9:25:
                    14:cb:a5:8e:f1:c4:5a:a2:8b:9b:95:70:cb:d2:a2:
                    19:b6:aa:f0:83:93:50:1a:bb:d3:aa:5b:bd:84:53:
                    fc:5a:fe:75:5e:71:fe:5f:81:4d:4d:35:a2:3c:c0:
                    c4:e7:17:33:d0:72:b8:26:6d:d7:1f:22:0c:0a:7d:
                    ff:74:5f:1a:58:ce:f6:64:5b:0d:fa:ab:4e:9f:87:
                    f3:8b:d0:83:25:4b:7f:70:2a:89:70:4b:1d:d6:84:
                    83:d5:72:eb:5d:cc:de:e6:4f:c4:2a:42:cf:32:e5:
                    08:3d:c2:9f:b8:c6:50:ed:fa:d7:87:8d:1d:92:20:
                    78:82:a6:6a:86:e9:9d:a3:b6:ab:11:64:af:95:e0:
                    c9:09:f4:1f:fc:ff:50:ff:01:d1:85:6c:07:e1:9c:
                    0f:54:24:b3:d5:7a:40:00:b0:96:a7:a2:62:14:84:
                    2d:ff:d2:a8:8f:20:f0:4b:05:d8:56:47:4c:95:81:
                    b3:91:bf:7c:c8:e2:51:ff:91:6e:63:53:0e:d2:39:
                    92:84:99:8d:f7:f8:36:6d:ef:1c:42:cc:fa:3a:34:
                    56:50:14:20:97:8e:da:b9:55:44:72:c0:94:ef:bf:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B9:43:17:8B:DE:33:36:3F:3C:30:EF:1E:C6:8C:1A:75:3B:34:54
            X509v3 Authority Key Identifier:
                keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:1b:59:0f:d1:bb:db:c0:44:6b:1a:5c:68:ec:07:1d:4b:
         48:b1:75:21:74:3d:a4:60:23:66:56:10:4e:d2:9d:a0:65:22:
         49:90:c5:a2:eb:b8:a5:65:c2:cf:75:13:d4:78:7d:0d:e7:a8:
         17:37:cf:a4:17:7e:b8:3a:ef:83:d2:76:1b:e1:e0:a5:5c:d7:
         f2:09:1f:05:e7:78:96:53:a0:18:33:34:a2:98:23:ec:c3:aa:
         24:79:f7:85:0b:86:cf:24:ca:3a:44:d0:58:13:0d:2c:a0:ab:
         58:da:c2:78:2d:8a:c2:13:e5:6c:4c:74:f0:94:63:09:fe:59:
         5e:67:47:f1:34:ab:44:4c:49:ef:08:b3:81:5a:48:db:ab:45:
         63:86:ea:06:15:58:12:ca:68:56:85:b4:3d:be:bc:96:11:00:
         13:0f:58:e5:8e:d4:8b:58:21:31:ca:ad:d6:d7:b7:09:b9:4e:
         81:97:23:0c:33:92:32:2c:69:1b:2d:81:d8:55:ce:58:fc:2e:
         c2:f9:f8:1b:a2:af:7d:2a:29:54:d9:40:c6:e1:4e:3e:e2:bc:
         91:bf:a1:14:34:0a:da:ca:94:ab:d4:c6:99:8c:cd:ac:e1:79:
         d8:cc:07:0d:0a:ef:c5:7a:9b:1c:27:7d:a9:ed:e0:ac:a8:d7:
         4d:43:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:05 2025 by rpki-client