Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          qJRtoHr2vrLzdlCApk0p2IZiCbYhZ9Cq1iyHaNe0CdY=
Subject key identifier:   E5:50:76:C3:43:C0:88:D7:91:DF:D8:0B:9E:24:DB:86:6C:DD:A5:8A
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       0198D65F9AFD94C33B75B7FF8309F45D17D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          02E9
Signing time:             Sat 23 Aug 2025 10:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:46 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: OMidTucvqNcj9lxzeCzjYKp8t/RfnORa2dteAnZ6fr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:9a:fd:94:c3:3b:75:b7:ff:83:09:f4:5d:17:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Aug 23 10:00:46 2025 GMT
            Not After : Aug 24 10:00:46 2025 GMT
        Subject: CN=e55076c343c088d791dfd80b9e24db866cdda58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:30:c3:4e:bf:3e:7b:e1:8a:11:7d:36:82:
                    25:b0:ca:8d:c9:fd:74:b1:57:9a:46:35:05:92:21:
                    1c:ea:eb:02:3b:0c:ca:f4:73:12:96:80:25:7f:0b:
                    70:6b:ac:3f:9f:e0:3c:3e:e7:b1:3c:d4:16:47:f7:
                    50:8e:c4:3b:18:5e:42:ad:6f:11:4b:c4:a8:ba:7c:
                    64:f3:0f:e1:f2:ef:8f:da:97:79:66:d5:e6:d7:77:
                    9e:ef:1b:03:dc:3d:21:c8:fc:f5:3c:c6:92:30:b2:
                    05:83:43:21:6c:11:aa:c4:d4:b7:93:96:d2:5d:94:
                    f5:03:95:f9:34:9f:39:c0:12:4d:5b:5b:7d:5e:0b:
                    0c:9b:ab:6c:59:48:31:6f:22:55:d9:04:2e:28:7f:
                    dd:66:b7:f8:55:ae:1b:17:08:3d:8f:1e:b2:bf:d0:
                    32:aa:3d:e7:c2:51:74:f7:eb:09:58:96:73:4e:a1:
                    6c:f0:c3:4f:08:dc:0e:7a:3c:ea:2e:7f:5a:e7:31:
                    54:20:cb:99:7d:09:d9:3d:84:f9:c6:1e:c2:be:47:
                    8c:23:13:2f:da:89:ad:10:fa:8f:f4:8d:e3:c2:0d:
                    4c:05:ec:02:de:5b:22:4c:59:37:b5:96:a4:4e:59:
                    94:8f:9c:24:39:99:0b:e7:13:86:b7:56:5b:13:08:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:50:76:C3:43:C0:88:D7:91:DF:D8:0B:9E:24:DB:86:6C:DD:A5:8A
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:66:97:a9:64:89:cf:ee:eb:d2:27:19:3c:b4:f8:29:ab:59:
         66:d0:2b:18:fa:24:b3:0b:4e:ef:f5:10:a5:58:4b:6d:1d:a9:
         51:f2:ba:e9:c5:20:4a:7a:34:fe:52:a4:a7:1f:4a:41:b5:aa:
         00:46:14:ef:dd:71:6f:77:e8:86:d8:42:51:0e:77:d5:f6:84:
         28:f0:c6:ea:ce:20:3f:92:93:61:1a:63:1b:b0:2b:4f:7a:87:
         71:93:4c:47:ac:89:c9:88:c0:ad:82:30:1c:f3:31:23:6f:5c:
         31:32:55:1e:9c:a2:03:50:e1:1e:89:92:f6:6e:ae:ad:2f:85:
         ac:36:88:8c:02:ce:25:2f:3e:e9:c5:4f:56:8a:f3:ce:ae:a3:
         a1:fc:88:31:7d:8d:78:2b:76:05:67:d8:23:5f:3c:3c:5a:8e:
         d6:eb:4c:b3:c6:68:c0:b8:0d:48:e1:ed:d9:53:8c:e8:9c:9d:
         fa:2e:63:9b:17:de:69:ee:77:2d:60:a9:1a:86:43:bb:d9:f1:
         b0:75:92:9a:29:60:a5:2e:01:22:86:19:6d:b4:39:df:54:0b:
         ef:64:bd:5d:ce:76:2a:47:c0:b0:4e:fa:b1:4f:4a:d8:b3:db:
         06:2f:88:55:7b:ab:b2:77:0e:e5:6f:23:90:5a:f1:02:55:3d:
         a8:56:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:26 2025 by rpki-client