Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          hS8daekNJF3oc2sutfvBZYQmeuUPnYRj9JChS1AkH0g=
Subject key identifier:   33:8C:4A:A5:56:96:0C:8C:A7:AE:5E:42:83:43:1E:44:2F:6A:A5:88
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       0198D51617F88598A2AE70924DC620F61D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          0EE1
Signing time:             Sat 23 Aug 2025 04:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:51 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: 0m0H2vbLHc7rspfQa6yWoIc5gMEiaqGBgoSI+NXrehg=)
                          2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:17:f8:85:98:a2:ae:70:92:4d:c6:20:f6:1d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Aug 23 04:00:51 2025 GMT
            Not After : Aug 24 04:00:51 2025 GMT
        Subject: CN=338c4aa556960c8ca7ae5e4283431e442f6aa588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:ed:fc:06:30:e3:82:17:73:04:44:86:6b:
                    86:e4:8e:b2:17:fc:9a:3c:96:52:cf:0f:94:c0:91:
                    d0:0d:a7:ac:4b:84:b1:d2:99:97:2e:b6:78:ab:58:
                    a6:b1:e5:49:70:d6:a3:bd:a7:bb:77:18:d8:8d:89:
                    2d:32:66:af:da:6d:bc:03:e6:77:98:26:c5:ff:94:
                    8a:40:71:20:18:52:69:fc:fa:50:36:85:3b:e0:7c:
                    10:95:a9:fa:eb:d5:b5:55:2d:22:81:b2:9d:93:b2:
                    c0:87:c1:fd:4a:13:65:2a:ea:cf:be:60:ec:bd:e2:
                    5a:10:aa:b4:73:f3:17:a8:8c:4e:66:c2:77:19:aa:
                    33:8d:1c:e7:82:3b:b3:33:b4:eb:e2:8e:a1:6b:6d:
                    1c:32:9c:78:72:9c:24:5d:7c:da:ab:b0:f4:8f:01:
                    63:65:36:17:c6:01:f3:8e:8b:2d:bd:2c:cd:7d:31:
                    d7:ae:89:66:0a:e1:e7:32:87:da:bf:36:8f:6a:34:
                    1b:ab:6b:8e:24:73:be:09:52:74:fb:63:86:66:f3:
                    f5:14:6e:9d:56:48:ee:c5:d3:c3:b2:ab:46:12:7a:
                    f7:67:01:86:07:a8:52:e3:0f:f1:a2:e3:7d:d8:6a:
                    af:48:10:6f:71:cc:43:15:3c:f0:75:18:d4:f3:41:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8C:4A:A5:56:96:0C:8C:A7:AE:5E:42:83:43:1E:44:2F:6A:A5:88
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:db:5e:71:f6:a2:31:57:92:8f:64:b1:2f:e6:ef:e0:e1:
         e3:e4:50:de:02:3a:c8:bc:25:12:0f:76:fd:a2:26:d9:d4:f9:
         9c:9e:a8:e3:68:40:9a:04:93:99:29:9f:7d:c3:7e:80:56:b2:
         69:85:9a:92:00:2c:99:9a:66:50:f8:d9:32:02:26:0f:c3:38:
         d1:2f:46:fc:d7:3f:b2:b0:29:3a:68:a1:07:c2:d4:13:f3:4f:
         80:e4:7b:e0:11:bc:06:d1:40:71:71:96:c5:f9:b6:02:78:a5:
         95:ba:a3:5a:5e:7d:8b:48:de:c5:3c:0a:83:ca:2c:2f:67:bd:
         90:68:6a:1f:81:17:11:ab:17:44:1b:67:71:33:01:ec:a9:43:
         fd:f3:51:54:c2:f9:a5:62:9e:c3:32:f7:8a:01:99:b7:98:bb:
         04:82:ea:11:e6:63:b0:e1:4b:f4:da:1a:a6:31:7c:43:62:49:
         b2:4c:ff:c2:55:00:db:4f:85:1a:4d:0b:eb:72:8e:e2:f4:2e:
         99:3c:79:4a:84:b2:84:48:b9:d3:0a:7a:97:16:27:40:e3:c8:
         16:b6:d1:3f:2b:e2:df:58:be:ea:bd:f6:7e:af:e4:1d:ae:55:
         11:88:bb:20:9a:c8:2e:b3:3d:5e:3a:2c:cc:ca:43:7d:90:7c:
         57:df:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:19 2025 by rpki-client