Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File:                     EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier:          GsHykPw9fwAf3krTqS/pbtyGo3bd4AoSrCez1tihdmQ=
Subject key identifier:   6B:BC:51:87:6A:23:CE:4E:41:23:D3:F5:81:20:A2:5C:74:92:C1:FA
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer:       /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial:       0198D4E0149E8C185335E8285B6494FC0693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 03:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:51 +0000
Files and hashes:         1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: g4J7rgrPpKRiH8Kxv5kxV/u1WsVmGDpuuA86DpcurYo=)
                          2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:14:9e:8c:18:53:35:e8:28:5b:64:94:fc:06:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
        Validity
            Not Before: Aug 23 03:01:51 2025 GMT
            Not After : Aug 24 03:01:51 2025 GMT
        Subject: CN=6bbc51876a23ce4e4123d3f58120a25c7492c1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:2b:43:38:dc:c0:96:7a:a2:17:b5:42:dd:
                    e5:80:8d:a7:19:f4:b6:41:5e:ef:89:9f:cf:44:a2:
                    d1:8e:50:be:ce:f3:55:14:cd:01:07:65:1e:3f:bd:
                    b6:0e:36:9f:82:a1:c4:d2:cf:0a:1c:ae:9b:9b:1a:
                    dc:b0:91:b3:8d:45:e2:87:03:4f:c2:84:5e:f3:64:
                    ed:07:9b:6e:15:da:28:96:12:ac:0a:a7:87:e3:c1:
                    ba:06:b5:51:b4:00:62:56:de:fc:0b:b9:94:22:35:
                    e5:27:c4:f8:e8:58:25:bc:06:3f:27:ac:5b:6d:e6:
                    bb:82:bf:a9:b9:33:4e:6d:a4:5e:a4:b4:13:e9:5f:
                    8e:e7:eb:eb:c9:e1:36:3a:a2:1c:4a:14:9d:87:5e:
                    54:8d:d2:66:b6:31:96:f7:5d:1a:77:43:17:e0:55:
                    d3:83:02:c6:47:41:7c:6f:a1:0e:98:18:e7:9c:29:
                    dd:da:11:44:16:17:af:73:a0:bd:52:4c:77:4a:5c:
                    dc:3e:34:7c:2c:00:e3:3e:15:c1:28:00:9b:d5:12:
                    21:fc:8e:44:8b:b8:19:35:e9:71:2d:36:f1:9f:74:
                    46:73:c3:f6:87:40:7c:95:6f:e6:b1:22:f6:fa:fb:
                    e6:8f:ad:4e:a5:4d:84:4c:b3:27:6a:e6:f3:ab:91:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BC:51:87:6A:23:CE:4E:41:23:D3:F5:81:20:A2:5C:74:92:C1:FA
            X509v3 Authority Key Identifier:
                keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ca:78:67:39:63:73:61:8a:28:8a:1f:7a:f9:db:37:ef:d5:
         4e:61:0a:f7:12:9b:89:e7:9c:ac:ce:2d:6f:25:48:0f:f7:2b:
         83:46:ae:ac:f9:f5:8b:dc:a7:05:4e:d9:c5:38:3c:a0:dd:99:
         83:56:90:4d:64:c0:04:2f:0d:45:27:e2:94:cf:50:23:6a:43:
         d7:d5:14:22:cf:e2:bb:19:d1:cd:94:73:82:0b:c8:1f:ed:5a:
         5a:00:c9:fa:b2:55:a7:9d:39:ae:64:ac:47:75:8e:bd:f1:9e:
         76:46:a3:92:4d:11:d9:05:c2:f2:52:f7:70:d1:55:a4:88:01:
         4f:2d:74:29:11:20:fd:71:0e:0b:2f:96:fe:1a:1b:19:d2:ba:
         f2:f1:6b:ed:bb:44:87:23:16:95:a4:e5:89:9b:6f:f6:a2:97:
         7d:a6:91:8c:ea:c4:90:c0:36:58:a7:fb:c1:0d:d5:6f:15:c5:
         09:0f:ea:4a:cc:b4:d2:66:f8:36:79:78:1d:84:1e:43:f0:66:
         79:4e:66:a3:16:09:81:c8:e1:8d:54:c4:e9:57:7d:1b:69:2c:
         c4:60:df:f1:2e:46:21:6a:6c:5c:46:ce:37:6c:1f:04:b5:f7:
         91:4b:42:89:2a:cc:88:94:11:c3:8c:a4:01:b0:d8:6e:c6:df:
         02:a2:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:27 2025 by rpki-client