Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File:                     4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier:          Xwq7WdfYW25XZ2Sv5ywT059zxfyw++003RnFwuNuk3w=
Subject key identifier:   E0:29:8F:FF:A0:B1:41:54:46:EC:68:0C:D3:8B:F7:63:5C:49:4B:8E
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer:       /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial:       0198D6607B05638EA6B863489361010CC288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:43 +0000
Files and hashes:         1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: eS47YcZReb2NnmyOfnrhh9bc4Pi9kUW5eB+ufOjDxJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:7b:05:63:8e:a6:b8:63:48:93:61:01:0c:c2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
        Validity
            Not Before: Aug 23 10:01:43 2025 GMT
            Not After : Aug 24 10:01:43 2025 GMT
        Subject: CN=e0298fffa0b1415446ec680cd38bf7635c494b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:6b:97:f7:d9:99:a8:58:04:9e:92:f2:0b:
                    44:e9:64:6f:52:92:c9:1c:b5:6e:69:b6:67:76:0d:
                    cd:02:6b:50:c5:80:8c:0a:c8:87:5b:6d:19:f7:0d:
                    b6:bd:32:3a:35:04:70:eb:89:7d:51:77:5a:c5:92:
                    fb:d1:91:65:c4:5f:2e:76:10:68:fd:30:6c:1e:9f:
                    3f:ea:48:90:f4:58:98:a5:f4:bf:4b:72:bc:55:89:
                    9a:bf:c8:42:cf:77:cf:de:17:79:48:9f:82:37:52:
                    1c:f0:db:cc:3a:49:5f:2e:a2:e9:a5:a5:d3:ba:a6:
                    d2:02:cb:72:73:36:bd:97:83:dd:8b:08:e9:0f:66:
                    a0:1f:f6:8e:37:b0:15:21:04:7a:cc:f3:80:ea:4f:
                    b6:63:fa:3a:78:8e:d1:9b:b1:7d:9c:f1:8e:a0:e6:
                    ac:3f:d7:bf:58:d3:09:dc:01:56:58:b2:42:f0:38:
                    0e:ea:01:5d:87:cf:6e:55:71:72:32:ff:27:1f:f6:
                    51:30:f1:88:41:01:5c:90:17:22:0b:ec:8d:94:12:
                    3a:c3:c1:08:24:cb:82:bb:a1:70:ae:bb:d1:de:8f:
                    7d:2f:63:d5:b9:5f:05:77:73:56:bd:27:f1:7c:09:
                    53:be:01:c6:96:5c:10:0f:90:d9:85:ff:0e:5d:63:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:29:8F:FF:A0:B1:41:54:46:EC:68:0C:D3:8B:F7:63:5C:49:4B:8E
            X509v3 Authority Key Identifier:
                keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:95:42:79:8b:a3:4e:1f:17:ce:9d:bf:0e:72:7e:27:fd:8f:
         f3:76:c6:05:02:97:56:b2:e7:11:b6:fa:e9:97:40:6e:6b:d0:
         3a:cf:c9:f4:9e:eb:b4:ec:3a:fc:73:15:c1:26:98:ef:c1:fc:
         c9:6c:55:11:f5:0d:5a:83:20:9b:be:56:ff:bb:3c:34:14:ba:
         5b:d6:ef:60:5d:5f:cc:36:77:22:9f:0f:07:f0:3d:b0:5a:5e:
         82:af:af:8a:ea:da:10:b8:ff:e3:26:8e:ae:75:aa:a5:31:43:
         e9:ef:ee:39:2e:1c:69:18:a4:0c:e8:d2:41:18:97:70:04:ee:
         ae:20:16:44:37:6c:6b:44:52:5b:c9:6b:12:7a:d9:73:75:13:
         40:14:b5:db:4d:aa:dc:f4:13:0f:f8:03:8c:ea:cd:5a:21:d9:
         d8:35:d8:e9:ee:8f:c0:74:5b:dc:35:2b:48:18:6f:59:27:bd:
         12:f1:c6:9e:2b:fb:20:1c:bf:91:91:0a:08:24:c2:27:93:10:
         54:73:d4:80:89:b5:d3:84:da:6f:4b:d1:08:df:49:b6:5b:73:
         29:56:ab:38:9a:ab:8e:e4:62:30:17:c2:8b:d3:8f:3e:b9:d5:
         d0:52:b0:2b:c0:90:50:c2:b9:cc:7e:63:a4:a9:4a:6a:e9:74:
         2e:f5:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:36 2025 by rpki-client