Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          0N7g3XK48ebfH3fPYJN0xXipo/ghFh4pWBO2KA4h04A=
Subject key identifier:   F6:25:A4:16:EF:AA:49:29:83:8D:6D:DF:F7:83:ED:13:2E:8D:26:54
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       0198D4048CA6E557BA9EFE48C20FC85E1001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          0BFE
Signing time:             Fri 22 Aug 2025 23:02:04 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:04 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:04 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: XAO9sH6TqEvqyjYJTIiL7WObaSkZfZf8vD0c+UBke64=)
                          2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:8c:a6:e5:57:ba:9e:fe:48:c2:0f:c8:5e:10:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: Aug 22 23:02:04 2025 GMT
            Not After : Aug 23 23:02:04 2025 GMT
        Subject: CN=f625a416efaa4929838d6ddff783ed132e8d2654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:84:c6:d9:11:d5:1d:95:63:22:dc:9b:6f:
                    10:bd:b1:d3:7e:18:4f:1d:2e:c8:f1:6d:ab:25:bf:
                    a4:71:cf:a0:4f:39:b8:84:00:37:62:36:69:2d:22:
                    c4:66:d1:43:61:a1:46:02:41:ab:27:74:f5:7d:ae:
                    00:c4:7d:28:a2:e5:34:47:53:2c:4b:5f:fb:df:e0:
                    84:e5:af:d3:cc:e7:c6:37:2c:98:69:2b:3e:d3:0d:
                    15:01:1d:84:e4:0c:97:2e:0a:96:69:35:3c:2c:cc:
                    4d:e0:57:64:7e:4f:8d:dc:f4:f2:a8:33:14:fd:36:
                    29:aa:7d:a5:56:4a:c8:eb:b6:ad:69:fb:e3:9d:ae:
                    ab:89:cc:dc:12:76:b1:aa:90:ef:dd:21:31:60:e5:
                    de:c6:bb:37:3e:02:33:2e:07:9b:a0:58:76:4f:b1:
                    5c:d7:8b:6b:e3:7c:77:cf:2b:66:2b:7b:47:03:9f:
                    c9:a3:79:57:f6:ed:cf:01:c5:b5:48:5c:5c:87:af:
                    aa:d8:80:34:72:6e:36:39:4a:08:07:d7:84:c6:9d:
                    be:01:c7:1d:35:67:29:c1:69:05:ab:04:36:79:d9:
                    04:18:f0:b0:f1:30:df:e0:21:bf:67:fc:17:54:39:
                    e5:1f:e2:ce:7c:f5:e9:32:db:8d:cd:85:53:bc:2d:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:A4:16:EF:AA:49:29:83:8D:6D:DF:F7:83:ED:13:2E:8D:26:54
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:7d:f4:1e:6d:4c:82:0e:c0:56:68:e0:1b:c2:88:29:32:
         b6:ee:71:ae:0c:58:ad:61:8b:c7:95:4c:c9:06:51:88:39:56:
         f0:9d:5d:68:a0:7d:d3:21:54:f6:0e:b7:69:71:8b:4f:0b:fc:
         08:19:8e:c1:1b:81:c3:a0:9d:7f:8b:4e:4b:27:d6:dd:4f:1f:
         23:34:10:76:bc:13:42:42:bb:43:1c:92:1b:4d:5e:f2:0d:a2:
         fe:b8:26:2b:7c:02:06:54:1c:24:8b:00:57:45:28:6f:16:cc:
         be:d1:4a:e4:8e:42:91:5f:82:1b:60:e9:54:c9:c7:bd:b4:92:
         1d:5b:8a:c5:6b:4d:49:25:20:14:f1:e6:e1:d5:46:98:8c:1b:
         c7:06:97:20:9b:99:b7:eb:ab:35:67:09:01:1a:73:d6:c5:10:
         f2:c0:13:cc:7c:c3:9e:48:0e:9d:3b:00:01:13:92:4a:b9:45:
         c7:67:5d:f9:7c:2e:33:0e:09:2a:97:4c:ec:6d:4d:30:3a:b0:
         b9:b7:0e:f7:11:b8:d3:f4:99:b5:61:71:45:46:98:0a:2a:be:
         87:f8:03:e3:9a:29:08:2a:8b:87:b0:64:1e:0d:c4:76:88:21:
         67:35:a3:db:fd:de:c6:92:89:fc:c5:be:65:31:99:42:ae:8c:
         57:1b:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:19 2025 by rpki-client