Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
File:                     EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json)
Hash identifier:          RxhjNTsumUSHELuWFPxhxQ61b8kcgi3M7rU1sG1Ni54=
Subject key identifier:   D6:EB:73:47:D6:DD:93:5C:E2:5A:34:7E:8F:FA:7F:E0:D6:25:9F:4B
Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA
Certificate issuer:       /CN=132868644579e6eb61f4771d67b40664f50116fa
Certificate serial:       0198D472526F32ACE1E1408ADAEC56A06209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
Manifest number:          11E1
Signing time:             Sat 23 Aug 2025 01:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 01:01:58 +0000
Files and hashes:         1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: iZlVG1EhPqbHY+SWAV6OuEcCoFDT7o2AqraZn+jFSsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:52:6f:32:ac:e1:e1:40:8a:da:ec:56:a0:62:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa
        Validity
            Not Before: Aug 23 01:01:58 2025 GMT
            Not After : Aug 24 01:01:58 2025 GMT
        Subject: CN=d6eb7347d6dd935ce25a347e8ffa7fe0d6259f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:14:73:1d:02:7b:ff:c3:de:d9:08:83:e8:
                    60:58:55:dd:b8:a6:38:ed:a3:4b:11:f5:30:ae:7f:
                    a4:35:46:50:09:be:2b:75:d9:aa:61:40:dc:db:f2:
                    f5:91:58:51:1f:2b:6b:24:5a:48:be:f3:d9:d2:f3:
                    4f:50:b0:48:f9:51:5a:2a:a2:17:75:ae:c7:03:b4:
                    5c:b0:91:6c:0b:ca:57:b6:74:cc:aa:8f:df:62:f2:
                    99:96:8c:a6:57:d7:80:f1:ce:ce:42:55:19:ec:a7:
                    ec:31:c6:78:d8:00:64:f2:33:bd:83:b7:a8:51:15:
                    98:03:62:6d:1a:a7:e5:91:e2:c3:a4:5e:16:8a:ff:
                    3e:86:47:34:a4:b4:ae:04:bd:95:57:d6:a5:34:3d:
                    8e:2a:62:7d:32:a0:ef:52:69:71:62:d5:33:7d:2c:
                    c0:0a:b8:99:37:8a:af:6c:b5:45:1c:8d:6d:f4:ca:
                    1a:18:6f:9f:cb:6c:c8:6c:e2:13:58:0c:f1:67:ab:
                    99:0a:c8:94:89:8b:8c:b7:92:25:56:ab:c7:52:73:
                    bf:a8:b7:b1:ba:52:6d:d4:b5:bb:bb:c1:aa:0c:c9:
                    2b:7b:8f:a0:a8:21:88:08:a7:b0:b1:ca:13:ae:5a:
                    fe:f4:77:4b:08:7c:09:3f:a0:a8:83:d4:21:0b:bf:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:73:47:D6:DD:93:5C:E2:5A:34:7E:8F:FA:7F:E0:D6:25:9F:4B
            X509v3 Authority Key Identifier:
                keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:39:57:07:44:42:50:9b:a3:25:97:01:22:48:69:a0:9f:fb:
         f6:f5:6c:57:36:6c:72:36:14:ef:cc:54:22:af:e1:02:29:f0:
         7a:53:f1:b0:d8:ca:48:4c:f9:5d:81:10:0b:7d:7d:c4:47:58:
         96:0d:76:1c:95:cb:54:ea:75:bb:2c:67:56:7d:61:9e:94:6f:
         0a:27:e0:db:6c:09:f3:56:f4:42:a0:0e:95:70:44:01:ba:d3:
         6f:ed:c3:f7:1f:4b:50:6f:4b:11:d5:cd:5c:c4:59:1e:76:37:
         37:82:35:91:e9:8d:9c:19:e2:76:68:63:8e:bc:20:31:b7:7c:
         bd:df:0a:4a:a2:d3:f0:b5:01:10:ce:5f:dd:16:8a:43:cf:2b:
         bd:62:07:f0:3a:05:46:2a:91:26:77:9d:aa:08:3e:bc:ac:3d:
         d5:c3:8b:19:48:2e:c0:1c:49:a7:3d:d8:a0:77:f8:5a:65:ba:
         37:6b:48:04:e7:fc:d2:9b:30:ad:36:1e:ac:fb:50:11:06:6e:
         b7:0b:ed:33:62:e6:29:e4:36:3a:09:fc:4a:84:da:af:87:0e:
         fa:91:51:e7:8b:52:14:6d:b6:05:6c:19:52:6a:59:3c:a6:ad:
         59:f2:50:f5:bc:f3:f3:16:51:94:d8:6b:85:26:c0:2c:4e:33:
         fe:23:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:28 2025 by rpki-client