Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File:                     eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier:          vWiwtjCgA+RJDclyKcCWUZ+CGDRHSi1sfEBYKgCbL10=
Subject key identifier:   06:B3:45:07:6E:DC:4B:85:46:5B:09:FF:2C:B8:45:6F:81:10:26:08
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer:       /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial:       0198D661460FBC5E1EF92F972971814D1A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number:          01EF
Signing time:             Sat 23 Aug 2025 10:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:35 +0000
Files and hashes:         1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: wdblXw+Xt1bTrDcTWInGwfFKFRvv6bdOD7RktMT0EwE=)
                          2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:46:0f:bc:5e:1e:f9:2f:97:29:71:81:4d:1a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
        Validity
            Not Before: Aug 23 10:02:35 2025 GMT
            Not After : Aug 24 10:02:35 2025 GMT
        Subject: CN=06b345076edc4b85465b09ff2cb8456f81102608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:ec:e4:8c:c3:3e:d2:9d:bb:e0:01:78:ba:
                    89:63:38:6b:d6:ac:5d:7a:e3:d2:30:e8:0d:70:1e:
                    57:f9:bc:2d:fa:e8:08:97:26:1a:4b:f0:8c:36:e9:
                    00:62:2d:73:8b:05:7b:2a:ae:33:8d:34:3c:e7:bb:
                    63:dc:1b:8e:55:ec:db:04:67:af:b0:8f:6c:4a:c8:
                    12:55:8d:8e:bb:81:1c:a1:66:d3:30:3e:97:51:6b:
                    3b:07:e8:18:f3:2a:9b:97:a2:82:26:95:91:75:e7:
                    93:9e:de:93:c1:6d:89:b7:d5:3c:1d:64:47:97:39:
                    4c:98:2c:e3:a9:4e:a4:f0:e8:49:e7:bd:17:98:48:
                    56:01:b7:d9:22:f6:97:c7:ad:7d:85:5a:5a:2b:06:
                    09:b7:1c:73:02:d3:cf:6f:64:7e:9e:b2:5b:d9:15:
                    af:4e:73:7c:52:14:33:88:98:c3:f8:13:eb:fb:ca:
                    68:e8:81:12:a1:5c:0a:f4:8d:b0:15:27:02:33:47:
                    c5:f5:fb:5c:43:4a:d5:75:54:42:3a:7c:d0:a3:62:
                    f3:eb:64:f0:8f:17:b7:5e:14:73:b5:8f:50:db:c6:
                    85:89:f3:69:9e:fb:52:c8:4a:7b:84:f5:62:78:55:
                    1e:3a:e7:bf:18:97:69:ff:08:c3:41:b5:aa:3f:61:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B3:45:07:6E:DC:4B:85:46:5B:09:FF:2C:B8:45:6F:81:10:26:08
            X509v3 Authority Key Identifier:
                keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:20:a6:a1:45:ae:36:ce:84:e2:e5:3a:b9:b7:84:99:bc:
         e7:1f:a4:e6:49:82:b6:da:21:22:65:28:d6:3e:e5:d0:c4:f8:
         d3:5d:8a:d5:9b:49:80:f4:53:70:61:e8:3a:7f:c8:83:63:38:
         ce:51:82:cf:70:04:e9:26:44:c4:de:75:b0:4e:9c:7b:1c:ab:
         ff:1f:a6:70:66:74:cc:90:1f:a2:62:33:1c:f9:3d:8a:1d:9b:
         e2:6a:ed:1d:4a:99:c9:fb:01:99:0c:f0:1a:38:da:df:ec:d7:
         fe:8d:7d:59:12:03:c7:b1:3e:65:2b:45:13:c2:c2:68:ba:45:
         4b:63:46:c1:73:54:55:8c:97:a6:11:0e:70:c8:73:76:52:61:
         d8:01:b6:8a:42:da:8e:6d:19:dc:d2:25:04:68:e7:76:5f:7f:
         45:13:cf:39:25:b5:c0:53:b5:88:57:06:8b:20:0c:e9:f1:03:
         bb:4f:94:09:16:9a:78:67:47:28:b4:1c:eb:b8:8d:f6:96:8d:
         6c:0c:38:cb:bd:d8:ed:0f:e0:c9:65:ab:75:05:8e:f5:fe:03:
         fb:1a:aa:73:cc:65:e0:38:8a:88:21:40:21:ac:0d:76:f8:94:
         fa:f6:be:70:e8:1a:8c:61:fb:45:c7:82:27:8b:cf:b1:98:fc:
         a9:34:80:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:47 2025 by rpki-client