Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File:                     ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier:          emiR3BBCCcfb5FDazQT818zKLst2c+5OIxXyAxWIhTc=
Subject key identifier:   B2:EC:9A:83:F2:C2:C6:41:BC:80:4E:F8:94:A6:23:88:64:35:E3:72
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer:       /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial:       0198D66009C5CC14E822A059372AEF1FAC34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number:          1464
Signing time:             Sat 23 Aug 2025 10:01:14 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:14 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:14 +0000
Files and hashes:         1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: ixUelSE/YaUQNjbcWZLVmCl0ZpSdGpYg1QhF/eZ7AzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:09:c5:cc:14:e8:22:a0:59:37:2a:ef:1f:ac:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
        Validity
            Not Before: Aug 23 10:01:14 2025 GMT
            Not After : Aug 24 10:01:14 2025 GMT
        Subject: CN=b2ec9a83f2c2c641bc804ef894a623886435e372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:74:75:e8:d8:a3:3a:6b:74:3e:6b:41:b2:
                    54:3d:d1:73:b2:1c:ec:c6:28:a5:9b:20:df:7b:03:
                    ae:f9:62:aa:e1:0b:27:aa:f8:c3:cf:b5:51:eb:9b:
                    bd:7f:35:70:81:da:95:a5:69:49:08:1d:be:13:05:
                    46:15:c3:05:12:32:3d:10:b2:ba:10:9a:c7:66:50:
                    6c:ae:7b:a5:8d:07:cf:1f:81:48:a1:01:67:73:7c:
                    39:85:fc:f3:bf:ad:e5:96:1f:f2:6a:5a:e4:ee:3a:
                    22:ff:d4:d1:5e:36:e6:02:9c:3c:83:cf:45:c6:d1:
                    5a:e6:7f:7c:74:b4:aa:4d:c9:7d:69:73:55:0b:a8:
                    c1:60:66:c5:d5:c3:5a:97:82:83:36:61:e8:a6:8d:
                    c6:46:48:53:48:f1:3a:d0:45:5e:cc:b4:32:2d:99:
                    be:76:ab:60:ec:89:9f:ea:0c:31:c9:73:5d:e3:68:
                    e7:20:bc:fd:aa:e5:86:79:a4:f5:7c:be:3d:68:a3:
                    41:56:f2:31:67:ac:61:08:8a:da:11:88:13:fa:63:
                    c6:69:89:7a:c9:70:34:0f:16:e2:75:c7:83:dc:69:
                    5d:db:45:34:21:28:de:ce:6a:a9:15:26:e1:23:10:
                    6b:5c:fc:af:a3:4a:5f:f4:47:b2:fa:cd:dc:9d:dd:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EC:9A:83:F2:C2:C6:41:BC:80:4E:F8:94:A6:23:88:64:35:E3:72
            X509v3 Authority Key Identifier:
                keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:89:00:80:d6:83:e2:54:1c:61:a6:e9:93:6b:63:70:92:ee:
         5b:66:f9:b8:c7:b7:8f:33:24:99:67:fe:f3:1e:b3:df:bd:a0:
         d2:c7:5d:f9:f6:81:99:9b:ac:f9:b4:9f:9c:8c:ce:97:9c:61:
         c7:a9:87:6d:86:88:08:d0:34:f3:15:75:ba:ef:98:b5:8b:b7:
         29:31:3c:0d:48:df:06:9c:c6:17:e8:da:ee:86:35:e6:75:5c:
         d7:29:2f:b2:a4:c5:84:12:a9:50:01:da:79:4f:5a:e7:7f:17:
         2c:24:61:bb:c6:4d:d2:fd:c3:61:58:8e:86:8f:d3:e4:a0:9b:
         47:53:43:b5:75:d3:c1:8b:b8:d8:a0:2a:5a:69:a5:4d:f6:24:
         94:37:26:6d:02:93:16:2a:12:ba:df:0e:a6:3b:7a:8b:c1:5c:
         20:1c:bc:2e:b8:6a:b0:81:96:7f:54:e2:3c:b6:55:20:43:1f:
         ff:b6:52:33:f5:75:37:31:df:ec:b1:03:82:b2:9c:47:b3:52:
         cd:c8:df:a6:b5:01:bd:e5:9d:6d:ba:9c:ed:e7:79:2b:a4:b6:
         32:a9:79:df:27:d7:bf:a6:d5:fd:1b:09:9d:1d:41:77:22:7a:
         31:3f:32:7f:f8:69:8c:a9:8a:c3:50:4c:bd:d2:dd:9c:d9:77:
         64:33:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:33 2025 by rpki-client