Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          GE62JQcEjSUaddPLSJGlob256G6HYAEe2KMFlvnDdJI=
Subject key identifier:   FA:78:82:7C:CE:76:2A:8B:54:78:93:EC:2E:57:07:2A:2E:BE:C7:D7
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       0198D4E06D72C8918DB1EA16E94A1527F378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 03:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:14 +0000
Files and hashes:         1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: OwrkO5xfOwkUoEfvRGox0pUV8WV1c6PbddQI47/qMD8=)
                          2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:6d:72:c8:91:8d:b1:ea:16:e9:4a:15:27:f3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: Aug 23 03:02:14 2025 GMT
            Not After : Aug 24 03:02:14 2025 GMT
        Subject: CN=fa78827cce762a8b547893ec2e57072a2ebec7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:51:fb:16:0b:61:49:58:2c:e3:33:8b:07:
                    3a:f9:cc:e9:f1:fb:f4:d2:6f:82:ed:f4:36:45:a1:
                    1a:d2:38:4c:2e:b6:af:0b:e4:7a:9d:30:03:1d:26:
                    7d:26:b6:0b:86:48:80:e3:52:a7:db:2c:53:13:d8:
                    60:27:b3:4c:3c:29:f0:53:2b:af:28:07:3e:80:d6:
                    68:60:f8:45:94:37:60:9a:36:ab:be:67:f2:f0:dd:
                    d9:cf:98:45:ff:69:6e:11:a1:7b:19:25:6e:ea:09:
                    9e:08:cd:2a:41:34:42:f6:a4:6d:75:5f:82:4a:aa:
                    39:42:d4:8a:a0:99:53:51:88:bf:df:a0:06:aa:28:
                    c6:05:2d:2a:3a:b0:e3:a1:7a:b0:1c:25:c6:f5:29:
                    36:15:7b:b8:e4:8e:48:4a:4c:bb:41:5e:10:46:02:
                    3c:2c:3d:b0:34:ac:cf:10:b6:76:97:a0:28:df:d5:
                    78:e4:de:70:ae:d9:28:b7:5f:cd:0b:1e:b9:27:b0:
                    e6:32:11:c9:6a:1c:d0:e4:0c:53:10:86:6d:96:6c:
                    20:ee:50:8c:0b:8d:62:82:b8:46:a1:b3:89:9a:fe:
                    b6:f6:6a:8e:6e:df:3d:98:a0:47:1f:52:a0:a9:e1:
                    0f:7b:95:27:31:71:b7:fc:81:87:82:6c:e7:f4:a7:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:82:7C:CE:76:2A:8B:54:78:93:EC:2E:57:07:2A:2E:BE:C7:D7
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:77:9a:86:86:39:a6:1c:5f:33:5b:9f:70:1d:1e:04:4d:
         a0:a4:6c:19:e0:da:48:43:b2:5a:7b:49:c0:b3:e8:22:2c:35:
         ad:de:64:dc:a9:c9:89:c3:c9:a2:2e:21:8a:03:3d:76:fe:5d:
         52:33:e7:f9:96:c8:bd:89:a3:6f:a5:fd:6c:56:32:9e:a4:55:
         29:0b:ee:14:ea:e9:2c:b1:92:81:b3:da:77:7b:a5:ce:5d:47:
         0d:97:d7:02:2c:dd:c1:97:3e:f4:f3:be:d1:b2:a7:0c:3e:c0:
         fd:21:26:f5:64:23:17:ee:06:09:cb:b1:42:1b:70:71:9b:c0:
         8f:2e:28:cc:b3:2c:79:c3:34:b3:68:b7:4e:4d:7a:03:e6:b1:
         89:23:b8:e6:f7:79:34:17:87:44:74:99:12:cc:0b:ff:32:51:
         8c:a3:55:38:17:4d:03:19:a3:b9:2d:b7:48:58:af:62:fa:13:
         39:ed:c8:56:19:93:f9:de:90:87:b9:8d:2b:9b:9e:2e:5b:93:
         c2:be:31:21:eb:7d:31:0f:a4:06:d2:b4:7b:9f:6a:5d:78:19:
         4f:91:cb:80:28:ed:ea:cc:94:f9:b0:e5:9d:2e:95:59:5a:6e:
         67:e6:c2:ad:56:fe:43:ba:ba:c4:5f:35:78:a9:86:da:0d:02:
         7f:e8:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:58 2025 by rpki-client