Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          9eGn4pEtMOf4PNor3ujg5lduYUTQk9JOlM+kFBeLKgA=
Subject key identifier:   71:D7:5A:89:71:81:A3:9B:C5:FA:54:5E:7A:86:D7:E7:8D:E8:D1:BD
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       0198D51587F0920D73A39289509E9DBEBBCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          0716
Signing time:             Sat 23 Aug 2025 04:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:14 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: u/kgGD4nSmbR1cLwsThVOG3O96IaK1w1x99L2xMje/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:87:f0:92:0d:73:a3:92:89:50:9e:9d:be:bb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: Aug 23 04:00:14 2025 GMT
            Not After : Aug 24 04:00:14 2025 GMT
        Subject: CN=71d75a897181a39bc5fa545e7a86d7e78de8d1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:a4:2d:cc:5c:5e:a6:bf:f0:89:d3:9b:99:
                    70:30:dc:8e:df:ce:5e:54:df:1c:85:64:6b:1c:63:
                    34:f5:6a:a3:8d:c2:71:b3:57:93:fd:8f:54:9e:03:
                    50:db:01:45:17:46:a4:fc:27:4b:a5:41:16:64:8b:
                    a7:77:22:df:77:d4:d7:f9:11:f7:cc:1a:2b:c2:37:
                    db:55:f6:92:4a:9f:f5:64:a9:99:cd:10:57:cb:87:
                    04:66:55:8d:26:08:46:1a:f1:7a:98:c2:22:a9:0b:
                    7b:f9:e8:e1:ec:00:f2:6e:1e:a8:01:8c:46:ce:ab:
                    8d:88:40:14:82:85:b4:c8:06:f4:b0:aa:d8:75:fc:
                    18:28:9b:ab:ca:66:22:7a:e9:c6:1f:99:09:04:dd:
                    fa:39:47:a2:f8:fc:aa:69:c6:2b:40:37:5a:f7:92:
                    e0:d9:79:52:99:00:c7:93:31:0a:72:d5:fe:21:2f:
                    1d:0e:1e:3f:eb:19:2f:f6:2b:18:b3:61:f1:72:ef:
                    74:07:80:47:82:9c:89:43:37:09:26:7d:24:08:e2:
                    26:af:0f:51:bb:20:db:0a:f6:08:b0:27:70:94:f4:
                    2d:bc:bf:d8:9c:7a:2b:64:45:70:15:0f:62:b2:52:
                    3f:48:a7:8a:64:4a:e0:9b:2c:33:6b:d1:e7:0e:f7:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D7:5A:89:71:81:A3:9B:C5:FA:54:5E:7A:86:D7:E7:8D:E8:D1:BD
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:d4:a4:2c:34:0b:28:f3:d6:fb:7e:cc:d3:5e:0b:4f:9c:
         2b:86:51:71:0f:7a:c8:b3:57:43:f2:f1:2b:77:65:76:c0:b1:
         ce:1e:77:29:27:de:8d:02:05:36:b5:0f:63:00:6f:b9:d6:c6:
         5b:9d:31:e4:ec:0f:e9:03:ba:d5:52:81:e8:08:69:c8:23:07:
         c9:1a:a3:2f:ce:25:6e:7e:b4:55:76:18:43:5b:61:a6:fb:33:
         54:f4:3f:ba:a7:05:8a:28:06:3b:d6:6e:86:41:de:12:14:fb:
         59:8a:54:03:f4:20:2e:9e:17:c0:cb:c3:6e:bd:fc:1e:8f:16:
         8c:df:11:23:1c:bd:51:8b:d4:01:e0:e1:7a:43:9f:c3:99:1d:
         b6:b3:f7:97:a7:73:ec:ec:e1:6f:95:e5:d3:ae:2c:2a:a6:1d:
         d9:b6:09:58:6e:42:0f:a7:e1:b8:66:33:47:04:00:8b:8f:eb:
         a5:11:f3:9c:fc:d5:fb:04:7f:9c:85:da:d3:51:ff:8b:a8:d7:
         97:f5:ba:ba:8b:c1:22:ef:6e:68:0c:f6:a0:96:5d:f2:e5:b6:
         4e:6b:42:48:f0:18:f4:c5:9e:ec:6d:2c:c4:1d:3c:ee:f8:4d:
         c3:94:71:2c:e4:e6:7f:77:fa:69:5a:67:00:7a:2a:8b:9f:59:
         7f:7b:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:28 2025 by rpki-client