Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File:                     eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier:          90FLy/ytsCSV9X7ZlyjrLpqU10223eV9t+GzkriO0UI=
Subject key identifier:   20:21:5E:C8:7B:6A:20:1A:CD:B9:43:FE:DB:3A:34:D5:51:B0:41:F0
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer:       /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial:       0198D54E5CCEF988CFE542D637A89835954E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number:          14CE
Signing time:             Sat 23 Aug 2025 05:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:19 +0000
Files and hashes:         1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: dql7z87Ur0fWztyKnLOKD+XzrKnhZG+f7BatzyF0UaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:5c:ce:f9:88:cf:e5:42:d6:37:a8:98:35:95:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
        Validity
            Not Before: Aug 23 05:02:19 2025 GMT
            Not After : Aug 24 05:02:19 2025 GMT
        Subject: CN=20215ec87b6a201acdb943fedb3a34d551b041f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:99:bd:09:bf:a5:bd:3e:06:a8:79:0a:3c:
                    27:ff:53:66:fc:eb:61:af:e2:3e:60:4b:05:0e:b4:
                    cb:a8:06:eb:69:77:9f:1f:aa:7a:eb:30:fe:66:26:
                    15:6d:57:f3:85:11:cb:80:03:11:4d:8b:bb:d2:6e:
                    a2:e3:5e:43:73:a7:dc:07:d2:b8:f0:01:eb:88:73:
                    a8:e7:97:70:17:74:08:32:a0:3e:71:bf:d5:10:ae:
                    bb:f1:d2:08:83:55:b6:a6:5c:97:da:12:72:c0:09:
                    e9:bd:5a:55:f2:8b:b1:ac:18:c8:2b:ac:4a:2f:1d:
                    a3:c9:01:a1:14:d7:84:7c:bc:07:5a:6f:2b:f8:ac:
                    e7:c3:db:9d:d3:78:e2:cf:49:d1:c9:a7:1f:ae:6c:
                    21:ef:40:8a:ca:c1:6d:37:4e:74:45:9b:9c:71:5d:
                    2e:7c:73:f3:41:ab:f5:56:50:d3:0b:c1:5b:1d:8c:
                    de:1c:60:26:f2:23:98:8c:2f:d4:0c:c3:ad:41:e0:
                    01:c4:a2:8b:3e:c8:73:f0:da:42:31:23:7f:05:53:
                    d2:48:99:9b:a8:09:4b:2d:cc:62:e1:0a:34:0c:32:
                    6b:77:a7:c1:f1:44:12:71:94:93:a8:59:7b:70:6f:
                    38:de:de:5e:f5:17:03:ad:64:f9:96:c2:21:34:64:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:5E:C8:7B:6A:20:1A:CD:B9:43:FE:DB:3A:34:D5:51:B0:41:F0
            X509v3 Authority Key Identifier:
                keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:06:9a:4f:56:be:83:25:eb:c6:a0:c6:98:de:92:fc:40:9c:
         93:8f:d1:51:ea:ec:e3:75:73:4f:b1:00:90:ea:20:1c:32:b2:
         71:c1:ba:16:7a:dc:af:13:0e:ce:0a:91:0c:96:8a:ab:07:dc:
         76:cc:3f:71:3c:3c:d2:30:e3:bc:52:e3:93:32:74:8b:48:37:
         50:3b:e5:11:f7:8e:28:cd:0e:9e:86:f7:5b:7d:ff:72:95:b4:
         29:d6:e8:1e:4b:fa:39:e6:fc:60:6d:5f:20:10:70:5f:74:7d:
         97:45:59:47:41:0f:66:4a:37:28:59:02:d2:a7:e0:15:79:d0:
         2c:4a:0e:c4:43:57:4c:9c:42:cc:79:04:5c:98:4e:61:76:15:
         be:77:92:40:42:70:d1:43:91:e6:6c:df:5a:14:76:44:4b:29:
         96:56:10:f6:9d:39:d7:1c:66:df:b8:54:31:a5:f7:ba:57:80:
         a2:23:e0:1c:c3:b0:10:3e:1a:25:95:d8:c8:e2:bf:35:d6:59:
         f0:7b:b0:b6:7c:bf:78:40:62:c1:ac:94:09:fe:8c:d9:8b:2c:
         0e:fb:35:1c:3c:b4:11:52:af:b7:e5:ce:07:c0:f9:b5:93:2b:
         42:22:13:d1:0d:e6:cc:13:32:99:8e:b7:7c:40:fc:c1:11:45:
         c7:3b:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:07 2025 by rpki-client