Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File:                     E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier:          mzC/l0aUJmlVgeTTlaDtbifOOJq2MwwXosu5h/svOYE=
Subject key identifier:   66:23:CB:13:96:C7:9E:0B:26:DC:B0:9D:8E:46:0D:64:F6:E7:77:B4
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer:       /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial:       0198D54DC2C532B679815AEA69FC2C4A8C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 05:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:39 +0000
Files and hashes:         1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: lsU/TH09mFyovltjJkhbsIwE0LJyKh3O4Y11HCL3DdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c2:c5:32:b6:79:81:5a:ea:69:fc:2c:4a:8c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
        Validity
            Not Before: Aug 23 05:01:39 2025 GMT
            Not After : Aug 24 05:01:39 2025 GMT
        Subject: CN=6623cb1396c79e0b26dcb09d8e460d64f6e777b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:8f:3c:cd:b5:e2:35:07:16:4c:84:3f:08:
                    03:03:29:d0:36:5f:75:01:7d:6a:a8:90:2b:8a:b8:
                    0a:7c:e0:42:08:9f:f1:5a:1e:0d:91:68:b2:11:57:
                    43:f0:7f:ba:4c:2a:45:69:4c:fe:50:50:17:f4:d0:
                    0b:8e:7a:8b:cf:62:96:dc:25:60:f6:73:c1:1a:a1:
                    53:aa:8f:85:12:4f:26:a3:bb:52:24:c9:b8:ae:e4:
                    82:b7:d6:70:c7:14:7c:fa:ac:10:a1:e8:ec:64:52:
                    3f:01:20:97:32:2a:ae:a4:f0:03:fd:93:aa:0d:aa:
                    39:66:8c:89:15:ca:4b:bf:23:8b:01:92:27:cd:1b:
                    4c:34:12:5c:13:69:d8:c8:ee:51:ce:d1:07:8c:ff:
                    d9:80:5d:e5:f8:2f:3e:6f:a1:36:58:96:63:06:de:
                    6a:cb:f0:d5:e7:11:ca:b3:c2:ad:9d:fc:d2:7b:58:
                    65:99:3d:e3:55:91:66:a5:af:79:8f:50:9c:0c:50:
                    54:49:af:7b:24:a6:35:5b:fc:bd:2e:ce:2d:e5:31:
                    65:46:06:5e:82:63:c9:e9:94:34:11:c3:98:60:4f:
                    97:b3:46:d4:06:15:66:e2:c5:04:c0:b9:6d:56:09:
                    f2:64:ee:49:9a:0f:4c:e5:71:71:ae:12:1e:4c:2c:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:23:CB:13:96:C7:9E:0B:26:DC:B0:9D:8E:46:0D:64:F6:E7:77:B4
            X509v3 Authority Key Identifier:
                keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:15:80:4d:60:cf:8e:b0:09:e4:d5:d1:4f:ea:fe:c2:1d:
         0e:39:34:01:84:f4:d6:9c:48:47:1b:29:21:6d:7c:2b:83:99:
         ff:af:37:a3:2c:b7:12:a2:0a:17:9f:35:0d:87:66:18:ef:54:
         a8:4c:e8:dc:82:00:0b:0d:36:52:86:05:3b:ce:be:5e:f3:4a:
         90:b7:10:ce:4b:87:5f:31:fc:fb:dc:a2:f4:ea:a1:27:b6:28:
         60:68:82:3c:6c:9d:ba:30:d3:63:1b:a6:f2:61:89:0e:63:73:
         4b:fa:a2:f2:e3:24:69:3e:24:cb:2e:24:8d:fa:4d:fd:7e:68:
         a4:fb:c3:00:ee:dc:7b:11:50:d3:20:5e:0c:66:bf:bf:01:8c:
         cd:ed:e9:e3:1b:a1:03:a5:33:9b:1a:3e:76:64:38:f4:23:a5:
         c0:8c:2a:ab:a6:52:32:81:bd:82:77:81:11:62:81:0a:94:83:
         0e:82:12:4c:c0:51:e6:58:85:49:57:23:62:60:2a:c4:69:d7:
         83:56:15:40:99:05:8e:f8:d5:23:44:3f:a7:5c:ec:75:43:00:
         1f:8f:24:1f:50:04:73:dd:93:2a:a1:b4:99:4c:8d:3d:00:b2:
         8e:13:2a:b1:d7:37:55:d2:77:69:f0:71:99:db:fe:4d:02:33:
         35:dc:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:27 2025 by rpki-client