Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/39a644-faec-4b7a-864d-c2ad12d845cf/1/EUsGABDy13NeDwy15oE4_0cS_LQ.mft
File:                     EUsGABDy13NeDwy15oE4_0cS_LQ.mft (raw, json)
Hash identifier:          8nOa6Wc2C/4hEKK06uuIbApDdZ+ItsaxkDZDrMRAypw=
Subject key identifier:   69:BB:2C:AF:85:D8:C6:D0:7E:09:13:57:73:AF:D5:B2:86:76:1B:CC
Authority key identifier: 11:4B:06:00:10:F2:D7:73:5E:0F:0C:B5:E6:81:38:FF:47:12:FC:B4
Certificate issuer:       /CN=114b060010f2d7735e0f0cb5e68138ff4712fcb4
Certificate serial:       0198D515AF8C4854F5BED050F4C3B6CC2540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUsGABDy13NeDwy15oE4_0cS_LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/39a644-faec-4b7a-864d-c2ad12d845cf/1/EUsGABDy13NeDwy15oE4_0cS_LQ.mft
Manifest number:          0788
Signing time:             Sat 23 Aug 2025 04:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:24 +0000
Files and hashes:         1: EUsGABDy13NeDwy15oE4_0cS_LQ.crl (hash: 6HVgKtC6stJW7AuMAvOgsDoRzuWj/WWuku5FbnIa7Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/39a644-faec-4b7a-864d-c2ad12d845cf/1/EUsGABDy13NeDwy15oE4_0cS_LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/39a644-faec-4b7a-864d-c2ad12d845cf/1/EUsGABDy13NeDwy15oE4_0cS_LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUsGABDy13NeDwy15oE4_0cS_LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:af:8c:48:54:f5:be:d0:50:f4:c3:b6:cc:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114b060010f2d7735e0f0cb5e68138ff4712fcb4
        Validity
            Not Before: Aug 23 04:00:24 2025 GMT
            Not After : Aug 24 04:00:24 2025 GMT
        Subject: CN=69bb2caf85d8c6d07e09135773afd5b286761bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:d1:f1:2b:a9:7c:c3:d9:a1:66:bb:91:0a:
                    af:fe:e0:81:76:9a:f4:45:11:56:45:02:ef:0d:23:
                    bd:35:ac:a8:7f:29:6b:c7:ae:d8:59:34:76:52:85:
                    ec:33:98:35:9a:5a:bb:9f:ae:c3:e1:60:96:f1:f0:
                    b8:a4:2f:06:02:76:d1:b3:6f:b8:b0:7b:25:da:ca:
                    c8:c1:4f:4c:49:bb:90:db:8d:dc:4e:89:b3:af:43:
                    c5:c9:ed:eb:9f:5c:16:05:b3:5c:89:24:a5:0c:af:
                    a8:86:b0:05:0b:92:61:6e:69:f8:0f:d3:36:bb:e2:
                    12:e8:d2:14:3a:0d:50:4e:bb:cf:4a:b3:df:46:a5:
                    77:65:92:7e:c0:88:bf:28:23:7f:81:24:63:cb:e0:
                    21:24:56:75:3b:f2:a7:08:b9:f1:31:32:18:2e:b1:
                    a4:0c:fc:f5:41:95:f4:3f:2f:d0:d0:13:6f:41:bb:
                    c8:c9:63:69:65:3a:bb:39:20:d2:d7:7f:5c:ff:cc:
                    bd:30:d2:aa:85:36:c8:b9:f7:a1:9c:6f:fa:2f:1a:
                    25:9b:7e:bc:6f:54:92:4e:02:aa:66:3c:c2:cf:32:
                    22:3a:1e:6b:31:a3:0c:46:eb:8f:b2:17:fb:5f:82:
                    99:95:ec:7d:85:ef:56:96:50:e3:fa:eb:77:7e:c7:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:2C:AF:85:D8:C6:D0:7E:09:13:57:73:AF:D5:B2:86:76:1B:CC
            X509v3 Authority Key Identifier:
                keyid:11:4B:06:00:10:F2:D7:73:5E:0F:0C:B5:E6:81:38:FF:47:12:FC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUsGABDy13NeDwy15oE4_0cS_LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/39a644-faec-4b7a-864d-c2ad12d845cf/1/EUsGABDy13NeDwy15oE4_0cS_LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/39a644-faec-4b7a-864d-c2ad12d845cf/1/EUsGABDy13NeDwy15oE4_0cS_LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:08:0a:24:73:32:63:23:30:2e:6c:11:f9:3b:2a:a5:dc:6c:
         f2:44:cc:c2:9e:42:4c:19:86:f3:f4:b6:83:8d:14:49:e3:28:
         35:ac:c7:a6:d6:b6:f8:be:91:e4:b3:59:3c:7a:06:e9:4e:40:
         6a:78:83:a7:1f:df:58:b1:74:8c:df:21:9e:df:22:6e:80:68:
         18:9c:93:af:8d:3c:62:16:95:0a:64:1c:82:a3:c4:3f:e4:fc:
         fc:50:34:1f:67:12:b1:e2:e6:16:19:42:9c:d0:90:5e:8e:a5:
         09:7f:18:41:75:41:f1:36:f4:59:82:55:23:f0:54:87:99:9f:
         56:5f:9a:b3:51:c6:89:99:8e:de:fd:8f:1c:5d:b7:eb:23:5e:
         2b:8f:78:63:1d:f4:75:11:01:59:79:2d:62:d2:53:9b:ef:e9:
         a4:bb:36:82:eb:e7:98:42:91:fe:b1:0c:c2:63:fc:b0:1d:f5:
         6d:7a:a0:2b:22:41:24:96:f1:1b:45:e0:45:da:53:bc:e9:13:
         2f:0b:53:3a:a8:cb:15:7d:61:06:c2:35:b1:4a:e5:26:37:b6:
         36:85:7d:13:86:04:92:f4:ae:f8:5b:f3:63:3d:ea:3f:a5:7e:
         fa:2c:f7:ab:2e:0d:57:a7:bf:b8:29:6a:6d:c3:8c:5f:b1:e4:
         68:6a:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:33 2025 by rpki-client