Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File:                     eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier:          VUgjtphlPo9MfgN8OoUld2g34pQMhuzoO4Hq8LT8iZw=
Subject key identifier:   23:23:69:8E:34:BA:BA:73:7B:41:DD:27:67:A6:2A:20:77:AD:45:A3
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer:       /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial:       0198D84F288D952A8A24049A70DAEFEF8E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number:          04AD
Signing time:             Sat 23 Aug 2025 19:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:02 +0000
Files and hashes:         1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: mJ9VXQ3uARr+WcjF2ntN5f+uwAdwkdpeCesf7O5Ub78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:28:8d:95:2a:8a:24:04:9a:70:da:ef:ef:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
        Validity
            Not Before: Aug 23 19:02:02 2025 GMT
            Not After : Aug 24 19:02:02 2025 GMT
        Subject: CN=2323698e34baba737b41dd2767a62a2077ad45a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:04:1e:b0:0e:73:7b:93:d4:11:f3:da:f9:8d:
                    29:af:33:d5:95:7b:e3:8d:13:55:6f:0f:f9:c6:c5:
                    89:b3:51:6a:77:d2:41:a5:3a:92:af:64:d4:44:08:
                    16:e3:41:04:12:cd:c9:d6:41:61:39:fb:cd:48:78:
                    a3:13:90:c4:54:0a:47:d1:37:81:01:a0:ee:bd:9d:
                    75:54:6d:51:36:0d:a2:99:83:e1:56:ac:f8:ed:be:
                    16:66:8a:7f:71:45:bb:ab:0a:63:c4:c7:16:fa:c3:
                    97:f5:7b:12:5c:e8:85:49:f5:bd:81:78:7d:0d:3b:
                    93:61:81:f4:7c:2c:59:da:48:e3:0b:d7:80:8a:d5:
                    78:57:07:39:67:71:a1:98:32:1b:12:9b:20:4e:a6:
                    2a:87:28:49:3e:d4:ff:b3:3b:65:97:2d:9f:7e:68:
                    fb:38:88:9c:29:94:c6:15:c7:f6:07:4b:62:3b:38:
                    e9:bf:2d:65:5a:e5:00:5e:5e:53:bc:f3:c6:7e:d4:
                    74:ef:99:f0:56:a1:e9:f7:46:61:ea:d1:6e:e7:77:
                    56:99:88:30:05:28:19:f8:14:99:64:d8:63:ab:5e:
                    ae:ba:b2:5b:df:1d:32:a2:2c:3a:59:1d:88:f2:ca:
                    61:86:ed:dd:ce:49:6c:de:8a:f1:9b:00:b2:94:81:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:23:69:8E:34:BA:BA:73:7B:41:DD:27:67:A6:2A:20:77:AD:45:A3
            X509v3 Authority Key Identifier:
                keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9d:44:f5:02:49:24:7f:79:b4:2a:73:0c:12:15:fd:53:25:
         c8:35:36:fd:06:98:a9:a8:70:e8:82:cb:23:9a:85:fe:87:72:
         1c:ec:65:55:51:fd:42:48:d5:c0:3a:ab:c5:ba:a7:46:06:2e:
         48:22:8d:48:db:a4:8d:59:14:fc:25:af:a6:cc:63:d4:f7:a9:
         c8:e0:f8:69:91:3e:ea:4b:e5:0c:29:71:f3:35:ba:ab:2d:9b:
         d5:c3:b5:ac:74:83:8d:50:0c:87:d6:99:e4:97:cb:bb:fe:f6:
         be:cf:d0:d0:1b:d2:05:50:1b:03:ab:45:b8:46:3f:f6:10:36:
         1a:07:4b:10:fd:83:2f:27:71:45:a2:60:db:72:bf:66:5d:5a:
         ba:45:51:af:85:5a:e1:69:d8:fe:da:f4:d7:4f:e3:f2:a9:28:
         29:f3:c3:f0:65:5f:d5:60:9f:b8:bc:28:d1:1e:69:f0:b5:8b:
         8e:78:d5:47:a0:21:fa:41:ae:fd:53:24:26:72:37:08:50:83:
         07:fb:75:2b:d6:2f:a4:6a:22:8e:ba:df:a9:4e:26:96:ec:ab:
         9e:47:bf:df:f7:4d:d4:96:78:2f:af:5b:15:67:6e:07:46:a8:
         cf:bf:4b:77:b0:66:88:d9:09:0d:d2:41:49:b3:c2:84:04:3c:
         7e:4b:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:14 2025 by rpki-client