Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File:                     KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier:          xhETao7cMW2xdhZjBlzJZIkY83J9KgjtLpJsJ+7xXrU=
Subject key identifier:   1E:9F:8A:24:84:9A:A5:AF:B7:2A:DA:AE:11:E4:5F:59:20:4A:DB:7F
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer:       /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial:       0198D7A9551F1E512AFF8FD3431128F8F42C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number:          0E62
Signing time:             Sat 23 Aug 2025 16:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:55 +0000
Files and hashes:         1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: i6aV1Hy8VzQu/LWH5Scf7mvNVJOO2OPc0U/eKf37PSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:55:1f:1e:51:2a:ff:8f:d3:43:11:28:f8:f4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
        Validity
            Not Before: Aug 23 16:00:55 2025 GMT
            Not After : Aug 24 16:00:55 2025 GMT
        Subject: CN=1e9f8a24849aa5afb72adaae11e45f59204adb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:9a:a7:10:9e:c5:38:12:39:6f:69:10:90:
                    19:b3:a5:be:a3:4d:4a:d2:9b:2e:73:02:5b:21:e0:
                    98:66:b0:84:3c:76:01:5f:32:60:a9:f8:95:96:dc:
                    94:3b:05:97:58:29:0b:c5:7b:43:9f:2a:e4:3f:21:
                    23:14:28:41:39:af:76:cc:f9:e5:a8:63:52:a3:73:
                    ad:3b:1c:9e:7a:2f:75:26:ca:b0:46:59:e3:4d:06:
                    4b:9f:d2:41:e3:b0:80:9a:ac:60:d2:d9:76:88:fd:
                    cb:96:5b:5f:b2:4c:5d:a8:48:f2:de:98:9d:f6:75:
                    4d:b9:de:69:ec:f4:79:22:63:61:b0:c4:9c:37:66:
                    3b:e4:d2:b4:4e:4c:2e:79:ff:b8:99:eb:5d:44:0a:
                    b1:97:48:f4:4d:1e:66:68:b8:6b:b3:9b:26:92:ea:
                    65:37:8c:83:32:01:a0:b9:a5:5a:70:b2:4c:81:d9:
                    13:ad:59:37:7a:ae:11:f9:40:36:70:75:92:f6:42:
                    25:70:7b:ab:ed:f6:1d:8c:99:04:ab:e3:06:f5:19:
                    5c:3f:a7:6e:7d:01:75:ea:da:a8:b3:bd:f1:5f:8d:
                    27:26:be:d1:6c:e4:30:e0:32:f4:ce:8a:aa:c8:3e:
                    82:c2:06:62:d8:d3:bf:91:20:ab:61:ea:24:46:26:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9F:8A:24:84:9A:A5:AF:B7:2A:DA:AE:11:E4:5F:59:20:4A:DB:7F
            X509v3 Authority Key Identifier:
                keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d6:18:fd:4a:40:9b:9c:f7:40:42:03:84:92:ea:35:f0:97:
         b3:33:45:6c:06:0b:c8:4c:87:d9:f7:56:50:33:39:62:c1:b0:
         86:21:ed:b5:9f:13:4c:71:07:58:2c:66:a4:1d:bf:3f:75:9c:
         7e:4f:1e:1b:bd:78:9a:0c:80:e9:41:fa:f6:b8:03:0c:f8:c6:
         04:c3:f7:33:fc:73:8c:2f:f1:cc:ef:db:d9:2a:85:f8:5a:06:
         b1:04:63:65:d4:76:a9:14:aa:d1:14:6e:a8:d3:0b:14:7d:23:
         59:c6:07:6e:2f:45:03:8f:24:6f:a1:39:82:1c:24:a5:d8:7b:
         8e:b7:5f:bb:fb:a5:63:2a:a4:bb:a2:6c:44:db:46:ef:f9:4a:
         1a:71:d3:ae:0a:26:0f:54:00:82:82:6a:90:06:22:39:bd:9e:
         5a:58:fa:13:38:8e:d9:a4:b1:1f:77:4c:2c:71:5a:0a:8f:59:
         e8:f4:6f:3d:8e:4a:aa:80:f8:2b:b8:07:a5:f8:a4:6a:be:92:
         77:a3:29:ed:90:09:04:70:f5:c7:50:bf:35:2d:b1:ff:02:2e:
         6e:80:ac:d3:db:cd:8b:eb:86:7a:bf:07:ef:f5:b4:83:df:82:
         b0:02:ec:b3:d5:42:7a:05:bd:12:b1:57:d5:cc:c3:af:3a:61:
         d8:9d:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:44:21 2025 by rpki-client