Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File:                     Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier:          KCN9rjJZ8JgU1oV9+X2ttWTJiyiCKON53epxvXyv8C8=
Subject key identifier:   8A:D1:BB:81:87:2A:B4:86:B0:D2:DB:18:69:6A:1E:FC:DD:A5:78:07
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer:       /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial:       0198D54E1E77578FD2CCE78D5F09910F3DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number:          02E3
Signing time:             Sat 23 Aug 2025 05:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:03 +0000
Files and hashes:         1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: ZWS70oPOAPlh0CH8Mqx/WVhxhS4V65aJL+WMKD7TET0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:1e:77:57:8f:d2:cc:e7:8d:5f:09:91:0f:3d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
        Validity
            Not Before: Aug 23 05:02:03 2025 GMT
            Not After : Aug 24 05:02:03 2025 GMT
        Subject: CN=8ad1bb81872ab486b0d2db18696a1efcdda57807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:17:6b:d2:8f:07:1f:80:fe:10:31:43:5a:f0:
                    9f:72:fd:bd:8c:93:dc:84:80:dd:f9:52:cf:e8:68:
                    cd:9e:a9:9c:b6:24:36:5d:8e:0d:9b:62:ff:cf:05:
                    04:0c:1b:bd:20:c9:09:16:06:ed:ef:9b:da:f4:8d:
                    9f:a9:d2:03:66:51:59:9d:f6:c8:5b:59:76:c7:1d:
                    9d:4f:8a:03:04:2e:8c:44:60:22:c4:6a:08:06:1b:
                    28:74:d9:9f:fb:3b:eb:40:31:61:9c:80:d5:b8:0a:
                    06:01:1c:5d:1e:e4:db:e8:33:e1:1b:93:85:77:31:
                    f5:64:1f:69:b9:65:6c:f1:75:72:f6:87:c4:e0:2b:
                    1c:56:c3:d4:ab:81:d9:bd:df:de:09:a9:fb:54:82:
                    6e:26:b3:c0:21:a2:cd:0e:a3:62:73:f3:23:2e:93:
                    a2:50:cf:38:3d:43:be:e4:3b:05:8c:ee:48:d7:25:
                    61:ce:a8:13:b1:d1:3f:1d:df:28:02:b4:a5:ce:ff:
                    e7:57:6a:a6:09:2e:27:ca:cc:a0:5e:97:43:13:78:
                    fb:2d:48:ae:bd:64:3a:34:fc:d4:80:a3:d8:64:89:
                    af:62:e1:4a:dd:c6:8c:54:8c:d2:d7:7b:de:8d:04:
                    7c:57:74:ed:93:a8:f0:b5:5b:71:9b:8c:02:20:53:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D1:BB:81:87:2A:B4:86:B0:D2:DB:18:69:6A:1E:FC:DD:A5:78:07
            X509v3 Authority Key Identifier:
                keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:15:7b:8b:9b:df:7a:de:b5:a8:05:ff:9e:9c:14:f0:13:2d:
         5d:17:d9:bf:75:d5:e7:45:e5:c3:ab:82:8c:07:83:f4:fc:44:
         65:18:b3:43:d3:54:05:28:47:3e:df:b8:ca:1d:5d:12:e0:f0:
         32:0a:63:45:90:3a:e0:25:83:8c:f7:69:72:e0:b7:75:71:17:
         75:2f:24:27:e8:ed:c8:56:48:45:4e:13:d0:cc:9e:d1:c7:9e:
         1d:b0:b8:ab:4d:f2:29:3a:07:46:06:40:2f:84:1d:73:7d:a1:
         fa:ca:62:50:c2:4d:55:10:42:1d:c1:86:3c:d2:11:7c:81:d3:
         af:0e:0e:54:fe:68:4e:f4:51:6e:92:2a:9c:94:21:dd:a1:02:
         0a:e3:e8:f7:b6:f2:fb:fb:51:8e:7f:42:b5:af:92:13:5c:18:
         d7:01:2f:bf:9c:fd:64:d9:c8:f4:81:fa:73:9f:8e:5a:1e:6f:
         7f:8c:33:60:b0:c7:07:b1:eb:79:31:e5:fc:57:a6:0a:cc:1e:
         1a:f4:f0:e0:27:a4:1d:1f:0e:42:e4:ef:a6:80:39:8c:d4:bc:
         76:e0:e9:3d:d1:6c:cb:37:63:ef:0c:13:05:f6:c6:25:d5:1a:
         42:d5:b2:1a:f8:f7:2e:bd:1a:93:17:12:92:45:1c:ef:d7:be:
         c8:d3:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:05 2025 by rpki-client