Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File:                     zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier:          K2PaHVosibxZomZ/EN6eM80pIRo3BACZAQXxedrjLcI=
Subject key identifier:   77:9B:E8:2A:AB:F3:8C:00:C4:6F:A7:D5:0A:E9:29:36:B3:EC:28:26
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer:       /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial:       0198D515F3BF15DBD2F8AE433D8AA2888290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number:          01DE
Signing time:             Sat 23 Aug 2025 04:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:42 +0000
Files and hashes:         1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: +ZtDagtplEbXgTG3Nxkzf+YLyDgAn3dnrwZGFHx70Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:f3:bf:15:db:d2:f8:ae:43:3d:8a:a2:88:82:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
        Validity
            Not Before: Aug 23 04:00:42 2025 GMT
            Not After : Aug 24 04:00:42 2025 GMT
        Subject: CN=779be82aabf38c00c46fa7d50ae92936b3ec2826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:cd:66:88:e1:8f:f1:de:07:dc:8b:8b:b4:
                    8d:be:6f:4b:5d:f3:3c:84:66:4e:2e:a1:96:08:a4:
                    7f:58:d0:b5:37:1b:9c:89:b9:75:e4:a8:4a:fb:7a:
                    84:c1:07:32:3a:a4:9c:8f:df:9b:a4:68:8f:bc:0a:
                    06:c4:4b:2e:a4:42:7a:8e:db:9d:b2:0d:79:23:6f:
                    9f:72:34:8c:86:54:bc:b8:5c:66:5b:b5:34:46:aa:
                    7a:87:4d:8c:af:17:44:d0:0b:5f:a6:90:47:c5:76:
                    ad:61:f1:1d:45:44:c4:e5:f0:26:2b:af:ae:62:12:
                    94:fb:de:a0:19:34:f5:dc:df:09:a0:60:b6:5a:1a:
                    85:ba:aa:7d:66:06:6e:7d:49:0a:11:b4:9d:29:c7:
                    03:3f:76:e7:74:c1:d8:d6:e4:82:03:67:f6:8c:98:
                    e7:85:ac:64:ef:09:e6:61:7d:7d:da:42:56:8f:a2:
                    9d:4b:37:b1:15:5b:74:86:44:91:23:d7:e2:7e:e1:
                    32:23:27:2d:19:75:97:46:56:9f:e9:e6:4f:54:3b:
                    24:07:32:f7:7c:6f:d4:a7:91:e5:66:b1:d9:96:e7:
                    25:2c:bb:84:04:89:db:b0:d4:0d:4d:6a:38:9d:79:
                    f2:85:e7:66:0b:09:c0:87:ec:0c:6d:99:ae:29:69:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9B:E8:2A:AB:F3:8C:00:C4:6F:A7:D5:0A:E9:29:36:B3:EC:28:26
            X509v3 Authority Key Identifier:
                keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5d:6d:ab:ab:11:0a:ea:dc:7f:4a:50:6d:d6:16:49:91:4c:
         cb:53:d9:76:ff:28:d4:79:8f:2e:cb:b3:75:07:dd:ee:88:81:
         7b:49:6b:17:5a:b2:fd:5c:4b:9a:23:73:95:c9:fb:54:45:20:
         21:e8:a1:40:09:c9:c6:03:c2:e3:38:9c:08:0f:10:6d:c8:ec:
         b8:fd:69:dd:dc:8f:60:77:fe:be:65:5c:fb:c3:c9:c7:0f:11:
         20:21:15:f8:ff:1f:b1:a0:b6:d5:91:58:ed:30:a8:b7:a7:a6:
         b9:7f:01:92:2f:d8:b4:02:70:7e:0f:5a:43:68:64:0b:9a:83:
         0a:95:b3:86:1e:26:d0:2e:64:e5:60:d4:25:a9:d1:35:40:0b:
         29:a2:b9:c3:ee:d6:0d:54:06:45:88:ca:1e:56:29:e3:06:c3:
         cc:1e:38:db:e2:52:61:95:48:8e:f6:8c:01:9f:45:b6:51:87:
         da:03:56:1f:23:85:9a:45:27:0f:77:36:db:fc:8d:fa:e7:25:
         f2:df:bc:59:07:c8:09:b8:e3:98:9f:c8:5f:0a:2a:45:71:59:
         37:af:4c:17:dc:34:20:c1:f4:24:b5:82:e9:34:c0:00:e6:f2:
         b7:a3:6e:b1:16:74:f9:4b:ec:93:17:47:8c:2a:f1:05:aa:e9:
         02:f1:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:09 2025 by rpki-client