Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
File:                     69xd5v5ftQVVoFyXxbDdR369C_U.mft (raw, json)
Hash identifier:          ZXpVv8IZdnpZ3iIkUxjFzyqEmhyHHIEbdT1azah5Vlo=
Subject key identifier:   08:D4:AA:D8:04:05:F2:CD:85:C8:2C:61:0F:51:C2:65:D7:DD:29:2B
Authority key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Certificate issuer:       /CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Certificate serial:       0198D66134198AA75D92D0D28A7870F1B5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 10:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:31 +0000
Files and hashes:         1: 69xd5v5ftQVVoFyXxbDdR369C_U.crl (hash: S8UxKgdVKjjdQSzYnpyfEmVgCKV/L0im5mwfOSwA3KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:34:19:8a:a7:5d:92:d0:d2:8a:78:70:f1:b5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
        Validity
            Not Before: Aug 23 10:02:31 2025 GMT
            Not After : Aug 24 10:02:31 2025 GMT
        Subject: CN=08d4aad80405f2cd85c82c610f51c265d7dd292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:38:da:7e:66:67:52:b7:2a:96:22:98:73:
                    33:52:8f:b9:9b:28:a4:32:87:e1:2c:a0:2e:64:45:
                    cb:26:d2:2e:a1:b8:a6:bc:de:86:64:9b:30:37:a0:
                    e0:38:6d:30:6b:ff:08:83:69:13:9c:81:c3:fe:59:
                    5a:af:af:f8:25:f9:24:ce:82:a5:dc:f2:f7:27:14:
                    86:b9:b2:b1:86:7b:a9:3f:c7:2b:2b:66:65:cf:cf:
                    9c:f3:fb:3d:25:fd:9e:8e:34:98:47:f3:7a:d3:5c:
                    ef:18:f7:b5:f5:01:d4:0a:d7:d1:d8:d6:d9:17:49:
                    0d:1a:23:62:da:cb:59:f0:f9:b7:38:17:fc:36:77:
                    c2:2d:14:5d:0b:86:5a:be:2f:6e:3c:05:51:e7:18:
                    6a:21:b4:08:37:cf:a6:d2:56:20:d9:69:3f:d9:38:
                    08:00:14:3a:fd:1b:49:4a:70:3b:7d:f7:ca:72:8a:
                    af:d2:a7:57:c4:8b:75:e0:bb:69:f9:46:c9:4c:17:
                    6a:31:18:e7:45:7d:0a:3b:24:f6:7f:20:2b:1d:0f:
                    9a:b8:e0:74:38:ed:a1:e0:5f:5c:a8:6d:0b:a0:c5:
                    f4:df:13:52:cb:66:2c:67:0f:56:03:67:08:ff:c4:
                    b3:71:47:de:64:a4:17:56:f6:e4:72:b7:6f:20:96:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:AA:D8:04:05:F2:CD:85:C8:2C:61:0F:51:C2:65:D7:DD:29:2B
            X509v3 Authority Key Identifier:
                keyid:EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:60:72:8d:03:39:32:15:43:65:33:f8:a0:7d:17:9e:81:a7:
         76:1e:18:4d:2a:62:9a:fa:ec:e6:fb:1d:1d:2f:1d:b7:e9:63:
         71:8c:9e:aa:74:b1:b5:5f:78:d4:73:0f:99:b4:37:27:82:7b:
         91:3d:4d:56:e3:b3:21:f3:81:0a:05:4b:59:64:75:a6:a4:a5:
         aa:5c:68:f4:c5:72:b6:d9:cc:10:5f:b8:ea:59:74:2d:dd:3e:
         7f:5d:91:33:38:9a:70:64:61:1e:48:56:a0:ee:95:49:b9:b8:
         15:4b:59:76:89:6b:b7:7e:d0:5c:31:19:a6:d2:65:aa:e6:5d:
         f8:99:bf:d2:87:e5:8b:ad:a0:5f:54:be:c9:d9:68:5c:db:01:
         45:fb:20:d9:f7:8d:b6:d6:2a:ca:3b:d2:90:3a:c1:57:50:2e:
         18:ea:cf:e3:1d:8d:1b:20:00:dd:10:75:18:8c:a9:64:35:d6:
         3f:df:07:7d:77:90:95:e3:3c:d1:0e:bb:b1:fa:7b:5d:67:69:
         f6:dc:93:99:17:14:f8:d6:d4:2b:b9:4c:2f:e9:8a:51:cb:7f:
         db:3b:61:13:44:22:e1:c7:f9:4d:57:c1:e5:14:5e:68:69:bc:
         89:8c:20:1b:ab:bd:63:05:46:3d:56:94:4f:3e:f1:57:d9:dc:
         15:5d:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:46 2025 by rpki-client