Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          o8oXKs6Um2yGWiu2ClRpdfrReLc67a7bWllRJNCjBlQ=
Subject key identifier:   BB:7A:35:BC:59:D7:01:BC:3E:8F:21:CA:D6:DE:D0:9A:07:0B:1A:09
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       0198D4A7D74519720046F64B0C318E3EEFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 02:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:26 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: /NsoDaRxa32ijLrTiPfedvUbBAF0TrgbSew5I3IkC6k=)
                          2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d7:45:19:72:00:46:f6:4b:0c:31:8e:3e:ef:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: Aug 23 02:00:26 2025 GMT
            Not After : Aug 24 02:00:26 2025 GMT
        Subject: CN=bb7a35bc59d701bc3e8f21cad6ded09a070b1a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:ce:5c:0c:b1:b6:5b:f7:0b:78:c9:1e:9d:
                    39:ba:e9:a0:04:0b:68:c7:35:54:21:1e:da:76:01:
                    5f:ab:4b:ce:94:3a:9e:88:70:ee:c8:08:f5:dc:58:
                    e1:53:a6:da:71:5f:ef:24:48:db:d6:85:7f:c4:a6:
                    10:07:4b:7b:61:de:e5:03:54:d2:25:35:6c:84:c7:
                    22:fe:44:8e:64:fc:de:ea:b2:67:c2:25:26:61:9e:
                    46:13:71:b8:44:c1:84:d6:d4:1f:12:4b:23:08:8c:
                    c7:c1:13:e4:12:81:45:a1:00:e6:98:32:a3:6a:09:
                    d4:c6:b6:85:1c:83:ba:52:4d:79:64:5b:d1:e2:8e:
                    d3:4d:42:6d:11:e5:89:84:62:39:d5:22:4e:0b:3a:
                    ff:6f:6c:4c:b3:16:71:b0:bc:6b:ca:14:d5:8c:a7:
                    26:d5:0e:59:57:49:1d:df:0a:57:82:68:14:5b:2d:
                    e5:b2:a1:44:fe:56:08:62:f3:02:2a:01:04:99:ca:
                    41:24:b2:0c:43:74:d1:72:c1:5b:94:0e:7c:ca:ff:
                    55:c9:13:53:37:5c:e4:d6:db:99:f4:f2:af:f7:8f:
                    00:de:e9:bc:a4:be:42:ee:b8:64:58:7d:30:12:db:
                    4d:b3:b0:5f:8d:20:56:a4:93:d6:69:ac:df:6e:50:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:35:BC:59:D7:01:BC:3E:8F:21:CA:D6:DE:D0:9A:07:0B:1A:09
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:20:ac:55:08:6b:56:7c:0e:b3:ec:0b:48:65:ad:2a:9a:88:
         72:88:dd:16:de:40:07:02:57:17:88:51:cc:b3:31:77:85:10:
         ac:10:42:a3:3b:a0:82:71:99:88:26:d7:c9:7d:23:0b:e9:01:
         dc:92:ce:89:44:96:b9:46:02:c7:9c:ea:2d:62:3e:e1:e3:72:
         2d:31:7b:ab:65:67:66:5a:8f:7b:a3:82:c8:e9:a0:91:91:03:
         98:70:dd:9b:42:15:96:fa:05:35:2d:8a:b3:dd:61:80:eb:2d:
         58:d7:f7:a6:09:f2:1d:0b:67:9b:7d:ea:85:ae:93:d4:87:af:
         76:2c:e6:2c:6d:87:3e:a9:d8:2c:d1:6d:0f:b5:02:04:17:bb:
         4a:5d:b1:c7:58:a7:9f:4f:86:e6:7f:31:00:fe:71:33:3f:30:
         8d:55:d1:17:e7:1c:44:47:cb:83:90:6d:ee:d3:f5:68:bc:e9:
         8a:fa:1f:04:35:eb:a5:ec:48:7b:ac:22:6c:08:75:3a:20:75:
         c0:96:b7:55:d8:5a:a8:75:6e:3f:d7:3c:b3:a4:49:0a:99:9f:
         c2:6f:b1:4d:96:06:3f:cb:5d:b9:14:4a:be:85:b8:bb:ad:a4:
         fb:ee:0b:19:ff:80:12:6c:b6:2a:3b:57:93:87:91:90:db:b2:
         e7:c3:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:09 2025 by rpki-client