Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          qcoamUXPOrkesLd/ylQMOOk7wqB1ktLGaB2xrwW6IHc=
Subject key identifier:   71:7D:82:96:87:B5:7F:26:B3:5B:4A:9D:11:5D:7A:FB:B2:58:B6:F5
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       0198D54E0C14F2FA3FD6799A0A350045D155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          10A6
Signing time:             Sat 23 Aug 2025 05:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:58 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: NuR26CWCCHCGaRhkEFl9lgZyPFQpvSFnemvkOb5FRCw=)
                          2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:0c:14:f2:fa:3f:d6:79:9a:0a:35:00:45:d1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: Aug 23 05:01:58 2025 GMT
            Not After : Aug 24 05:01:58 2025 GMT
        Subject: CN=717d829687b57f26b35b4a9d115d7afbb258b6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:1b:5c:4a:44:b2:74:17:05:b1:d6:c2:a3:
                    d2:6e:0e:d0:63:08:3a:4d:20:6f:29:ad:e6:34:84:
                    85:37:d9:8b:9b:4b:cc:84:10:02:42:5f:df:97:99:
                    e5:2a:ba:ed:24:01:73:51:13:c1:6a:c3:f0:5b:a6:
                    be:f0:43:4d:58:6b:18:1d:c2:de:1b:2c:53:cf:54:
                    39:45:9f:18:23:c8:a9:cb:b2:12:76:56:5b:28:ef:
                    b8:af:3d:da:30:94:a7:fd:e5:bb:38:82:40:4f:5f:
                    d5:64:09:53:a3:74:50:e0:c0:ff:8c:c1:e1:2e:7a:
                    76:e6:09:d3:a4:69:a4:70:79:c9:5f:56:0b:bf:28:
                    b9:f3:01:0a:34:3e:dc:36:78:96:60:53:04:f7:a8:
                    ee:1d:02:a5:42:c8:14:ec:ba:61:c8:c2:f9:cb:a9:
                    c3:d6:d4:0c:d1:f1:b9:e8:0b:99:35:4c:56:31:98:
                    32:41:cc:0f:f2:9c:7d:69:5b:f6:79:39:eb:a8:db:
                    36:4b:b9:ef:cc:75:58:0c:5c:a4:9b:23:ec:cd:a8:
                    1a:6e:25:60:c9:36:b7:ff:a5:8f:5d:3e:3d:9b:a2:
                    bf:d3:a5:5c:0f:62:8d:62:cc:52:0a:b3:c8:ac:9f:
                    72:56:a4:08:cd:a5:af:be:f5:5f:09:4c:d8:9e:cd:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:82:96:87:B5:7F:26:B3:5B:4A:9D:11:5D:7A:FB:B2:58:B6:F5
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:4d:45:22:6e:ba:d4:ee:12:59:62:d9:54:74:39:ec:fd:
         e6:ad:42:a3:a6:61:9f:3e:50:1f:c8:e0:e6:45:e6:a9:3b:c2:
         43:36:20:f1:7f:d1:3f:17:da:3b:c1:a9:30:46:b4:81:05:c3:
         ff:a0:16:51:6b:1b:3c:e8:01:d3:15:ee:19:38:28:9e:14:2e:
         bd:41:ac:ac:9b:75:d2:bc:17:a0:2b:7c:b6:20:27:af:d7:57:
         fe:51:1e:73:2c:60:a2:76:5c:21:20:44:79:15:8e:d5:89:fd:
         aa:78:4d:87:70:aa:b8:16:07:53:b8:65:9f:00:07:2a:23:69:
         b4:f5:3c:ed:10:6b:bd:63:80:f6:d5:f3:75:f6:12:29:21:6e:
         8f:e8:f1:ec:e7:7d:a4:c9:e5:b1:67:f8:ff:3e:e5:af:d1:f5:
         e3:05:6a:7c:b7:67:64:69:83:48:fe:20:dd:5b:21:48:ac:56:
         c5:aa:50:93:0b:13:34:32:18:9a:af:10:9e:3f:8f:91:7a:63:
         57:43:38:0e:22:0b:9c:fc:a8:3b:af:bc:60:b9:07:4d:53:60:
         06:31:37:19:fd:8e:c2:0f:1d:9d:d1:9f:a1:b2:f2:8b:82:a5:
         80:cd:0d:c6:a3:5c:c4:39:7b:85:30:d2:aa:77:f3:66:e5:71:
         34:de:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:47 2025 by rpki-client