Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          UGjwjbt6pnDI26t71MwdMIrQg7/AKbVcd2TMdO/e4Fc=
Subject key identifier:   D7:98:29:0E:5F:B0:0C:0E:51:7B:10:FC:2D:3E:BC:DE:44:A9:E5:FD
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       0199FCC6C62884887BA8E20852AB77C0F637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          113F
Signing time:             Sun 19 Oct 2025 14:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:49 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: NYksEBqJfltrpure7BcigjiX0XRx87Kb5iBt0yZB0pI=)
                          2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:c6:28:84:88:7b:a8:e2:08:52:ab:77:c0:f6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: Oct 19 14:01:49 2025 GMT
            Not After : Oct 20 14:01:49 2025 GMT
        Subject: CN=d798290e5fb00c0e517b10fc2d3ebcde44a9e5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:c2:23:f7:24:71:34:cd:a9:85:5c:1f:fd:
                    40:fd:0f:6d:ec:bb:9d:05:21:91:6f:67:9d:bb:6f:
                    95:c9:76:e3:40:b8:23:14:78:9c:03:5b:28:6f:47:
                    b1:4e:8d:0e:ec:b4:48:e7:d1:7f:a5:06:c7:84:7b:
                    77:41:84:2c:7f:cd:32:6c:a2:7c:a0:31:22:7e:f4:
                    23:3d:75:15:ba:88:0d:d8:ef:ed:a2:72:df:fb:9a:
                    c6:e5:a7:f8:37:ab:58:ba:15:dc:1c:77:48:c6:c0:
                    ea:60:9a:b6:c6:6d:c9:92:c2:cb:b9:8f:e3:8d:d2:
                    b1:39:47:64:35:27:68:2a:d3:56:43:6d:31:7d:5c:
                    ac:ef:f4:3b:34:bb:ea:1f:b2:33:03:04:ae:3c:54:
                    94:34:ef:bf:7d:ac:b2:6f:4f:79:43:e3:3b:66:99:
                    bc:57:85:64:ae:9e:d8:a2:fd:1f:86:f4:26:40:78:
                    62:9d:a6:84:95:28:e1:2e:bc:c0:ca:48:13:a3:9c:
                    cd:5c:68:59:c2:ea:ce:f4:f8:98:e3:64:16:ea:53:
                    db:62:21:76:cf:dd:65:59:0d:5d:5e:e0:52:36:38:
                    c8:31:e7:6f:ac:87:ba:dd:34:d0:60:13:1c:82:43:
                    52:2a:da:7a:08:18:09:bd:3e:02:99:90:42:b4:54:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:29:0E:5F:B0:0C:0E:51:7B:10:FC:2D:3E:BC:DE:44:A9:E5:FD
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:8d:9d:a2:c7:0c:3b:ec:50:5a:60:7f:06:3c:bd:91:90:
         9d:54:f1:3a:65:73:62:ec:86:aa:05:1c:26:6a:ac:88:35:25:
         b7:9f:bc:9f:d1:a2:04:48:53:9e:f7:3d:aa:c4:43:03:59:7b:
         49:52:5b:45:43:2c:06:18:87:32:ce:1e:cf:30:55:00:d8:c9:
         31:b1:74:95:89:bb:19:7e:fd:ea:2c:d2:31:1d:72:c7:c5:2f:
         3a:d9:cc:30:d9:28:6e:22:cc:d4:a9:4f:2d:7b:b5:04:41:a2:
         08:de:91:4e:b5:72:05:2a:bb:d5:f8:d1:6e:0d:bf:c7:67:98:
         98:ef:21:94:62:df:ba:fa:5b:49:bd:bc:25:73:9c:64:f6:4e:
         e3:40:3b:88:1d:ba:5d:af:c0:46:9a:8a:5b:57:c5:a1:a7:22:
         65:f5:54:48:ca:8d:46:58:a3:e4:85:14:77:50:24:43:68:b7:
         eb:5e:fa:11:4e:e7:9e:7d:7b:91:0f:10:ba:e1:de:3a:63:f9:
         94:1a:fd:7a:d1:0d:cd:ed:ce:3e:fc:28:65:7f:be:04:7f:08:
         4b:68:e0:74:4b:98:09:3d:e1:2a:f6:69:fc:d3:7b:b5:7c:89:
         51:78:07:10:84:46:ec:c5:8d:b3:47:3e:ed:a2:87:00:d6:07:
         b3:f6:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:59 2025 by rpki-client