Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
File:                     eJMzeVlLis4GnZO_CICksp7ShnM.mft (raw, json)
Hash identifier:          8oE8t4h0NJEo3EWtb9xZkFICZ63qoLDqFtsi0ZniRYE=
Subject key identifier:   11:67:B8:D3:04:78:6B:5C:E2:AB:98:40:C6:38:FD:F8:89:FB:A7:FD
Authority key identifier: 78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Certificate issuer:       /CN=78933379594b8ace069d93bf0880a4b29ed28673
Certificate serial:       01984AAF1280F969429C3FFCF79295038312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
Manifest number:          02E4
Signing time:             Sun 27 Jul 2025 07:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:44 +0000
Files and hashes:         1: eJMzeVlLis4GnZO_CICksp7ShnM.crl (hash: uKNsh0C7sO7SNaiMMeAOU30grnz8RM+Pj/KT2Nhzemo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:12:80:f9:69:42:9c:3f:fc:f7:92:95:03:83:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78933379594b8ace069d93bf0880a4b29ed28673
        Validity
            Not Before: Jul 27 07:00:44 2025 GMT
            Not After : Jul 28 07:00:44 2025 GMT
        Subject: CN=1167b8d304786b5ce2ab9840c638fdf889fba7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:61:73:54:d6:81:f1:59:f4:eb:d6:9c:16:
                    e3:7d:87:07:14:fc:db:ab:99:0d:cf:62:d9:c6:52:
                    e9:5a:ad:3e:55:bc:ee:64:8e:03:6a:5d:92:20:bd:
                    05:b5:2b:72:00:23:ec:99:6f:ab:25:ba:cd:86:43:
                    86:2d:1a:53:86:84:9c:5e:0e:6f:1c:e8:2d:74:16:
                    a7:af:c0:17:02:2f:b3:06:44:68:c8:ae:48:14:2a:
                    ff:12:e2:6f:a8:60:3d:b5:ec:57:81:3e:4d:8d:68:
                    da:b4:20:e8:a2:1a:65:50:ce:68:28:6d:1d:78:90:
                    3a:95:f1:1a:a1:4b:58:2f:4f:cc:f2:94:ff:d8:69:
                    dc:00:a5:b2:d1:e8:94:4a:60:5f:a2:76:95:1f:ad:
                    6c:97:de:d5:d0:a8:72:9c:f8:6c:71:1e:85:48:53:
                    e7:d3:f4:cb:4d:37:97:31:dc:0b:44:9e:89:cf:23:
                    77:21:be:b4:9f:cf:2d:93:80:ff:c6:85:36:35:c4:
                    b4:16:06:f2:19:00:a1:a7:5b:43:57:be:0e:e7:11:
                    bf:ed:16:f0:e0:95:53:7c:31:da:8b:dd:77:20:41:
                    99:aa:56:03:90:f7:16:ea:62:db:26:f2:fd:a7:4d:
                    1d:11:1e:47:1d:f2:c8:5c:f9:ad:c9:b8:1f:84:7d:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:B8:D3:04:78:6B:5C:E2:AB:98:40:C6:38:FD:F8:89:FB:A7:FD
            X509v3 Authority Key Identifier:
                keyid:78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:ca:a0:08:42:39:7a:d6:bf:ad:67:90:bf:a2:e7:49:fa:
         73:13:1d:74:7e:68:37:80:75:ef:f0:2b:e7:4f:91:13:c9:d2:
         4a:b7:45:ef:92:83:9b:34:56:5f:44:7d:97:73:97:ca:a0:cc:
         48:6e:0b:18:94:39:5e:18:c1:c0:68:ff:21:1c:e8:73:4b:ff:
         d5:64:8c:fe:d5:7a:b7:21:95:55:2b:0f:d1:d0:01:66:55:a2:
         a9:a5:06:22:5d:ed:ec:63:37:8d:37:db:30:d7:0c:b9:9a:3d:
         df:f6:8e:cf:00:0e:70:4a:c4:8e:0d:1b:b5:a6:67:03:57:69:
         23:19:10:3a:46:41:c5:59:ef:80:58:56:2f:03:5a:6e:37:f6:
         9a:ae:e0:2e:ac:4a:a3:0a:21:88:be:08:08:f1:32:64:24:53:
         d8:3d:2d:5e:09:f1:b6:53:d3:eb:14:4a:67:13:46:f1:61:51:
         9d:56:99:27:94:78:7f:7d:e2:03:44:d7:50:64:2b:be:1d:3a:
         f3:b9:15:5e:4f:80:3c:3d:70:48:cd:94:4d:17:61:2e:20:79:
         c0:d9:93:3a:80:45:b8:ff:71:93:df:84:3c:30:a2:88:4d:24:
         5e:1f:ae:c7:8e:e4:22:cd:f7:98:df:a1:ae:23:03:6d:57:ac:
         48:d2:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:38 2025 by rpki-client