Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File:                     E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier:          VpMLsDWMb3M8zUF4kUkgI9ihxkUdUiueUANEOcxdHFA=
Subject key identifier:   DD:21:BF:35:22:5D:72:D4:C9:0E:87:F6:7C:F7:2B:C4:EA:AB:6A:A4
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       019944E1D7F4F52B421799FEC4BE9E5A8C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number:          1689
Signing time:             Sat 13 Sep 2025 21:01:15 +0000
Manifest this update:     Sat 13 Sep 2025 21:01:15 +0000
Manifest next update:     Sun 14 Sep 2025 21:01:15 +0000
Files and hashes:         1: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: cPcsHLjAhGC8j4o+R2krTXxD9wXTCBByvMQK8fDPeT4=)
                          2: Oi8bBj7abbUUGWgLnipKRlAWhqg.roa (hash: uBPR6lVF7mLe6knRM5SQ0/u91d8nwbpqoLhQPG3UKIM=)
                          3: jbGvVuouVUGuodE3wSjw_6Kl_WQ.roa (hash: 0q3TS/imhDlO4EU7lxVd1fwILuDkXznK6ePE6/PQttU=)
                          4: vyq7frrOZ18P3bS0LsRzkLQVayM.roa (hash: ahnDTdH2Zi2KbYKjlRjjF3km1v/4SmSVHP2tW2n0dn0=)
                          5: xqgSeGIVEF82G1UQzaanBBXZ4j0.roa (hash: DA3L+prbTCIOti4LbG2Ch15XaVBtWVA8dw3jHgvPOJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:44:e1:d7:f4:f5:2b:42:17:99:fe:c4:be:9e:5a:8c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Sep 13 21:01:15 2025 GMT
            Not After : Sep 14 21:01:15 2025 GMT
        Subject: CN=dd21bf35225d72d4c90e87f67cf72bc4eaab6aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:da:e7:29:41:cd:81:85:71:cf:f0:a8:78:24:
                    a4:44:df:2c:97:a0:22:74:75:6f:74:49:d8:bc:cf:
                    6e:b8:f0:44:a9:13:34:2b:fd:e1:76:8b:d6:9b:bb:
                    36:67:53:9d:ff:b9:1c:87:49:ef:23:2f:3d:c7:73:
                    e5:e0:5c:5b:bb:31:b6:9f:62:90:99:15:35:fa:0c:
                    bc:22:f9:f9:44:5a:2f:97:ec:2c:9f:50:86:97:6c:
                    52:96:d8:3e:96:6c:a0:81:e2:ba:87:5e:0b:45:bf:
                    e5:b3:b0:fa:fb:b5:6c:64:3a:03:04:c7:0f:d4:54:
                    0a:bc:6e:9f:87:a7:e0:d4:26:14:45:42:92:16:52:
                    11:87:9e:08:79:3a:da:de:26:48:fc:17:85:50:97:
                    52:e5:01:41:04:13:cf:df:33:eb:91:a4:92:f4:a3:
                    42:b4:ab:09:82:ea:9f:5f:9f:b7:02:f6:37:1c:8a:
                    4b:57:ad:bd:f1:7d:be:fd:48:87:10:94:03:04:06:
                    48:ef:8e:34:6d:7c:d7:5a:34:a4:0d:ad:90:6b:97:
                    1f:b5:43:be:e0:00:97:47:1f:a9:4b:c7:c6:b2:22:
                    f4:27:83:e3:3e:db:72:15:85:df:20:d7:6b:39:f7:
                    d4:0c:dd:d4:ab:5f:a9:b2:88:83:53:66:99:14:f5:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:BF:35:22:5D:72:D4:C9:0E:87:F6:7C:F7:2B:C4:EA:AB:6A:A4
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:06:58:02:60:7b:b2:df:1e:7e:0a:35:29:b5:98:11:5a:7d:
         d1:6d:7e:59:b0:f2:d8:37:f2:ed:e1:7d:15:17:10:1d:9d:95:
         cf:99:57:b3:92:85:15:e0:2f:25:fe:e1:19:ab:5f:a9:78:3f:
         fa:6f:03:1d:58:87:bc:6f:ea:f2:5d:e5:5e:3d:af:36:cc:b0:
         81:91:ae:a6:89:4b:f6:1a:bb:f8:8b:c6:0c:71:9a:e1:02:d3:
         9b:01:b4:48:23:5e:19:2e:95:83:b5:c8:6f:48:33:45:13:8c:
         a1:17:5a:f6:5e:ff:68:8a:09:dc:d7:73:21:33:63:76:82:40:
         ad:ef:66:c5:b5:3f:9a:3b:cc:d5:76:f3:ba:b0:da:bc:3f:63:
         6f:35:67:bf:52:92:84:eb:b3:95:07:ae:a8:e4:8a:2e:97:be:
         cc:7b:73:7f:d5:b5:23:c9:6f:d8:fc:02:f9:b3:41:97:fc:1b:
         88:cd:6b:85:81:ef:6e:c2:cd:0f:17:96:72:e2:8b:ef:47:ba:
         19:90:59:b9:a3:2e:e5:76:43:38:4e:08:96:87:d8:0e:ad:5a:
         d4:45:05:11:34:60:d2:a1:a7:1f:13:6e:e3:bd:e9:83:6f:08:
         dc:5e:03:b9:cd:61:c2:97:b7:dd:2c:cf:7c:3f:de:f7:b4:51:
         01:46:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 22:06:32 2025 by rpki-client