Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File:                     eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier:          tkTuie0P+DMZNy4wF4l8IQxYohfYU9Aq35J9QF5gAR4=
Subject key identifier:   48:E7:2F:9A:D1:25:BD:80:8B:9C:3B:30:9D:55:1C:6E:4A:32:13:48
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer:       /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial:       019849D347A0FC2C2445CBFFAFA0FD609918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number:          15FC
Signing time:             Sun 27 Jul 2025 03:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:39 +0000
Files and hashes:         1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: M0tSmwZEbLEsQs1553RbZJI0blD2hfwGssooDZEGvmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:47:a0:fc:2c:24:45:cb:ff:af:a0:fd:60:99:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
        Validity
            Not Before: Jul 27 03:00:39 2025 GMT
            Not After : Jul 28 03:00:39 2025 GMT
        Subject: CN=48e72f9ad125bd808b9c3b309d551c6e4a321348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:ae:b4:23:04:cc:46:45:b6:73:a8:89:bf:
                    15:fa:73:5b:a9:f4:e5:e8:23:5b:33:44:44:ef:1d:
                    44:50:74:3d:86:b6:88:6b:b5:a4:98:9b:26:09:8e:
                    2c:b6:93:3b:a3:9f:76:b1:7c:8c:cd:44:99:79:5e:
                    86:6d:3e:28:4b:e2:39:6e:fc:3c:91:5d:5e:bb:aa:
                    ce:d3:9f:57:5c:20:b7:93:4a:35:5b:61:e1:12:d9:
                    00:df:e7:9c:90:63:c3:6b:2b:d6:70:e0:ec:f8:9c:
                    6c:c2:25:0f:a6:a2:86:a0:8f:e9:3e:85:f0:60:b3:
                    b3:97:d0:d8:33:aa:0e:a7:f2:5b:88:3f:aa:86:0d:
                    2d:3a:84:7d:e3:4e:a9:eb:30:69:0b:91:bd:7f:22:
                    8a:4a:d7:31:c7:fa:2c:34:0f:b4:4c:29:36:62:fc:
                    a5:fb:1b:f7:45:ea:df:83:d2:c9:cb:a5:e4:0e:9d:
                    70:7b:28:1e:0d:ab:60:fd:19:29:cf:f4:c4:fa:0b:
                    d3:60:81:f2:c5:83:96:0f:bd:fa:9d:ec:11:00:6f:
                    2c:a0:7e:0a:20:e1:4c:ac:54:13:6e:a6:19:54:c3:
                    40:34:2e:c1:4a:aa:be:85:7c:32:ee:06:9e:c2:3c:
                    14:e5:60:50:ef:bc:1d:cc:96:c5:86:0c:7f:e7:81:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E7:2F:9A:D1:25:BD:80:8B:9C:3B:30:9D:55:1C:6E:4A:32:13:48
            X509v3 Authority Key Identifier:
                keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b6:02:c8:e3:7b:93:d0:e1:e3:7c:4d:cc:62:cb:5d:67:35:
         2b:02:26:bd:5a:ee:26:99:33:7c:fe:cd:9e:ee:36:89:24:e5:
         db:b7:cc:87:e7:bb:10:fc:3a:5e:8a:77:ed:1a:ad:c8:2e:40:
         cc:98:e2:0c:fd:88:cb:f6:a9:eb:ab:2c:df:78:58:43:6e:80:
         dc:eb:a4:52:82:12:43:ab:39:3a:28:79:1d:f5:8d:3c:70:79:
         e2:70:a4:2f:a6:98:72:40:36:df:dc:36:4e:ce:01:5b:9c:bf:
         2f:a0:1e:20:66:b6:cb:a4:48:c3:f1:bd:ce:32:70:8a:2b:80:
         eb:9a:14:c3:82:99:73:9f:15:27:32:b4:89:a5:09:c8:1e:a2:
         b8:fd:70:7f:05:96:80:07:5c:7c:e8:58:c2:54:a3:e9:9c:67:
         f6:b2:a6:5c:a8:cb:0b:53:df:61:62:81:9d:e6:22:fb:d5:5a:
         55:87:fc:ed:51:fd:f4:22:81:a4:2a:13:7c:d9:c9:a8:b4:0c:
         ee:1b:07:a6:e1:e2:49:e2:ca:93:ab:87:87:cf:d4:de:4e:70:
         8b:e5:65:ae:e1:c7:4a:b1:49:14:56:7d:16:37:24:0b:95:90:
         97:8c:53:cb:80:ee:3d:46:38:8d:f8:62:da:31:28:a8:b8:5a:
         d7:09:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:23 2025 by rpki-client