Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
File:                     EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft (raw, json)
Hash identifier:          dJDIihnWwyDGv1mZWwSQyQ+qMQEquQqFF5FQDHN0AgM=
Subject key identifier:   CB:EC:52:64:40:EF:43:81:B2:F8:D7:53:58:6B:33:A9:CD:B6:5D:46
Authority key identifier: 12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02
Certificate issuer:       /CN=12851d15a2d185faf368cec5e0638b011f1da902
Certificate serial:       01984AAEE26360E403C95502EC12279CB5A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
Manifest number:          0CE7
Signing time:             Sun 27 Jul 2025 07:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:31 +0000
Files and hashes:         1: EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl (hash: B+T5VEceaN3ShM3kXdhJHH5L7cxYIqnQeHUVfIO1Ij0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:e2:63:60:e4:03:c9:55:02:ec:12:27:9c:b5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12851d15a2d185faf368cec5e0638b011f1da902
        Validity
            Not Before: Jul 27 07:00:31 2025 GMT
            Not After : Jul 28 07:00:31 2025 GMT
        Subject: CN=cbec526440ef4381b2f8d753586b33a9cdb65d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:0e:50:5b:86:32:c5:a4:c6:d7:1c:65:7a:
                    80:4f:8b:d4:b9:7d:7a:8c:c8:b7:1a:d8:29:cf:ae:
                    31:2b:07:09:c9:e6:e4:c8:39:0a:c6:22:7f:04:36:
                    a9:47:a7:2c:6f:93:0b:68:e7:b5:53:0d:1a:31:72:
                    45:09:a5:58:68:73:14:88:f2:81:04:e2:25:bb:5a:
                    b1:d7:6c:ff:95:d5:c8:13:54:4f:f9:c9:c2:af:6f:
                    74:05:25:e1:d5:14:43:25:81:e7:e2:00:bd:70:9a:
                    bd:9b:53:3b:54:bf:d4:a0:e3:93:96:f2:73:ce:15:
                    ad:81:f7:2f:db:b2:82:6b:75:d9:2f:7d:a6:d9:f5:
                    c8:71:b2:6c:cd:e4:94:84:19:89:f0:92:a0:d6:fd:
                    bd:ce:f5:74:c6:c2:a5:f5:30:2a:0f:7b:cb:c3:e6:
                    86:96:3c:93:b6:2f:59:bd:75:45:00:6c:ea:84:48:
                    38:3d:78:bc:a1:1f:e1:14:8d:97:c0:b9:a2:c9:c6:
                    87:c2:c9:14:1e:aa:7d:5c:db:9d:0a:8c:a9:ed:bf:
                    b5:a1:be:ea:51:a6:0e:cf:63:74:d5:e3:47:75:0c:
                    61:dd:b7:fe:8a:c6:a0:9c:ef:b7:27:08:66:18:43:
                    28:b9:44:b8:d4:5e:f6:d7:0a:a7:2e:09:78:c4:1f:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EC:52:64:40:EF:43:81:B2:F8:D7:53:58:6B:33:A9:CD:B6:5D:46
            X509v3 Authority Key Identifier:
                keyid:12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a1:72:74:d2:0b:68:05:f4:6f:ab:ee:f8:e4:e0:a1:ab:4e:
         0e:27:4b:bc:37:fb:f6:9f:3e:72:b0:32:cb:2c:f3:1a:85:43:
         c7:23:fc:08:a1:8b:43:45:09:41:a1:19:9b:87:ee:4d:47:a5:
         b8:53:a6:e4:70:d1:ce:bd:51:65:a8:21:e3:b3:39:73:12:d2:
         6b:05:2f:a8:dd:84:47:01:28:51:e8:db:4c:0a:43:11:ac:36:
         26:21:c1:37:38:af:34:ca:8e:7d:e1:1b:1c:ed:c8:5f:a8:c0:
         f1:ae:dd:5b:dc:92:89:ac:07:7a:a6:3c:1a:18:16:5c:a8:11:
         fc:da:9b:44:5e:6d:39:14:9c:40:29:b4:86:9c:fc:d9:5f:8d:
         32:44:89:3c:fd:cf:4a:ff:04:e6:ef:b0:03:b2:83:9f:bb:01:
         68:75:f1:dc:13:e7:a3:92:5b:a0:fb:03:ae:cc:cc:01:4f:b8:
         c7:3b:91:fc:13:8b:9d:be:48:d8:ad:18:22:30:74:e3:ed:21:
         5e:df:8a:b6:0c:48:69:08:3a:59:24:05:72:e7:42:c0:7a:10:
         e4:7c:8d:d8:f9:a2:cf:22:00:ec:ed:db:21:0a:ad:b1:0e:de:
         31:7e:e0:55:3b:8c:df:3c:16:c9:c2:c7:d8:5d:88:d2:ca:ea:
         f4:eb:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:51 2025 by rpki-client