Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File:                     e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier:          lMVIfQ9uSljO2W9JXHcJ1/kZPb6SsLZ9FxMq/k+pUbE=
Subject key identifier:   52:7E:EA:12:9F:DA:70:FB:F2:CC:9B:3A:4A:FA:C7:D4:3F:AF:1E:59
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer:       /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial:       019847769A31A52627E0AFBA6CA3FE050DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number:          0686
Signing time:             Sat 26 Jul 2025 16:00:11 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:11 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:11 +0000
Files and hashes:         1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: y/SiR4kzfknQ5/eKeUjrOSiECifbSu++ZjuvNsfLI98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:9a:31:a5:26:27:e0:af:ba:6c:a3:fe:05:0d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
        Validity
            Not Before: Jul 26 16:00:11 2025 GMT
            Not After : Jul 27 16:00:11 2025 GMT
        Subject: CN=527eea129fda70fbf2cc9b3a4afac7d43faf1e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:29:50:3a:55:dc:82:b5:60:b8:ed:d9:47:
                    1f:95:87:b4:40:13:1b:b0:55:56:93:d9:dc:f0:6e:
                    a2:cf:7d:d2:2d:a0:4b:9d:2b:d8:bb:e6:17:9a:08:
                    db:b0:09:13:df:c0:a1:79:6f:3d:a1:cf:50:e9:3b:
                    f3:7a:30:18:31:bb:c7:17:4e:c5:eb:c5:d0:4d:61:
                    28:0c:1a:ac:22:76:e4:9f:e8:c5:12:53:f5:03:a0:
                    7b:b5:a0:10:52:f9:db:18:f0:11:5f:cc:ca:12:78:
                    e5:90:5d:c7:c4:59:16:09:7b:e9:69:2a:1a:df:fc:
                    2b:af:58:88:40:d8:18:1d:f1:a0:ff:91:5e:00:fb:
                    8d:96:46:71:53:6f:86:da:7e:ca:06:0d:05:77:64:
                    6a:62:6e:75:70:97:4d:44:3d:cb:9f:e9:49:a9:f6:
                    a8:33:e4:d9:14:ae:b6:bb:93:af:54:81:b4:59:ca:
                    a0:62:f1:6b:ab:df:89:02:41:92:c9:31:26:d4:2f:
                    53:bd:cf:ef:2c:3d:da:51:18:68:d8:9e:30:7d:d8:
                    82:df:d5:21:36:fc:51:af:73:b2:4c:b0:d4:a4:6d:
                    35:04:61:2d:90:eb:3a:e2:34:a9:bc:1c:27:98:7f:
                    29:42:4b:f3:9d:26:88:0c:ff:0d:12:1b:ed:6c:c0:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7E:EA:12:9F:DA:70:FB:F2:CC:9B:3A:4A:FA:C7:D4:3F:AF:1E:59
            X509v3 Authority Key Identifier:
                keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:6d:62:98:a4:ea:08:27:27:ab:15:b6:ac:b0:b5:6a:7e:
         fe:78:1a:93:f8:67:9d:bf:54:86:f2:88:00:b7:8e:76:97:56:
         3c:be:b1:ed:59:f6:3e:03:b6:c0:f1:de:b2:4d:da:bd:6c:c2:
         0a:dc:1b:d6:f2:8b:ae:b5:8e:b6:e6:bd:64:5d:b0:de:93:28:
         70:76:af:16:5f:5d:bc:2d:79:bc:bb:8c:47:9c:ed:b4:00:04:
         4f:53:14:83:e1:7b:f3:04:52:8d:9e:cf:05:d2:ee:43:c2:01:
         83:c2:d8:6b:3b:58:74:44:15:ad:bc:4d:6c:fe:03:3b:32:79:
         59:2b:c7:01:01:10:49:b0:11:a4:8a:c3:d1:01:ac:0f:f9:cb:
         ce:9d:88:b5:92:fa:e7:4d:17:08:e1:52:82:cb:4c:e6:8f:fa:
         31:cb:5a:c3:ba:cf:af:53:bf:22:2e:99:b4:c8:93:90:26:63:
         a6:f8:7c:23:54:cc:78:d8:2d:93:7a:be:9b:a2:99:39:83:2b:
         01:3a:8f:d0:06:12:1a:ff:cf:60:87:1c:04:07:77:1c:e4:08:
         f0:f2:ba:b1:32:22:ec:68:13:49:7f:83:a7:94:29:4c:5e:47:
         02:a1:48:b4:3a:33:23:55:22:2f:0f:f5:4f:dd:52:ee:7c:4d:
         5e:f2:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:32:05 2025 by rpki-client