Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
File:                     1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft (raw, json)
Hash identifier:          kxzTyGJQOM0GCn4Wd9Sgp+8d4LBTnGI+UHGTSW324nU=
Subject key identifier:   EB:43:36:B2:81:CE:AD:BB:E1:7B:66:2E:CE:F9:76:9E:C2:06:AE:EC
Authority key identifier: F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81
Certificate issuer:       /CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
Certificate serial:       01982710F7F7A65C151024E490BC3A283806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
Manifest number:          4A
Signing time:             Sun 20 Jul 2025 09:01:20 +0000
Manifest this update:     Sun 20 Jul 2025 09:01:20 +0000
Manifest next update:     Mon 21 Jul 2025 09:01:20 +0000
Files and hashes:         1: 1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl (hash: e7JEhsp7RHw0k4Hx1+E/ef1TGinmhXpiNX3/SS5HR3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:10:f7:f7:a6:5c:15:10:24:e4:90:bc:3a:28:38:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
        Validity
            Not Before: Jul 20 09:01:20 2025 GMT
            Not After : Jul 21 09:01:20 2025 GMT
        Subject: CN=eb4336b281ceadbbe17b662ecef9769ec206aeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:f9:32:74:f1:30:38:71:a6:e4:06:1f:89:
                    d2:ec:8d:79:f7:e2:50:14:5d:e3:39:11:6a:d9:e7:
                    56:e7:63:54:a2:1e:87:ed:12:9c:5d:29:27:06:0a:
                    7b:3f:b6:68:93:a8:7c:ad:96:85:b9:3d:7f:59:14:
                    42:b3:8d:3e:96:f5:7a:66:be:49:b7:c5:f3:23:ff:
                    f5:fc:5f:f2:c1:56:08:77:ea:03:8a:73:87:c3:7a:
                    f3:18:a6:73:15:f3:69:ad:72:12:da:0b:09:65:21:
                    3b:f9:6c:f9:11:33:75:50:1f:c0:c6:5e:5b:92:92:
                    f8:ea:c8:ce:29:1f:f6:8a:76:72:ac:91:e5:70:e3:
                    04:f1:e2:d0:f9:54:3e:51:fe:fa:df:16:c8:3d:b8:
                    d0:4a:1c:d9:7e:34:d2:59:4d:0c:55:32:1e:ce:2a:
                    72:2f:f5:e9:cf:c7:1b:31:32:a8:6c:00:4e:df:9e:
                    16:28:79:d9:5a:e1:da:e0:6d:3a:96:39:7e:b3:a8:
                    bf:ca:45:21:b8:ed:09:49:27:ec:65:5f:48:f1:5f:
                    47:e2:8b:8c:2d:f8:e6:08:3a:8a:d7:fb:0d:63:ee:
                    86:93:54:e2:97:c1:88:95:59:fb:40:fd:2e:ea:43:
                    9e:74:8f:e3:4d:c1:42:3e:ec:a2:68:bc:c5:ad:e2:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:36:B2:81:CE:AD:BB:E1:7B:66:2E:CE:F9:76:9E:C2:06:AE:EC
            X509v3 Authority Key Identifier:
                keyid:F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:af:85:1c:5c:cc:cb:2a:63:1e:13:57:37:cd:2b:aa:04:f7:
         bf:03:c1:a5:83:b4:ae:3e:63:8b:2e:c0:48:7a:87:f1:65:dd:
         48:b4:29:a1:67:33:b6:15:9c:ea:c1:06:85:c8:37:be:a0:4c:
         75:5c:7d:3b:d6:30:e1:ea:a8:c8:92:62:78:67:b3:92:f2:76:
         e7:6f:4d:46:c5:8d:f1:91:5e:c4:a6:b0:d7:cc:74:ba:65:f6:
         0a:65:b8:89:84:b8:08:f2:42:c5:66:3b:1e:eb:51:23:21:4b:
         11:83:b3:ba:7b:b4:20:e5:66:2e:91:e8:51:89:3f:c0:da:f4:
         d4:1d:11:70:5c:3e:41:a1:5c:cd:86:f1:d6:17:93:e7:0e:82:
         db:94:05:e6:a6:33:2c:a9:e6:03:2b:18:ca:26:a6:4c:2b:7e:
         3b:93:1c:a0:bd:af:c3:7e:e4:0b:51:99:90:73:2c:f9:33:b9:
         8b:91:93:f2:23:0d:3b:73:3c:31:e6:8b:5d:5b:d0:99:5f:ea:
         69:81:fc:9b:5b:95:40:f2:39:7e:a5:cc:4e:bf:df:ec:f7:21:
         5f:1a:5f:c4:7e:20:7c:88:f3:dc:34:fb:19:c5:96:4c:55:9b:
         13:fc:40:07:85:40:e7:18:97:9f:8b:d9:e3:ca:a1:54:c3:ef:
         8f:35:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:46 2025 by rpki-client