Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          AHUT8RRzwPwPyAEpBnjsMMzayK/T3SbtSfDoL/lVCq4=
Subject key identifier:   36:53:88:34:D2:74:F9:EF:A9:3A:45:F7:7F:CC:FD:84:B7:87:A6:DE
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       0198469B3EF07C2CAB590D04B8F32EEE3E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          05D7
Signing time:             Sat 26 Jul 2025 12:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:35 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: j7coScRT0CX12uYvH8MScOOPWc0qJ+sJWUSqWzGzY/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:3e:f0:7c:2c:ab:59:0d:04:b8:f3:2e:ee:3e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Jul 26 12:00:35 2025 GMT
            Not After : Jul 27 12:00:35 2025 GMT
        Subject: CN=36538834d274f9efa93a45f77fccfd84b787a6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:23:b4:38:61:b8:3e:06:c0:10:01:42:67:
                    d0:3f:09:ad:fc:01:07:08:8d:3a:47:14:79:8e:39:
                    3c:69:0b:11:ab:a5:32:3f:fc:80:3d:8f:f9:79:36:
                    8d:45:00:fb:d7:4e:66:e3:88:4a:5c:c2:d8:28:52:
                    a5:51:2c:aa:1d:ca:11:1c:48:c4:da:1e:c2:4f:c4:
                    9d:62:0c:77:4c:21:4c:24:31:d9:f6:e6:9b:69:65:
                    1d:66:ab:be:c9:95:0d:c9:48:f0:01:01:f5:ee:e7:
                    44:f9:73:77:85:ae:c9:ea:10:bd:4c:76:08:1b:c9:
                    1f:7b:70:20:ff:79:e6:ef:f8:10:5b:a9:39:49:db:
                    43:9f:cb:12:5b:e8:1b:81:fa:d4:d5:ad:71:21:1b:
                    fc:a4:e5:34:87:50:01:94:3d:04:94:ec:9c:ca:97:
                    d4:18:61:40:98:40:82:39:af:9f:6b:14:5f:a8:3d:
                    0c:2e:ac:89:16:ff:ad:de:2f:90:7e:ba:37:dd:b4:
                    bb:6a:ae:a4:a5:b0:ce:24:74:8b:97:fa:8e:20:66:
                    40:3f:25:d6:12:b1:ae:e4:5f:aa:e5:04:25:5c:88:
                    52:99:b4:e5:27:79:05:1b:9c:16:b7:74:f1:24:00:
                    77:1d:61:c9:7e:bc:0b:72:01:99:f0:b9:f0:b4:d4:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:53:88:34:D2:74:F9:EF:A9:3A:45:F7:7F:CC:FD:84:B7:87:A6:DE
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:10:78:03:b6:e8:f8:0b:d3:37:7c:ab:9f:19:bf:ad:d7:
         3c:4a:6f:7f:25:ec:5e:3c:7c:17:86:28:65:b3:63:78:03:b9:
         37:ee:de:e1:6c:1a:20:82:26:17:67:34:e9:30:2c:d8:04:0c:
         e7:68:f7:fb:86:1c:4a:4b:d4:8c:1f:71:8a:e1:78:78:1d:7e:
         7c:19:89:b7:94:61:53:03:c7:f4:47:03:95:2e:d2:5f:1e:b6:
         bc:fb:1d:a2:57:74:b4:51:07:5b:f5:67:86:3b:b3:e9:71:50:
         5e:44:55:5a:1b:cc:2e:9a:99:14:59:e2:96:f0:98:81:fd:1b:
         ea:4d:52:29:4c:b8:8b:8e:0f:12:89:e2:de:d4:b9:59:64:28:
         ab:f0:d8:dd:9f:6c:b2:c6:37:2a:08:b7:bd:c6:80:9f:58:a1:
         58:08:ef:b4:d6:81:76:1e:4e:0b:71:7e:39:91:6b:47:4c:3b:
         73:0c:4c:45:42:6d:97:83:11:10:3b:bb:ec:7f:86:ac:13:9a:
         ea:9a:c9:49:75:48:29:6b:06:68:b6:ac:6a:67:20:d3:5f:08:
         d7:1f:ab:86:8d:61:f8:dd:b4:37:25:a4:10:74:7d:fa:9b:dc:
         be:8f:a8:86:1e:81:af:c7:78:e7:0e:62:9a:3f:84:02:76:f7:
         ef:42:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:38:01 2025 by rpki-client