Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
File:                     Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json)
Hash identifier:          rqkTyLbj9mfGny+2dJQqNQJjP5VQCqk5u02QJCLz7wQ=
Subject key identifier:   B8:B5:BB:06:EA:73:2D:49:A0:A3:DD:35:5F:42:51:A3:4C:48:28:22
Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Certificate issuer:       /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Certificate serial:       019852317835471D4FF47655DD2918EF6288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
Manifest number:          01C4
Signing time:             Mon 28 Jul 2025 18:00:30 +0000
Manifest this update:     Mon 28 Jul 2025 18:00:30 +0000
Manifest next update:     Tue 29 Jul 2025 18:00:30 +0000
Files and hashes:         1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: UPa0TpTSA9OSgpNfHq0QJNM3WklfEcKS4Jbt4g6z9wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:31:78:35:47:1d:4f:f4:76:55:dd:29:18:ef:62:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
        Validity
            Not Before: Jul 28 18:00:30 2025 GMT
            Not After : Jul 29 18:00:30 2025 GMT
        Subject: CN=b8b5bb06ea732d49a0a3dd355f4251a34c482822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:14:cf:08:b5:cb:13:d1:b6:15:a9:72:5e:
                    41:43:1d:f5:bf:23:89:c3:52:81:8c:9f:a8:66:59:
                    48:57:24:e5:7c:69:74:0f:16:af:cb:53:4a:1d:be:
                    08:7d:70:29:c8:01:76:aa:7b:9e:39:c8:86:90:d7:
                    18:18:91:bd:26:bc:71:44:e7:85:2a:98:66:cd:18:
                    e6:46:50:31:5e:7b:f5:6f:18:d1:09:6b:7c:41:d6:
                    ab:33:40:b9:66:1f:de:31:86:a2:b3:c1:92:8a:a8:
                    11:05:9a:cc:40:45:a4:72:c3:ab:5d:d1:59:70:44:
                    b4:ff:ec:0f:6d:a3:72:11:84:ae:72:09:73:a3:75:
                    e4:be:7c:22:22:42:19:43:bf:f5:a9:58:a3:49:8b:
                    eb:bc:2a:34:de:9e:b1:79:72:59:2d:78:f7:83:ea:
                    04:49:bb:1b:40:cd:fc:74:42:38:1f:8a:8d:6a:09:
                    9c:28:7d:7b:49:4c:a4:7e:fa:53:b5:7c:34:3d:28:
                    4f:2c:bf:3c:7d:6e:70:3d:ab:a7:e5:bf:45:7e:6d:
                    55:a7:f0:ac:a1:bf:0e:ae:ba:07:fe:b3:0e:75:55:
                    69:95:fa:ab:27:85:5f:83:2e:37:9d:a0:09:09:82:
                    f7:d9:08:21:df:a7:9c:77:5a:8e:73:92:d0:a3:a5:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B5:BB:06:EA:73:2D:49:A0:A3:DD:35:5F:42:51:A3:4C:48:28:22
            X509v3 Authority Key Identifier:
                keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e7:c7:ef:58:c6:1e:1d:45:bb:21:71:0c:ca:6d:53:ce:f8:
         b4:a0:16:1b:90:fd:c0:f8:13:32:24:06:1a:80:d1:b0:a5:7b:
         33:7a:a5:7a:b3:51:c6:4e:44:b7:f7:22:6e:4d:b5:2c:4b:1e:
         a0:ce:c0:e2:76:05:94:25:4c:a6:4a:b4:41:43:d9:c1:ef:92:
         40:7f:e1:23:de:fa:ea:48:0b:82:52:23:15:cc:2a:f6:31:f8:
         6c:45:df:01:91:9e:2e:55:d4:39:0e:87:f7:21:46:a7:be:47:
         6a:65:be:e8:a3:14:e5:60:79:d8:14:35:c1:8e:ac:2a:5b:17:
         33:a8:e2:36:c3:5f:55:05:3a:2c:81:b8:bc:c6:bc:63:61:f9:
         59:c8:08:fd:18:43:6f:17:7f:96:2c:f2:c7:93:63:37:21:69:
         30:56:23:7a:de:7d:e6:6b:89:e9:45:c5:04:3b:89:e4:50:27:
         78:7c:be:25:34:ff:a2:77:84:49:95:c0:8e:ee:4f:be:50:e7:
         ff:cc:6b:49:49:4c:7b:1a:ad:3a:11:26:74:83:c2:bd:d3:78:
         10:ee:12:03:cd:26:de:0d:15:12:06:54:b1:f2:a4:b7:89:fd:
         56:4e:81:d1:56:ae:d9:a6:eb:dd:3c:c9:ff:7e:7b:28:5d:a9:
         ad:a8:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:14:43 2025 by rpki-client