Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File:                     Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier:          NtwaAcWNSDn/JHy7dbUBi8iQEbXbVZCs02Yu9vz6fqk=
Subject key identifier:   2B:E7:95:0B:C2:2E:D5:5F:16:5D:9A:46:B3:76:58:2B:05:3C:E7:49
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer:       /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial:       0199239F754BBD92482A861F620535D691F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number:          0D3C
Signing time:             Sun 07 Sep 2025 10:01:16 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:16 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:16 +0000
Files and hashes:         1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: CqCW4vwQD8Ttb76MqsPq8I0TIvhrLIY8640GO8F6QLU=)
                          2: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (hash: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:75:4b:bd:92:48:2a:86:1f:62:05:35:d6:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
        Validity
            Not Before: Sep  7 10:01:16 2025 GMT
            Not After : Sep  8 10:01:16 2025 GMT
        Subject: CN=2be7950bc22ed55f165d9a46b376582b053ce749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:c8:c0:e3:fc:4c:93:57:d1:84:57:cd:1b:
                    07:f6:39:02:0c:09:fd:f9:55:bb:4f:c6:97:96:e2:
                    80:98:a2:12:4b:e8:0b:a4:32:f2:e5:86:1f:1e:6d:
                    89:d2:f5:58:28:45:dd:f9:af:ab:e8:4e:e4:b5:93:
                    97:e9:2f:58:85:06:f8:86:e0:83:d0:53:9f:63:3b:
                    4b:4e:18:28:e8:25:1b:c3:6a:cd:45:21:46:18:8d:
                    85:5e:8c:26:0d:d3:9a:02:3f:1d:91:93:10:2c:d8:
                    50:9e:3a:bd:c8:c5:dc:24:bf:6a:41:c2:11:0e:ee:
                    c1:74:3e:1b:79:f0:66:e2:fb:52:32:33:01:f9:ba:
                    9f:e2:f5:38:4e:be:6d:cc:e6:cf:53:83:47:90:d7:
                    58:38:d2:52:42:0b:cd:9b:52:46:75:23:c0:77:ff:
                    09:c4:5b:b2:3f:7b:ad:0d:22:4f:d1:80:da:37:d4:
                    f4:9d:50:e9:be:41:cc:62:29:4f:8a:2a:a2:5c:9f:
                    50:3c:be:99:de:24:1a:5a:cd:04:d1:4f:f4:0e:b5:
                    24:c9:c3:98:e8:8b:e6:64:98:34:1a:0c:53:3d:4c:
                    fc:21:43:8b:cc:f8:fc:c5:34:55:e9:c5:f2:84:58:
                    f7:ce:f5:87:0e:72:83:3c:04:4e:16:d5:94:ef:0e:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E7:95:0B:C2:2E:D5:5F:16:5D:9A:46:B3:76:58:2B:05:3C:E7:49
            X509v3 Authority Key Identifier:
                keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:53:e2:34:9e:a4:69:bd:b6:85:1f:30:06:13:8d:4d:79:
         9e:c7:a6:5d:12:14:1a:ee:f0:80:f1:01:2e:59:61:33:fb:11:
         7d:68:04:6e:a2:f1:91:d8:5e:73:f6:75:8e:ca:3b:0d:0b:5c:
         51:b8:98:e3:99:94:6a:89:4d:5d:a4:bc:da:ab:ab:47:44:db:
         dd:a7:37:a4:a0:fb:03:5e:f4:35:85:58:83:1c:20:a6:38:2a:
         c7:23:6b:0d:a1:1c:12:a3:c3:d8:15:92:a6:8f:0f:95:68:0f:
         67:2c:a3:03:3f:af:f8:61:55:6e:cc:87:d8:28:88:71:15:73:
         26:5c:05:8b:36:39:a8:5c:1c:05:b6:c2:d6:9c:ec:ff:fc:c1:
         ad:df:06:75:4b:d9:07:60:78:c7:36:0d:07:af:e4:b2:ef:0c:
         32:0b:06:7c:be:9c:0e:0d:76:43:c2:6d:8a:3d:3b:26:66:3d:
         c4:a8:92:2d:5c:07:75:98:3f:8e:f0:48:67:a3:2c:c5:9a:3a:
         0e:49:2d:5a:c4:fe:7f:81:a7:a2:c0:d3:d6:35:5e:7d:2d:54:
         8b:55:c1:1d:2c:a2:10:6a:ad:29:b2:d7:a6:db:0c:ca:3b:a1:
         b7:a5:61:70:78:2e:94:49:25:a3:95:41:7c:59:9f:23:40:65:
         0e:b1:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:45 2025 by rpki-client