Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
File:                     EOuDUEaH-ei6SAzUbqCMdd2U15U.mft (raw, json)
Hash identifier:          Dsk0bZI+sNhVyGzKScfiiTN+vnqEnxMfxuNBmlntdUQ=
Subject key identifier:   E7:B6:7A:BA:44:D3:D7:1E:20:B1:3B:E2:93:5E:3B:E4:F5:37:C6:A9
Authority key identifier: 10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95
Certificate issuer:       /CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
Certificate serial:       0199225554C5BBE5B88A215E11B5E849743F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
Manifest number:          132C
Signing time:             Sun 07 Sep 2025 04:00:41 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:41 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:41 +0000
Files and hashes:         1: EOuDUEaH-ei6SAzUbqCMdd2U15U.crl (hash: QHjSDs8MmloUqNWON09/kfdazaqXeoetPWN6T9UcA/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:54:c5:bb:e5:b8:8a:21:5e:11:b5:e8:49:74:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10eb83504687f9e8ba480cd46ea08c75dd94d795
        Validity
            Not Before: Sep  7 04:00:41 2025 GMT
            Not After : Sep  8 04:00:41 2025 GMT
        Subject: CN=e7b67aba44d3d71e20b13be2935e3be4f537c6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c5:2c:34:6e:d2:5d:17:11:7f:b1:13:f1:c1:
                    f1:32:2c:ea:a2:11:f9:f7:af:46:9f:33:e0:e2:40:
                    8e:fc:2b:63:c4:1b:24:31:0d:cd:37:09:d7:5b:00:
                    6d:c4:a3:97:9d:36:59:b1:6a:81:a6:52:28:4a:43:
                    aa:2c:58:30:ce:f1:60:8d:90:11:06:cd:a2:ff:41:
                    81:ea:72:5d:a3:96:bd:24:17:00:0e:ca:bc:ab:9f:
                    80:c6:6c:1f:41:c5:5c:41:7e:e0:9e:d9:04:af:ff:
                    38:f1:ce:42:9f:ac:53:38:64:f0:72:87:a9:54:34:
                    da:f0:3f:eb:be:b9:5f:23:ae:65:29:4f:ea:eb:d7:
                    10:17:ad:cc:1f:ef:84:5b:4e:16:aa:58:fe:4f:2c:
                    60:ba:36:0d:68:61:40:c9:6f:f3:a8:c6:2b:0f:52:
                    34:35:4b:23:e2:87:33:d1:50:8d:d5:4a:21:0e:ec:
                    0e:76:3d:0b:cb:58:eb:8a:13:8e:68:52:bf:fb:19:
                    18:36:f6:f5:bf:57:0b:e2:41:7d:9d:95:f0:85:b2:
                    ae:55:82:3d:ba:80:5c:25:4b:20:30:96:55:57:65:
                    06:61:cb:92:9d:cb:a7:13:b1:23:a3:40:30:f1:78:
                    38:1c:95:54:80:f3:4f:28:71:77:ec:64:dc:f4:79:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:7A:BA:44:D3:D7:1E:20:B1:3B:E2:93:5E:3B:E4:F5:37:C6:A9
            X509v3 Authority Key Identifier:
                keyid:10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:3a:2a:ec:fa:5c:4a:4c:83:ac:65:cf:a2:dd:e3:9b:cd:
         56:0c:c1:0b:40:d0:58:d0:9a:45:69:4b:8b:5a:d5:da:27:04:
         e1:4e:12:9e:97:aa:70:41:2f:40:71:81:a0:d1:5d:8d:7c:18:
         55:9f:4c:82:dd:0c:e8:fa:22:82:ea:0b:20:37:43:3c:a7:74:
         36:37:0d:d4:33:1c:bf:32:6c:54:7f:e5:90:03:a4:e0:0c:71:
         d5:36:24:0b:41:ab:79:95:ae:7b:a5:c8:55:6c:85:7e:d4:57:
         cd:66:ac:0f:f9:95:52:28:9a:40:a5:c5:bd:46:cf:3a:28:fc:
         e9:34:18:8a:6b:10:90:3b:13:59:bd:f1:c0:a7:4c:7d:b6:17:
         9f:e4:32:6d:7f:60:dd:03:86:7c:a1:d1:8d:bc:4b:d3:ba:dd:
         a9:94:5b:cb:a0:d7:26:f4:96:02:92:0c:cd:5b:2b:fa:b9:53:
         c8:dd:71:de:d1:54:9c:11:5e:ff:4e:af:ed:71:e4:4f:87:84:
         a6:85:00:93:93:4f:57:03:57:cb:17:88:1c:fa:f1:a9:9e:4c:
         6c:79:04:43:84:a9:4f:c7:ea:b5:76:2a:b4:6c:21:ac:78:b4:
         6c:71:10:6c:e6:ea:be:a3:d6:09:81:49:37:c8:64:85:fa:7c:
         91:b4:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:28 2025 by rpki-client