Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
File:                     _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json)
Hash identifier:          QEseeKTHTrdjvlqetBu1uaMAtvZ95XgF6tycHyOSRSc=
Subject key identifier:   54:A2:71:25:7F:F3:D8:9D:4E:AC:5D:56:B2:5B:13:D8:F9:2B:01:15
Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75
Certificate issuer:       /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
Certificate serial:       01992367D1960683B5713B540607FE702FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
Manifest number:          1675
Signing time:             Sun 07 Sep 2025 09:00:30 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:30 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:30 +0000
Files and hashes:         1: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: z5SId0AnT/wupEsBy3yKZSbAdX8SaIuE1DmkLEdT0vY=)
                          2: f5Ifl1Qxitth-8Qh6ozPEIX26LE.roa (hash: wIswSAYWyn5DfKJXI+1/UX9k25/3bD/WegnGLFLzMg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:d1:96:06:83:b5:71:3b:54:06:07:fe:70:2f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575
        Validity
            Not Before: Sep  7 09:00:30 2025 GMT
            Not After : Sep  8 09:00:30 2025 GMT
        Subject: CN=54a271257ff3d89d4eac5d56b25b13d8f92b0115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:75:e0:d6:c1:b8:c6:e6:d6:b1:ee:0c:cc:
                    80:2e:c4:91:a4:21:d8:05:8b:35:d5:2b:d3:0d:9f:
                    10:8d:08:aa:e6:d7:10:cd:32:81:78:3d:6b:be:ca:
                    5f:fb:74:10:09:31:7a:59:28:48:f2:ac:6f:6a:fa:
                    1a:f1:20:d7:24:bc:e6:3b:c2:d6:21:bd:c2:5f:8d:
                    f7:21:e2:c7:70:c8:19:f8:fe:67:7f:33:a9:eb:2d:
                    d0:ad:50:c0:77:76:cb:1b:35:81:36:21:eb:af:d7:
                    91:bb:63:f8:fe:2b:00:e8:09:b4:96:16:f2:a5:0f:
                    89:c7:d4:4c:1a:84:9a:3f:7d:68:4a:d0:bf:65:20:
                    2f:e4:22:1a:1f:74:cb:82:08:f6:4c:1e:67:95:6c:
                    81:28:77:c7:1f:fd:87:1e:52:20:5a:00:7a:64:be:
                    20:9f:48:59:4f:7d:06:42:53:a7:b7:72:8f:e5:5f:
                    9f:1f:ab:53:2a:05:63:b2:78:8f:10:ef:ab:8f:fb:
                    19:6f:76:46:0c:fb:03:4f:29:00:e0:c5:c1:6e:91:
                    33:be:19:29:65:90:02:24:ed:7d:a4:09:66:9d:8a:
                    12:f7:14:cd:55:48:9c:5a:5e:58:37:36:a9:2d:c8:
                    d8:da:20:4f:04:67:e0:fe:a9:fc:d0:0c:1e:c5:08:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A2:71:25:7F:F3:D8:9D:4E:AC:5D:56:B2:5B:13:D8:F9:2B:01:15
            X509v3 Authority Key Identifier:
                keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:31:4c:8f:a8:d9:e2:60:05:21:90:83:bc:7e:4c:55:7e:06:
         b4:9c:9c:83:06:4c:a9:49:45:b2:54:92:73:61:13:e3:1b:87:
         cd:5e:b0:6e:b7:c0:54:43:2b:bf:12:05:55:7b:77:73:2a:cb:
         15:3d:41:03:6c:8a:27:e0:0b:0b:36:a3:ad:b2:cf:cd:18:41:
         7c:9a:a2:37:bb:93:9c:bc:1b:29:d0:08:0b:71:d3:de:7e:13:
         fd:bc:00:6b:cf:4c:fd:68:52:06:9f:b0:77:c0:76:5f:23:14:
         c7:2c:37:0c:33:4a:6a:e9:7e:3a:8d:77:8e:8c:36:9a:4e:79:
         84:cc:be:65:19:e8:33:14:d0:0b:c8:54:f6:19:d8:64:ac:f4:
         dd:06:b8:62:98:ef:21:a2:07:81:7a:65:b3:a9:ca:cd:95:51:
         0c:9d:a5:7c:a5:44:1e:67:e3:60:87:d4:91:93:87:d8:63:d3:
         6d:71:e7:2a:f2:e8:b6:1f:65:79:83:cb:9b:fc:6c:1d:6a:dc:
         ce:7d:5d:35:a7:9e:24:2d:4b:4b:cf:33:1e:5c:6e:3c:60:a3:
         85:f0:b6:79:59:d0:97:8a:58:b8:41:ce:f7:d4:10:00:2e:90:
         0a:ed:cd:17:c8:20:c5:50:bb:74:62:ea:be:de:d3:6c:37:74:
         35:8d:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:09 2025 by rpki-client