Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File:                     ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier:          k2DWf3ALSKiiD/PQ5r1W+l4nmJR+oJMEMt7asNnXm50=
Subject key identifier:   80:37:24:41:7E:52:31:4A:51:4F:DB:09:60:A8:35:B8:05:BB:70:17
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer:       /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial:       0199239F1BDD4701FC57A107E37A22861BF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number:          148C
Signing time:             Sun 07 Sep 2025 10:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:53 +0000
Files and hashes:         1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: rDwLDfpFJ0Uy9XCfAqwgP5XCvM6Ulw/3X4KvhEa9/2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:1b:dd:47:01:fc:57:a1:07:e3:7a:22:86:1b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
        Validity
            Not Before: Sep  7 10:00:53 2025 GMT
            Not After : Sep  8 10:00:53 2025 GMT
        Subject: CN=803724417e52314a514fdb0960a835b805bb7017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:2d:b1:20:2e:91:ef:1a:30:e9:be:41:7f:
                    6c:43:ed:ed:4d:df:57:9c:e6:3c:66:71:17:12:5c:
                    98:4a:4f:31:a1:a2:0e:7e:a3:80:f7:28:8f:c4:9d:
                    28:89:c8:53:97:80:26:75:30:96:36:00:59:d2:2f:
                    23:9c:4c:33:fe:bf:e9:35:1b:db:d6:74:1b:2d:bb:
                    7b:5d:dc:ee:50:63:20:96:f6:70:75:8c:e8:d6:37:
                    41:ae:91:80:77:0d:3b:2a:3b:10:d7:5c:97:72:b8:
                    f8:3c:04:1c:f8:b9:42:22:3d:a5:a4:e7:bf:c7:b3:
                    6b:a2:59:d1:65:84:56:ce:ef:52:8c:35:53:8e:c1:
                    e4:c3:8b:e0:de:3e:2e:10:5b:07:45:53:36:57:78:
                    01:09:54:7a:8d:8d:e4:70:b9:9b:ce:2f:6c:81:86:
                    20:d0:3e:de:04:8d:fb:a2:3d:55:a5:7f:84:da:da:
                    61:14:4e:dd:cf:c6:cb:eb:f2:1e:6e:b3:9a:b6:b2:
                    dc:72:39:c7:97:09:62:3d:8a:96:4f:f1:86:b1:4d:
                    44:f9:2c:48:93:77:0f:41:f5:6f:8c:e6:dd:81:6c:
                    af:35:16:29:88:dc:b0:f7:73:a3:3c:00:01:f8:fd:
                    38:30:b5:27:a0:a6:16:49:d3:bc:df:10:d2:e7:3f:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:37:24:41:7E:52:31:4A:51:4F:DB:09:60:A8:35:B8:05:BB:70:17
            X509v3 Authority Key Identifier:
                keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:20:5b:23:52:4a:b8:ee:70:c7:e4:d5:86:1e:19:ed:f6:
         65:68:c0:26:cd:53:1d:81:08:17:f1:85:c4:49:b4:ea:40:48:
         05:4e:5a:c9:39:d0:94:1a:65:93:c7:07:5c:8a:df:ed:01:ca:
         a5:f2:e3:02:f4:5c:20:7c:80:69:61:72:67:09:83:f3:fd:cf:
         09:53:9a:45:4d:df:03:da:43:62:7b:95:c2:10:58:3b:be:4e:
         ca:de:b1:fa:41:c0:d7:c6:84:e9:9f:13:a0:28:36:fe:96:55:
         66:5a:a3:55:fe:d9:5a:04:8f:b0:56:3c:3f:59:03:a2:9d:7f:
         6a:05:5f:7c:5a:b9:72:3c:ca:ad:8b:3d:6b:1b:e4:01:38:7a:
         0d:49:15:d2:a7:9e:29:0a:dd:07:06:d6:35:9d:f0:dc:30:aa:
         e3:10:33:bf:45:53:6b:3b:f6:0f:53:78:59:35:53:a9:dc:56:
         a6:a7:06:6f:89:9f:96:d1:4f:78:1f:a8:3e:12:74:1f:c3:d1:
         79:1b:40:7a:07:d7:da:9a:2f:85:e4:2b:c0:ac:91:49:ea:1a:
         4a:49:f3:3c:40:f5:b9:8e:8c:24:f3:51:ed:90:9f:ff:8c:c1:
         80:73:32:90:03:7c:22:92:ac:af:3c:0b:dc:45:29:76:f8:b8:
         45:50:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:09 2025 by rpki-client