Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File:                     e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier:          pz2fmcAnAKzo6iVmLmMt2JR/FQ09VQcgcUpFm65g698=
Subject key identifier:   02:FD:45:AF:C0:32:08:8B:D4:21:46:52:99:E7:9A:8E:B5:BA:20:6C
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer:       /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial:       01984966C786717A1155BC39C06C70EF98BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number:          15FB
Signing time:             Sun 27 Jul 2025 01:02:09 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:09 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:09 +0000
Files and hashes:         1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: 4K10MSuD//HI5UXYJcuvkZqPfrpFLV60d2YunQ8l1Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:c7:86:71:7a:11:55:bc:39:c0:6c:70:ef:98:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
        Validity
            Not Before: Jul 27 01:02:09 2025 GMT
            Not After : Jul 28 01:02:09 2025 GMT
        Subject: CN=02fd45afc032088bd421465299e79a8eb5ba206c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:39:51:28:da:6f:04:58:b5:a8:f8:ca:94:
                    89:f3:49:14:7d:79:50:b2:2d:8a:97:86:43:7c:ae:
                    c9:75:13:55:07:cf:73:75:ec:14:d7:f7:25:bc:a8:
                    bd:26:78:55:3e:c8:3a:eb:92:7f:b5:8b:01:62:74:
                    46:43:81:ef:e0:05:3a:70:a9:31:cb:a4:12:9b:03:
                    34:17:82:2b:cf:b2:63:76:d3:73:5d:ac:86:06:e9:
                    e0:43:c6:6a:72:b9:29:df:7f:3b:bb:14:4e:39:57:
                    8e:d9:65:ac:e7:4b:92:c4:42:ca:dd:50:2d:cb:ca:
                    b4:09:45:6a:67:15:5e:59:ef:42:1e:ae:68:a4:77:
                    ef:0f:6a:9f:9f:bb:6c:a2:56:a9:32:5b:64:83:d4:
                    d5:7d:ef:81:a4:b5:a1:97:0f:96:0e:cb:ae:e7:ae:
                    51:4d:a0:26:38:c5:3a:7b:cd:e1:98:b2:fa:f6:8d:
                    82:c9:f1:0e:c1:6b:ce:22:4a:62:af:41:01:d2:bc:
                    3c:dd:f3:73:60:16:77:a7:bd:3c:b8:38:90:5c:9a:
                    01:59:91:54:e1:23:c9:09:3a:0e:8f:3a:3e:74:f2:
                    49:c7:cb:46:0e:6a:cd:21:c6:b5:cf:cf:c4:3e:1e:
                    d6:0a:f6:78:5a:a3:57:bf:59:0f:18:23:d1:3e:1f:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:45:AF:C0:32:08:8B:D4:21:46:52:99:E7:9A:8E:B5:BA:20:6C
            X509v3 Authority Key Identifier:
                keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:22:54:d8:e1:3c:b0:25:b2:7b:5c:ad:ff:13:4a:c3:8f:b2:
         91:df:fe:be:7a:a0:7c:94:62:80:e3:f4:5b:c9:62:db:9c:32:
         9c:cc:c2:86:cc:59:3b:9f:b1:12:01:b2:56:ae:8a:60:8b:03:
         51:53:97:8c:25:98:26:df:a1:2a:76:5d:35:de:99:70:3d:c5:
         dc:e4:e1:14:55:cd:67:e4:2c:51:cb:2e:dd:93:8d:9d:eb:9a:
         61:de:0a:e0:15:33:9f:87:b9:ac:b0:76:05:c0:a5:ce:46:cb:
         e8:55:7e:36:bf:1b:8b:1e:da:01:40:89:ee:1a:5d:c9:05:7f:
         73:da:20:96:8b:fd:8e:4d:3d:c6:67:a4:d7:6d:7d:59:9e:c1:
         4e:f6:1b:93:8d:79:f1:24:92:86:e1:7e:c5:00:6a:ba:58:a2:
         83:17:ae:a8:37:eb:89:8f:1e:a7:06:5f:a5:a0:9c:5e:65:8e:
         a5:e6:68:e8:98:91:93:86:54:58:2f:39:b0:f1:c6:e6:9a:d9:
         b4:a2:a7:34:21:83:8f:da:aa:77:a4:4b:a3:50:3e:c3:62:4f:
         3b:49:d3:90:d0:6c:39:93:33:c7:f6:37:fb:10:99:dc:6e:a5:
         b5:5e:56:ec:e2:27:cb:66:15:2d:50:36:2d:f9:6b:9b:58:4b:
         bd:da:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:28 2025 by rpki-client