Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
File:                     e2deJTtiz5WANl7XPaod1lnU1mI.mft (raw, json)
Hash identifier:          4sEhCbWZFI7N35CCgwERNNOp++nm2g5BABG30huniIo=
Subject key identifier:   F5:BB:11:BA:B1:41:1E:D6:77:A8:CB:CD:90:1D:CA:29:C8:0B:2C:F9
Authority key identifier: 7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
Certificate issuer:       /CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Certificate serial:       0199221E515CDA3B861B210548D1E7C527AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:00:36 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:36 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:36 +0000
Files and hashes:         1: e2deJTtiz5WANl7XPaod1lnU1mI.crl (hash: XFvSHKXPAzP6ajTZuCIvKPyCeIZiiiEaldkZppBYHys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:51:5c:da:3b:86:1b:21:05:48:d1:e7:c5:27:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b675e253b62cf9580365ed73daa1dd659d4d662
        Validity
            Not Before: Sep  7 03:00:36 2025 GMT
            Not After : Sep  8 03:00:36 2025 GMT
        Subject: CN=f5bb11bab1411ed677a8cbcd901dca29c80b2cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:7e:c3:b2:b0:a5:38:4b:1e:24:43:19:60:
                    f6:a5:bc:02:d2:5d:c3:88:42:4a:30:89:e1:ce:c5:
                    c9:de:6f:cc:68:c8:de:05:80:e2:0b:ed:70:33:63:
                    a0:8e:58:c3:be:a1:76:47:15:b6:c7:36:a4:ae:a0:
                    54:5d:c3:ff:95:6d:84:d7:50:c7:b4:6b:d0:67:ad:
                    ba:45:b9:2d:aa:b9:0a:db:39:1c:6c:7e:28:cf:23:
                    27:99:42:96:e9:95:75:bd:1f:fd:f8:a2:db:8d:de:
                    78:1a:6e:d7:bb:73:b1:97:e5:45:da:35:53:1a:12:
                    cf:43:df:da:32:a5:c4:a3:cd:81:2b:55:a7:c3:3e:
                    1c:df:e4:99:dd:6b:d3:13:32:a6:ad:d2:04:76:73:
                    21:fb:2a:40:96:7a:5f:02:71:92:77:98:43:a8:01:
                    ba:e2:c6:85:b7:fb:79:78:a2:db:f1:9e:d1:1b:2a:
                    e6:35:4c:6a:23:96:62:c7:88:d7:58:91:ee:c7:e9:
                    2a:20:2e:53:03:06:00:a7:7c:6a:e1:76:16:ff:31:
                    84:7c:f3:c4:ca:02:a5:97:d0:cf:54:39:95:22:57:
                    1d:36:42:a6:fd:20:fb:7e:99:8f:86:1f:9c:c4:36:
                    bb:b5:fe:2e:dd:47:70:67:47:35:b1:43:b8:14:91:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BB:11:BA:B1:41:1E:D6:77:A8:CB:CD:90:1D:CA:29:C8:0B:2C:F9
            X509v3 Authority Key Identifier:
                keyid:7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:de:c6:22:50:25:84:2f:54:3a:2c:2a:31:fa:fe:98:02:2a:
         70:ee:b9:41:9f:cb:38:cf:04:9b:01:a1:68:5b:c5:05:98:f3:
         ef:1a:ea:a8:38:cd:20:94:52:f2:a9:93:ab:75:8b:9d:4a:47:
         9a:42:f6:a5:b3:e4:8f:50:40:da:78:6e:46:65:86:41:df:ca:
         39:9d:12:9a:c8:9e:d7:ef:9b:ee:4b:40:e0:84:03:4f:f7:d4:
         fa:9c:4a:f7:05:83:9b:1b:39:94:ea:50:a4:b4:0d:f7:87:26:
         8f:1c:1d:ee:7a:71:7e:62:ab:16:4b:08:da:12:b2:41:9c:3a:
         9c:e2:5f:0c:4b:ea:37:bc:48:de:d0:3f:bf:1f:f6:f5:d3:a7:
         da:fc:c6:3b:35:3d:a8:13:14:94:0e:cc:78:7f:26:79:a5:0f:
         5e:d4:8a:71:85:f1:e2:f1:5a:92:3b:ee:42:9c:8a:0e:c8:64:
         d6:f5:05:e1:e4:d1:92:6a:c3:73:56:56:57:ef:bd:ac:65:db:
         2e:cd:94:ef:33:d9:5c:4a:10:fb:af:58:18:ff:e5:46:72:f9:
         c1:ce:e2:f6:47:3f:13:b0:be:b3:e3:36:1b:ca:18:29:e2:92:
         fd:5d:39:d3:a3:0f:84:7b:98:1a:5e:7c:c6:ce:42:e9:3c:65:
         0b:b1:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:04 2025 by rpki-client