Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
File:                     zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json)
Hash identifier:          +9vizI9YKumZTS2qFq8lAvF9FlekveCkLzf/MSL/PsI=
Subject key identifier:   A5:68:A7:7E:14:48:A7:9D:97:B9:A3:F5:3D:C0:4E:20:A5:D3:91:A9
Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
Certificate issuer:       /CN=cc4500091efcd905e72ea45f278248661f225b2f
Certificate serial:       01992330CBD15A7A39E97FEF3E4CD3280110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
Manifest number:          0126
Signing time:             Sun 07 Sep 2025 08:00:24 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:24 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:24 +0000
Files and hashes:         1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: I3mBWhDtGmlLSid0V5BzHKjvNJm5nRW8FdXfX4TAapk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:cb:d1:5a:7a:39:e9:7f:ef:3e:4c:d3:28:01:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f
        Validity
            Not Before: Sep  7 08:00:24 2025 GMT
            Not After : Sep  8 08:00:24 2025 GMT
        Subject: CN=a568a77e1448a79d97b9a3f53dc04e20a5d391a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:55:ac:a1:80:ce:79:3e:72:5e:64:67:3d:
                    bb:11:30:8e:19:bc:07:a3:ad:6d:cf:d6:f2:62:10:
                    32:d6:b6:14:7c:13:7a:9e:a1:6b:90:ec:5f:9c:dd:
                    db:60:30:c8:35:16:d9:5d:cb:d0:7b:f5:4c:27:61:
                    e4:8a:c2:59:37:e8:d6:5e:96:ec:74:7b:76:18:22:
                    dc:60:c0:04:79:f8:7f:76:e0:7e:3a:83:3a:40:34:
                    da:79:12:3f:3b:8f:74:c1:d0:8b:52:8e:7d:47:e2:
                    29:f4:61:04:37:76:c8:af:5e:28:94:be:23:b4:fa:
                    ba:71:ee:c7:4b:35:d1:f4:42:bb:e7:0c:23:db:fb:
                    b7:b2:06:56:46:c5:72:b6:db:44:04:3e:07:0d:b7:
                    2f:c2:68:64:ee:26:db:25:2b:77:e4:06:ef:db:56:
                    66:9e:17:28:93:32:5c:0c:5b:4a:25:94:f7:b1:85:
                    6e:be:c1:bf:ff:3d:91:37:a2:b4:20:13:22:09:d5:
                    b9:df:fc:af:cb:d1:a7:0a:bb:c5:f6:08:6c:45:4a:
                    a4:77:30:84:66:0c:28:50:9d:90:a7:09:a3:7f:79:
                    6d:7f:84:54:54:02:14:bf:f2:ba:ae:bb:a8:8a:99:
                    86:d5:42:fe:bb:54:2e:b1:55:9c:a2:af:8d:ea:dd:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:A7:7E:14:48:A7:9D:97:B9:A3:F5:3D:C0:4E:20:A5:D3:91:A9
            X509v3 Authority Key Identifier:
                keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:15:d2:ac:d1:1e:f7:3e:72:a0:e0:25:12:02:b0:b0:ca:03:
         05:cf:e7:4d:18:e7:ed:c9:06:a9:05:3d:67:20:09:53:5b:22:
         c3:92:0a:f8:da:04:84:41:84:2d:b7:ff:46:d8:31:84:1c:4b:
         6f:3e:25:e2:f2:66:50:a4:cc:99:ae:76:14:f6:45:6a:4a:2d:
         ef:7e:58:1e:bf:af:75:51:f3:88:89:3c:36:50:9d:73:f6:d7:
         cd:20:dd:f7:b9:13:7f:37:73:66:ea:d6:13:07:1c:10:5b:68:
         d2:a3:f9:f5:a6:f0:ee:fc:e1:3d:7e:05:bb:ab:42:3d:7c:b5:
         c2:3b:bd:00:78:29:b5:2d:dc:50:41:42:a4:41:5c:a3:55:5d:
         96:38:19:c7:0f:43:5a:32:31:a7:0a:1e:55:02:33:a7:86:6b:
         2d:1b:4e:d0:db:7d:1c:65:32:99:8e:e9:44:48:ae:b8:0c:59:
         cd:4b:d2:d4:97:91:1d:3a:9c:d3:bf:8b:91:82:82:f9:c4:fa:
         4a:b5:52:63:57:f3:08:f0:34:b3:9b:aa:3a:59:58:48:a9:64:
         1c:3e:23:b1:5a:c2:09:8f:0a:62:b7:da:1f:29:96:c2:89:6f:
         fd:08:d6:1e:7a:eb:13:1b:ac:42:9a:1b:0b:15:a8:a1:0e:04:
         3e:22:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:28 2025 by rpki-client