Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File:                     EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier:          lJNtac6galy+ztosD14u/vJYs6E6BL2UO14ejmX08qo=
Subject key identifier:   29:53:CB:FE:0A:10:4E:9B:58:59:AF:4E:3A:28:CC:DA:9A:B0:9A:91
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer:       /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial:       0199221E23ED85A3B8655FC0ECD5139E9189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 03:00:24 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:24 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:24 +0000
Files and hashes:         1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: 0gfrtGLfHnu3B4LrMjQf7PmfUja7X2e8KlxoWb8w0p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:23:ed:85:a3:b8:65:5f:c0:ec:d5:13:9e:91:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
        Validity
            Not Before: Sep  7 03:00:24 2025 GMT
            Not After : Sep  8 03:00:24 2025 GMT
        Subject: CN=2953cbfe0a104e9b5859af4e3a28ccda9ab09a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:49:2b:1e:c1:4f:e0:6f:02:69:f2:5a:f1:
                    19:43:2a:c1:7d:b6:47:01:5b:1f:d9:05:25:9e:13:
                    d6:36:fb:e2:93:f6:3e:fa:99:4a:85:8d:e9:b0:34:
                    18:60:ab:00:d0:4e:e1:1d:7d:b2:c5:eb:ee:d6:98:
                    c9:5c:7b:66:1a:93:43:a3:2c:32:95:0f:e8:08:e8:
                    63:55:4a:b8:1c:27:59:b6:97:8b:14:c2:73:c0:d5:
                    e1:74:bd:02:5a:3d:44:91:e2:76:09:3a:4a:3d:7a:
                    fd:bc:9c:41:ae:21:6a:23:53:9d:6d:ae:c1:e4:c0:
                    94:f4:9c:42:03:79:a0:b7:00:80:3e:fe:bf:7d:6a:
                    df:d6:54:4d:dd:df:73:45:0e:62:7f:b1:d0:5b:92:
                    f4:46:fd:a9:fd:7c:c8:e8:47:04:a3:ad:e1:92:67:
                    4c:06:1f:92:bb:80:cd:46:cd:15:46:83:15:92:22:
                    5c:9d:4f:e8:87:fc:de:ae:ed:94:8f:d8:5d:d2:f8:
                    39:8f:16:48:fc:92:2b:12:90:42:a2:99:5a:73:79:
                    d4:7e:66:73:ae:35:d5:f8:27:29:65:bf:dc:c6:75:
                    11:ef:79:21:c0:36:c1:df:3c:87:d1:db:65:35:6a:
                    03:cd:8f:fd:f8:84:e1:b8:f4:a0:f3:b1:8f:f0:95:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:53:CB:FE:0A:10:4E:9B:58:59:AF:4E:3A:28:CC:DA:9A:B0:9A:91
            X509v3 Authority Key Identifier:
                keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:84:ad:b4:6e:7d:3d:ad:85:94:fb:7e:02:2b:ae:84:e2:4a:
         88:75:8f:f2:77:d6:bd:ed:da:fa:aa:d5:1b:12:f5:a4:50:8a:
         1b:b7:20:cc:27:40:2d:8f:eb:40:4d:71:23:e1:11:4d:41:3c:
         a4:e9:39:d3:ac:14:fd:73:2d:39:01:ac:2e:cf:e1:c6:68:8a:
         12:94:ce:5a:21:d8:22:f2:ed:5a:35:41:e6:e5:1b:3f:75:64:
         2e:5e:4a:08:1f:b1:34:3d:4e:cd:04:83:8f:44:d8:34:d5:b8:
         cd:02:fa:7f:53:9d:da:09:68:08:e3:52:c9:6a:86:b8:b6:73:
         09:68:d8:6e:80:ed:68:41:a0:84:e1:f9:c5:15:f9:96:e8:14:
         b3:f6:e6:e6:2e:6d:5d:9e:05:38:10:f6:bb:36:1c:bf:06:2d:
         42:3e:7e:4e:7f:5b:d4:96:5f:1b:80:4b:fa:14:48:c8:6e:23:
         1a:6c:a2:10:f7:ba:62:0e:95:22:2b:d6:be:51:19:b9:96:ba:
         eb:d4:5b:3b:61:6a:e1:e2:7c:e4:13:10:5b:e0:25:8c:26:41:
         4f:aa:04:2d:c1:32:e3:cd:50:b6:e6:a7:eb:e9:8b:07:a6:c1:
         aa:21:b4:9a:a2:4c:bd:28:65:dd:44:e1:3e:8d:82:cc:d8:ac:
         a3:27:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client