Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          VYRXoU50nP/Qu7dSUEt7m4+0tpchohwceFpf9MowyAE=
Subject key identifier:   56:07:82:9B:4E:95:91:E3:66:5E:40:12:2E:14:22:09:EE:95:94:EA
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       01992255AF6CAA81DFB8CB10D00FC171AF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          1040
Signing time:             Sun 07 Sep 2025 04:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:04 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: 9QPsGnMOh1ECp5EweFoZ0xFIsef7mvU2e2CHBv5d4WU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:af:6c:aa:81:df:b8:cb:10:d0:0f:c1:71:af:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Sep  7 04:01:04 2025 GMT
            Not After : Sep  8 04:01:04 2025 GMT
        Subject: CN=5607829b4e9591e3665e40122e142209ee9594ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:9d:61:2a:b9:50:a0:1d:1d:1b:93:07:ed:
                    63:d8:c5:5c:d3:66:74:f5:f1:98:e9:11:55:d6:c6:
                    c8:f8:58:fd:eb:e5:61:eb:ca:21:05:ad:92:23:bc:
                    e5:2b:ac:81:df:50:c8:5d:9b:a3:3e:21:fc:5b:0e:
                    f1:c1:62:1b:35:59:ae:07:e2:ce:17:5d:d4:56:1e:
                    2f:bb:ac:d4:c8:83:6f:22:24:36:5e:21:e6:6f:b8:
                    22:e5:f6:8f:78:fb:8e:1f:77:aa:cd:34:6b:a7:36:
                    b6:52:41:ef:25:b5:ae:34:73:6a:70:a6:3e:59:63:
                    e0:60:07:c6:b5:fc:e2:1e:16:02:f0:20:6f:ca:cc:
                    c6:c0:a4:6a:bd:cb:5b:33:1f:8d:db:21:2c:5c:fe:
                    0e:f3:10:44:47:1e:82:cd:f0:f7:7a:9b:30:45:45:
                    4f:f5:25:17:9d:aa:34:27:cc:d8:bb:58:be:66:e7:
                    e8:1e:a1:89:e5:d1:80:b6:bf:eb:96:25:2d:42:ad:
                    fa:23:d7:e8:07:4e:29:f0:98:7f:c3:37:3c:3b:45:
                    45:05:f1:32:8a:a8:93:1a:e7:89:58:fe:3b:e9:48:
                    8b:b0:f0:31:b5:51:fb:55:62:d4:fb:7d:bc:eb:45:
                    40:4c:f3:56:01:0a:0f:f2:3a:af:0a:d6:a6:43:d3:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:07:82:9B:4E:95:91:E3:66:5E:40:12:2E:14:22:09:EE:95:94:EA
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:07:e0:d2:42:7a:c6:0b:21:bb:3e:63:1a:99:79:f4:67:
         57:f4:f9:43:e8:cc:73:65:07:cc:b2:b1:c9:c1:ce:f9:39:58:
         ea:c7:cc:9b:fd:b7:cd:9d:e8:80:0b:57:b1:ff:54:cb:f8:20:
         d7:3a:5b:4d:cf:7f:29:74:e1:7d:96:36:22:32:7a:ea:14:d0:
         ee:ac:66:dd:a8:29:ae:bc:8d:0b:b8:aa:f3:e9:b9:0b:24:50:
         f7:2f:02:8a:0e:b0:3a:b5:29:6d:40:7c:9d:bd:f4:52:a5:67:
         f7:bf:0d:29:ac:bd:1f:54:6a:50:3e:2e:2b:ec:ba:3c:fa:1e:
         ee:3c:62:2c:8a:54:26:c4:a4:8c:de:a5:dd:12:ee:1c:b4:99:
         e8:59:14:44:7c:22:7a:d5:53:cf:3a:00:4a:e6:84:90:d3:af:
         c6:80:39:95:8a:72:3c:a2:8d:83:34:d4:72:b2:64:d6:2b:44:
         ba:c3:e4:2e:ec:e7:0f:01:91:d2:01:12:7f:03:eb:4b:31:ff:
         7d:87:4a:fd:8c:47:99:a0:dc:fd:cf:ba:ea:dc:fb:9c:1d:ae:
         c7:6d:db:6c:7c:9e:2e:cc:a5:f6:44:37:bc:4a:8e:6e:0d:49:
         16:45:a9:f9:67:05:85:8f:74:bc:4c:a0:90:5d:b1:90:20:46:
         ed:d0:b7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:09:19 2025 by rpki-client