Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File:                     eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier:          Wf3rD/UlhhgB4x0SNVD1dal9RDIG+HnDSY6kNh0j3Xc=
Subject key identifier:   B2:E3:A6:9A:75:BD:82:49:AC:19:F6:78:EE:AB:87:72:CE:7C:84:EC
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer:       /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial:       019923A0D6251EDF82A948771229FA1A6976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number:          0D43
Signing time:             Sun 07 Sep 2025 10:02:47 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:47 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:47 +0000
Files and hashes:         1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: s+NZI9Gg8pOCjfYquukCkJR9+hz2LPiWuD16b3lLh8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:d6:25:1e:df:82:a9:48:77:12:29:fa:1a:69:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
        Validity
            Not Before: Sep  7 10:02:47 2025 GMT
            Not After : Sep  8 10:02:47 2025 GMT
        Subject: CN=b2e3a69a75bd8249ac19f678eeab8772ce7c84ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:5f:98:49:f2:a5:f9:7c:66:1a:ba:62:81:
                    aa:f6:69:27:d9:ae:3a:5a:fc:3a:cc:14:3b:b3:fe:
                    54:d6:45:c9:dd:fe:4b:16:5b:2e:26:4a:6d:f2:73:
                    c9:21:c0:e6:91:12:8d:ba:c9:8a:91:88:0b:56:cb:
                    22:a3:3d:73:bc:a8:84:5e:00:77:6d:02:08:fb:62:
                    aa:92:a4:40:1e:02:03:bd:57:56:18:0b:10:42:8d:
                    ee:09:62:53:37:27:0a:9d:e1:e8:ee:1f:0e:2d:dd:
                    d5:3c:24:91:4f:c6:b9:75:d6:53:09:bc:9f:e0:a5:
                    5e:23:8d:b3:af:51:d2:c3:67:f1:55:1c:c1:ec:45:
                    7b:1b:27:c0:6e:3d:3e:41:eb:a3:e5:c1:4f:6b:2f:
                    35:87:16:e7:fa:44:96:80:43:1a:7e:6f:15:64:f5:
                    d8:f0:6b:ca:d7:a9:53:90:2e:49:3a:a1:c6:4d:4b:
                    73:4c:2f:15:ea:14:2a:64:cd:38:a6:2e:c6:a3:0f:
                    68:e0:26:1d:8f:3c:84:51:dc:b4:81:c0:45:63:a3:
                    4d:3d:19:fc:8e:43:15:65:be:03:ff:e4:fe:9c:d2:
                    35:a8:46:85:b8:f6:be:55:82:13:2e:ce:98:66:c3:
                    e4:ef:78:2a:f7:5f:7f:83:5d:ad:0a:e1:f9:e3:21:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:A6:9A:75:BD:82:49:AC:19:F6:78:EE:AB:87:72:CE:7C:84:EC
            X509v3 Authority Key Identifier:
                keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:24:0e:9d:0e:69:5c:04:6b:e3:66:27:3b:fc:ea:5d:2b:
         e1:c6:61:0b:df:4a:ea:62:93:1e:f8:97:97:0f:41:b0:60:56:
         3d:74:42:01:bb:1b:3c:5b:68:23:61:91:db:d1:74:c5:ee:31:
         cb:7f:26:75:b1:9c:ff:03:8e:4a:d5:fb:70:59:d5:a0:ec:6c:
         eb:7c:10:5f:37:5b:f1:a9:12:bb:a1:fa:22:9c:19:7f:68:c0:
         0b:d3:1b:f8:51:77:24:3e:54:fd:a7:53:30:82:7e:6d:76:79:
         e7:3a:2a:9f:ca:0a:d8:bc:65:3e:af:8c:50:7a:04:f8:80:32:
         55:84:0b:23:08:a2:9f:ac:bd:30:81:e5:b5:2a:94:70:fa:f0:
         06:96:3a:48:06:1b:85:cf:2a:ad:45:1c:ad:22:94:a1:da:a0:
         f6:fa:ea:3f:a2:ad:ee:07:e6:7b:30:e8:3c:e6:2c:c0:ee:1f:
         94:b9:a2:a9:74:ed:6f:82:2c:c8:e1:3e:ae:42:b8:03:6f:c1:
         50:b9:ff:ac:7c:0b:21:b7:64:e1:35:a9:e1:8a:99:75:94:bf:
         d7:64:f9:ae:92:db:16:37:ef:ad:e9:34:6e:f4:9d:2f:d0:c4:
         c6:7b:95:96:55:83:a4:2b:47:74:11:34:47:da:0e:a8:4a:0e:
         c1:8f:aa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:20 2025 by rpki-client