Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier:          we5voyMK8sQC3mky8ZWbW5x5cUSuYwY3FSmnZ6sq5Cc=
Subject key identifier:   44:E5:47:1B:29:0E:7C:B8:18:2E:65:D1:27:6C:B0:FB:8F:87:80:F6
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer:       /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial:       019921B20D3C195D2CFDC42DE59DB43E86B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number:          1519
Signing time:             Sun 07 Sep 2025 01:02:20 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:20 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:20 +0000
Files and hashes:         1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: 08B9la7w29vBi0Ia52idxlWYGOEogoVcCHHhk+xMKXI=)
                          2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:0d:3c:19:5d:2c:fd:c4:2d:e5:9d:b4:3e:86:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Validity
            Not Before: Sep  7 01:02:20 2025 GMT
            Not After : Sep  8 01:02:20 2025 GMT
        Subject: CN=44e5471b290e7cb8182e65d1276cb0fb8f8780f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:fe:97:3d:f0:fc:40:e4:2b:df:41:05:e4:
                    10:39:17:44:69:a8:51:73:20:18:fc:58:e4:29:d7:
                    8a:ad:6e:60:54:6a:10:6b:2f:53:8d:72:50:5a:e4:
                    2f:26:1f:b8:a7:b6:39:ed:1a:83:5f:8f:65:bf:f7:
                    bc:68:db:d1:64:b0:de:1d:b6:c1:d2:07:b3:7f:8f:
                    bd:27:d9:23:b6:67:5b:ff:95:24:0a:96:6d:58:36:
                    44:9c:59:29:9c:17:be:00:7c:43:b6:5a:23:70:8b:
                    d8:2a:ae:64:62:87:af:c3:7a:fe:e6:48:7e:5c:08:
                    18:62:37:9e:37:01:c0:98:fa:c3:28:d0:52:a6:cd:
                    8c:fd:cb:ac:ad:67:97:16:82:6e:89:eb:b0:9c:c9:
                    bd:c3:b5:7f:3f:6b:0b:29:ce:47:0f:92:59:58:4e:
                    dd:cf:a8:ba:b1:1a:b9:52:1f:9f:b6:75:8f:36:cd:
                    59:bb:ba:a7:68:c3:fd:5f:89:14:6e:be:f4:e4:18:
                    80:e7:83:be:0b:ca:00:7d:1d:d3:ff:97:17:5c:fd:
                    8d:2b:8d:66:dd:55:1f:9f:7d:e0:64:63:99:5a:6a:
                    76:49:2e:86:64:c7:1e:b7:97:dc:ed:05:82:15:b3:
                    55:31:3a:be:4f:e9:df:bb:16:fc:17:e0:2d:f3:cb:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:47:1B:29:0E:7C:B8:18:2E:65:D1:27:6C:B0:FB:8F:87:80:F6
            X509v3 Authority Key Identifier:
                keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4f:bc:c9:1c:8a:dc:5d:80:de:09:f1:88:ba:49:77:7d:82:
         1f:dc:49:c3:c4:46:37:f7:25:20:83:80:90:f1:fb:21:e3:ef:
         50:81:5f:2d:10:51:3d:5a:51:bc:54:c1:26:cc:0b:ea:59:84:
         25:c3:26:15:dc:08:98:2a:fd:51:cb:5f:a0:43:14:98:6c:3e:
         a2:4d:dd:5c:65:ec:57:e7:52:13:27:eb:b1:9a:eb:44:f7:7e:
         ef:2d:0f:a4:4e:ae:6c:3d:eb:5a:32:85:d6:df:ff:44:c6:4b:
         53:2b:28:6f:bf:88:c9:9f:0c:4e:85:65:31:4c:84:64:2e:39:
         0c:ad:9c:8c:98:d8:71:df:9a:cc:95:c0:da:68:ef:8d:0c:a7:
         3b:b2:f5:0f:0a:71:6c:e0:77:b0:88:e9:c1:dd:ba:a3:e4:15:
         d0:ca:c3:b7:2e:da:90:53:31:d5:73:4a:b1:db:05:aa:26:f8:
         87:6a:65:e7:6d:22:7c:8d:93:c9:53:19:54:c4:67:5f:3d:8a:
         14:da:04:0e:a4:41:77:50:87:90:aa:e5:be:a0:40:62:bd:76:
         47:9d:ab:20:fa:a1:74:91:28:85:69:a7:17:f2:46:e0:45:ca:
         14:5b:dd:91:2c:e2:dc:3e:08:d6:cb:e4:0c:02:d8:41:71:8b:
         89:9d:9c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsg08GV0s/cQt5Z20Poa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMWZmNzAyNzI2ZTc1YjNhNjhmMTE4MmU0N2ZmYmNkY2Fl
NTE1ZTUwHhcNMjUwOTA3MDEwMjIwWhcNMjUwOTA4MDEwMjIwWjAzMTEwLwYDVQQD
Eyg0NGU1NDcxYjI5MGU3Y2I4MTgyZTY1ZDEyNzZjYjBmYjhmODc4MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIH+lz3w/EDkK99BBeQQORdEaahR
cyAY/FjkKdeKrW5gVGoQay9TjXJQWuQvJh+4p7Y57RqDX49lv/e8aNvRZLDeHbbB
0gezf4+9J9kjtmdb/5UkCpZtWDZEnFkpnBe+AHxDtlojcIvYKq5kYoevw3r+5kh+
XAgYYjeeNwHAmPrDKNBSps2M/cusrWeXFoJuieuwnMm9w7V/P2sLKc5HD5JZWE7d
z6i6sRq5Uh+ftnWPNs1Zu7qnaMP9X4kUbr705BiA54O+C8oAfR3T/5cXXP2NK41m
3VUfn33gZGOZWmp2SS6GZMcet5fc7QWCFbNVMTq+T+nfuxb8F+At88tEkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETlRxspDny4GC5l0SdssPuPh4D2MB8GA1UdIwQY
MBaAFHof9wJybnWzpo8RguR/+83K5RXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2Yzkt
NDNhZGI2MDVmNjhhLzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82ZmVmMDMtMDY3MC00MWFiLWE2YzktNDNhZGI2MDVmNjhh
LzEvZWhfM0FuSnVkYk9tanhHQzVIXzd6Y3JsRmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlU+8yRyK
3F2A3gnxiLpJd32CH9xJw8RGN/clIIOAkPH7IePvUIFfLRBRPVpRvFTBJswL6lmE
JcMmFdwImCr9UctfoEMUmGw+ok3dXGXsV+dSEyfrsZrrRPd+7y0PpE6ubD3rWjKF
1t//RMZLUysob7+IyZ8MToVlMUyEZC45DK2cjJjYcd+azJXA2mjvjQynO7L1Dwpx
bOB3sIjpwd26o+QV0MrDty7akFMx1XNKsdsFqib4h2pl520ifI2TyVMZVMRnXz2K
FNoEDqRBd1CHkKrlvqBAYr12R52rIPqhdJEohWmnF/JG4EXKFFvdkSzi3D4I1svk
DALYQXGLiZ2coA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:58 2025 by rpki-client