Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          5O73MXfrRcPDe6wka1/F8rKGak43Sr2q5iZ5mYFFHWA=
Subject key identifier:   A6:31:5A:82:8D:7A:35:FE:5C:AE:D5:1D:26:4E:D6:95:BE:6F:50:57
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       0199239EB4245B7649FCB1E461442D8D60A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 10:00:27 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:27 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:27 +0000
Files and hashes:         1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: 2D/XcSGY8d7P7RqtCAsmQ6/CIRyyde1MmeJNhvsAiX0=)
                          3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
                          4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:b4:24:5b:76:49:fc:b1:e4:61:44:2d:8d:60:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Sep  7 10:00:27 2025 GMT
            Not After : Sep  8 10:00:27 2025 GMT
        Subject: CN=a6315a828d7a35fe5caed51d264ed695be6f5057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:d3:15:1d:c6:3d:e4:ab:28:2b:e7:46:a4:
                    5f:ff:91:cf:a4:d7:4b:9d:37:e5:a3:b8:d9:63:31:
                    86:4e:e3:47:73:71:9e:3f:4a:04:15:84:dc:e0:fb:
                    d2:bf:a9:5c:0f:c8:dc:23:d8:fa:2b:38:5b:c7:c1:
                    e0:b6:c1:b4:55:cd:8d:69:9f:34:e3:b2:1f:9f:cc:
                    13:81:aa:48:c1:c8:b2:14:e1:71:bf:ba:ef:ec:0d:
                    54:a3:27:c9:ff:ab:48:1f:55:aa:a8:0b:d3:fa:9b:
                    9a:e9:30:8e:65:81:2a:8d:ce:33:1b:98:22:45:cc:
                    3b:31:41:45:82:02:77:b7:3d:f4:fe:90:88:e0:b8:
                    2e:7c:b1:ff:fc:7a:c2:fa:de:5f:7d:d5:b5:d2:d7:
                    1f:ad:2a:9e:b9:df:7f:ad:52:50:cd:f8:db:04:83:
                    18:f2:38:eb:f8:60:2d:4e:ef:bd:7d:2b:cf:b2:7f:
                    9b:25:a8:2d:44:1a:95:a1:26:fa:a5:3f:b2:00:60:
                    79:80:2a:36:42:a1:b4:69:44:dd:c2:51:aa:19:ff:
                    ad:60:1c:1a:a5:81:3e:1e:9c:70:72:c8:22:f8:c9:
                    dc:28:13:57:a8:72:7b:f8:88:37:1e:83:e3:a8:88:
                    1b:ec:35:9e:23:36:fd:d1:91:db:9b:06:79:e2:61:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:31:5A:82:8D:7A:35:FE:5C:AE:D5:1D:26:4E:D6:95:BE:6F:50:57
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:87:35:58:19:46:fa:ea:9e:73:2b:0a:0c:a4:a9:c0:6f:2e:
         a4:53:e0:f1:ca:5d:92:62:b0:02:46:16:c9:ad:7b:d0:1d:30:
         72:c0:22:39:bc:41:e1:5a:38:af:b1:3a:04:b7:da:35:ca:e9:
         40:77:45:ef:cf:6d:f0:da:ea:2d:a5:57:33:99:42:16:17:be:
         a7:ba:b6:1d:68:cf:80:63:c1:12:85:6b:15:12:bf:d6:34:cc:
         67:57:81:05:76:cd:b4:4f:69:4e:0c:2b:af:77:87:b3:bd:95:
         1b:b3:46:ef:99:41:7b:95:d5:48:11:a5:29:c2:dd:f3:6d:78:
         8a:fa:6a:c8:9a:cf:2c:9a:ad:89:57:4b:11:5c:4b:c4:82:d1:
         1f:3f:ab:57:d4:0e:f6:40:58:cf:65:4a:0a:38:4f:0f:db:b4:
         34:48:92:c1:83:36:59:83:09:fd:2d:49:d2:68:79:ff:ee:4f:
         6b:52:cb:ad:f8:dd:bd:a1:ec:3d:cb:53:ee:2a:bb:a1:56:68:
         af:24:67:69:85:56:9e:3a:87:3a:93:81:81:c5:b8:58:bd:53:
         6f:b9:e2:77:21:60:fa:a1:52:e9:a4:d1:c1:dd:ad:90:46:64:
         f2:0c:31:7c:7a:a7:2d:96:2c:01:65:dd:97:08:dd:7d:36:e4:
         e8:7c:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:51 2025 by rpki-client