Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File:                     4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier:          5p9Nv7S2Q0EUL477NmLBLpjsE8ltgPdo3bxPcWFYlBM=
Subject key identifier:   78:5E:83:75:31:5A:98:9A:A7:43:71:1F:53:63:F3:5D:35:07:63:01
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer:       /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial:       0199228D1748513CBFEA0C065D27D54E3248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 05:01:35 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:35 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:35 +0000
Files and hashes:         1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: PUvpDqw7eVjGmi4ZV0WhXwXPWh1N346luXJIHer1hP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:17:48:51:3c:bf:ea:0c:06:5d:27:d5:4e:32:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
        Validity
            Not Before: Sep  7 05:01:35 2025 GMT
            Not After : Sep  8 05:01:35 2025 GMT
        Subject: CN=785e8375315a989aa743711f5363f35d35076301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:85:d4:da:fa:99:7e:b2:0f:d8:c2:7e:09:
                    f9:5c:fe:50:9e:25:e3:9b:b0:40:fc:be:c6:30:0a:
                    bd:59:f8:84:56:bf:66:0c:9f:61:b9:27:20:7a:e0:
                    c3:4e:e4:35:4e:cf:b2:11:2e:22:1e:a5:5c:43:2d:
                    a7:50:62:a6:19:44:3e:3e:ea:37:1d:e1:b2:85:92:
                    6d:da:f9:3b:c9:71:51:3d:d3:bd:71:0d:06:87:f6:
                    75:22:b9:0e:fc:40:77:7a:67:3a:2f:58:1b:ee:c8:
                    9c:a1:fc:cd:35:51:63:51:3c:5d:af:3d:f7:b0:f5:
                    72:41:6b:ce:92:66:96:59:93:6a:d3:97:82:48:bf:
                    bf:d1:e6:6c:97:d0:04:6d:be:71:8b:5b:c1:3a:26:
                    47:7a:94:c5:4e:88:93:5b:7e:6c:2d:c0:fa:00:db:
                    33:f2:31:9c:96:ee:8f:53:4b:91:25:33:8a:dd:61:
                    ff:86:e8:30:41:f1:43:53:9d:2b:be:56:dc:e6:63:
                    4a:63:b1:3e:43:e8:11:60:86:d7:98:01:ae:3f:82:
                    60:ff:ab:43:3e:bb:63:52:e2:a2:3d:27:c4:66:38:
                    29:07:38:cc:61:0a:0b:b3:97:9d:11:f7:5b:09:c5:
                    e3:f9:90:56:87:6e:a4:d4:47:54:62:d6:e1:14:5c:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5E:83:75:31:5A:98:9A:A7:43:71:1F:53:63:F3:5D:35:07:63:01
            X509v3 Authority Key Identifier:
                keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:af:bc:56:67:0b:56:c9:a1:5e:96:8c:c7:41:a1:87:19:
         9a:8c:81:5f:6f:b0:fb:78:bd:ec:10:0b:c7:65:96:6b:d2:ee:
         27:4a:3d:18:87:2c:78:fc:b9:db:f5:23:0f:29:98:f0:45:f8:
         32:22:b7:ca:cd:cb:89:f6:41:6a:76:c0:da:7c:73:1a:04:f5:
         56:c6:06:c0:2f:8f:6b:1a:08:6c:98:4c:c3:d6:07:b1:c5:d3:
         96:7f:b3:09:31:72:be:7f:53:0a:10:4b:83:4a:3f:9f:eb:ba:
         22:ee:e1:2d:ff:7f:c1:a6:68:10:85:c3:b9:4f:71:5e:19:b6:
         e5:6c:77:4a:d9:dc:1d:64:fe:00:28:67:32:a7:f9:53:8a:fd:
         b7:9a:1a:58:95:86:85:93:9d:72:9e:a8:c4:f7:56:d9:cb:69:
         f8:ff:f0:dc:22:b0:99:cd:54:ed:a4:e6:86:4f:76:31:55:ac:
         6d:c3:24:65:c0:1e:bc:c2:47:e3:03:28:a8:19:f3:9b:1c:24:
         18:b9:b6:55:13:40:45:19:f0:9c:7d:27:59:af:76:b3:8c:9a:
         aa:1a:1f:e4:14:2f:88:61:4b:66:75:52:a6:b0:a8:d0:f0:c8:
         fa:ed:32:e3:9b:ca:f0:f8:09:47:16:34:fc:a6:e2:6b:6f:f1:
         82:1d:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client