Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File:                     SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier:          ePRko5cB96V/pHUlnedVJasAnxZrQandHAKiX/EwnzY=
Subject key identifier:   8A:B3:78:6C:55:41:01:FA:2A:8F:50:8C:79:3D:48:36:AB:D8:F5:B8
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer:       /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial:       019873E270FA7CE0EFA52147A150C750A80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number:          133E
Signing time:             Mon 04 Aug 2025 07:01:16 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:16 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:16 +0000
Files and hashes:         1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: ylgqKQdWu0Ln6Yq+6G+K4WcYTuGypf/VXp/fB7kTsZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:70:fa:7c:e0:ef:a5:21:47:a1:50:c7:50:a8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
        Validity
            Not Before: Aug  4 07:01:16 2025 GMT
            Not After : Aug  5 07:01:16 2025 GMT
        Subject: CN=8ab3786c554101fa2a8f508c793d4836abd8f5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:ae:11:ce:02:fe:7f:27:08:ad:74:0b:2d:
                    db:b8:2e:b3:41:ac:ac:25:02:83:5e:66:31:ac:0e:
                    53:46:f0:69:20:e9:62:51:ae:e6:8a:94:c5:a5:7c:
                    47:55:ad:eb:54:b3:93:eb:9c:12:41:98:03:38:5c:
                    cf:15:f2:82:80:88:1c:b6:a9:92:1d:f8:48:56:c9:
                    73:36:08:43:09:72:38:18:a0:bc:04:ee:b1:47:e2:
                    9a:83:d5:1b:68:51:9d:ad:5b:13:05:d1:13:4c:07:
                    0d:3f:11:79:ff:e7:b4:6e:e6:6d:f3:83:9a:98:4a:
                    81:4d:22:8c:6a:b2:79:d5:fb:be:61:69:e0:3a:b5:
                    fa:1b:d6:6d:5b:d2:b2:7b:79:26:6c:2c:c3:e4:8a:
                    90:a0:99:b5:cb:0f:f4:05:b7:6c:dc:77:49:7e:4c:
                    4e:e5:d0:ae:96:00:27:9f:12:d9:32:14:f5:4f:c2:
                    a3:8b:48:97:2b:73:bc:ab:32:0b:59:0f:26:cd:32:
                    e5:c9:92:22:fe:df:c7:84:56:ea:22:6c:64:54:2f:
                    60:14:92:44:eb:4d:b8:27:5f:e8:82:81:91:5e:38:
                    fb:da:71:97:c4:b6:25:c8:a0:d4:32:8e:f6:6f:3c:
                    15:6a:a3:56:da:46:3d:15:56:d9:d8:2b:9b:4d:dd:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B3:78:6C:55:41:01:FA:2A:8F:50:8C:79:3D:48:36:AB:D8:F5:B8
            X509v3 Authority Key Identifier:
                keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3a:d8:2e:15:de:fe:d1:b7:12:e3:e2:f6:b6:2e:30:cf:28:
         4d:02:70:b5:be:72:11:20:41:21:3d:ce:0b:cb:7a:9c:cd:87:
         cd:cf:ee:55:05:41:73:20:a9:42:dd:26:43:9d:91:f6:81:43:
         49:c7:2f:28:1b:98:50:31:99:ff:16:1a:ee:7c:c8:dd:1e:33:
         2c:c6:37:99:a6:f9:13:eb:8f:d1:43:b1:b0:bc:eb:f3:0b:dd:
         db:21:56:3f:d1:8b:f4:ea:05:3f:62:de:39:29:39:9f:62:c1:
         5c:dd:52:bf:03:1c:14:e9:d6:df:9d:19:20:d5:72:85:81:17:
         c3:12:70:14:e9:e7:e5:7f:ea:ca:60:1e:a4:f5:11:4e:b2:39:
         e0:a7:9c:9f:57:a2:c4:13:10:43:34:bd:aa:e5:e1:54:1d:79:
         2d:26:87:cd:d2:05:91:6f:cc:42:fc:fd:07:88:6c:42:c5:c8:
         e5:4c:55:9d:3f:56:1d:98:35:a3:7e:70:05:48:5d:95:5f:f8:
         e5:58:62:b6:03:09:f7:ec:50:da:eb:13:76:6c:79:d1:09:9c:
         4f:fa:b9:a5:4c:3c:fe:fa:a1:52:2a:23:0f:a4:58:8d:0f:c0:
         0a:a8:da:8b:e7:fa:cc:0a:33:ef:4f:08:93:aa:17:82:86:64:
         44:02:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:23 2025 by rpki-client