Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File:                     _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier:          uxeiv/w35JRqtFJ3uARKzreCnW4uofvaIJiZTFqfO8s=
Subject key identifier:   3D:A0:B5:88:82:B7:23:10:03:8B:D9:BA:7E:12:18:27:CB:B1:8C:7B
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer:       /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial:       019874507589B16D76C530060CA663E2AAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number:          0815
Signing time:             Mon 04 Aug 2025 09:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:26 +0000
Files and hashes:         1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: YpU9/cCEe4wj0i3w+2N03KpYGUkIxVOwMnW4I14bT/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:75:89:b1:6d:76:c5:30:06:0c:a6:63:e2:aa:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
        Validity
            Not Before: Aug  4 09:01:26 2025 GMT
            Not After : Aug  5 09:01:26 2025 GMT
        Subject: CN=3da0b58882b72310038bd9ba7e121827cbb18c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:e4:b0:6d:36:9e:6a:c7:e2:be:6a:3a:a0:
                    48:9a:84:41:11:7f:80:5d:17:64:42:af:09:18:62:
                    99:ef:64:23:57:52:56:28:ae:00:cb:3a:8d:27:38:
                    0f:0b:34:73:f1:50:f2:55:97:30:28:04:62:cd:2c:
                    73:55:18:02:cc:b0:17:4f:8e:68:90:79:6d:a6:0d:
                    21:1b:83:05:18:09:1a:0b:a0:03:6a:d0:8a:9e:db:
                    ee:55:85:78:c3:54:d9:2c:f1:34:58:61:f8:53:82:
                    25:d6:ee:0c:4a:23:04:26:35:63:01:35:7c:8e:47:
                    61:f9:ab:16:cb:c6:9c:ee:1c:e9:cb:38:e4:e7:ed:
                    56:d4:9e:32:e4:99:95:e5:71:95:6b:e2:74:6a:ba:
                    3a:2d:5f:ef:d4:93:cd:f4:1a:1a:9a:63:58:83:e5:
                    25:bc:fa:35:08:0f:02:16:87:4e:01:fc:f6:c3:7a:
                    f1:27:a3:bb:3c:64:b2:be:96:8c:30:25:49:74:ef:
                    19:63:e3:42:02:64:63:36:70:6b:86:2e:b2:12:d5:
                    5c:3a:b9:41:dd:b8:4e:b9:51:a7:98:73:c6:23:0a:
                    58:bf:42:2e:50:65:4d:dc:f1:ef:8e:37:89:43:12:
                    76:0d:04:e8:52:9b:da:67:c7:a4:47:d4:a7:7b:54:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A0:B5:88:82:B7:23:10:03:8B:D9:BA:7E:12:18:27:CB:B1:8C:7B
            X509v3 Authority Key Identifier:
                keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:97:cd:ee:0b:a7:8f:3d:8a:75:0f:cc:1b:31:9d:1a:7e:39:
         53:30:8c:e6:dd:f0:82:f3:12:5d:31:62:1a:7c:7d:69:4e:ce:
         94:42:df:74:21:c8:95:28:a7:a5:59:53:c4:e8:61:bc:34:b6:
         a3:91:29:10:2e:fc:b1:99:1b:65:38:b7:60:f8:87:30:38:8f:
         74:82:59:c4:26:0b:ae:8b:0f:44:0c:6f:d3:ec:7c:8a:4f:ff:
         75:a4:18:7d:06:ed:98:9b:06:55:16:87:8c:ba:91:c7:fa:cb:
         e0:e2:68:98:89:e9:b3:bf:e0:ab:6a:1d:8b:5b:2f:2c:3c:fb:
         42:b9:3d:7d:c2:f7:ea:ca:92:52:26:3e:a5:d1:d1:7c:67:32:
         30:11:f8:f8:e5:ad:96:4e:2c:92:09:bb:6a:9f:c2:33:f4:f5:
         63:5c:c8:4a:67:e5:42:05:55:44:d8:00:26:65:c8:f7:5b:b4:
         ad:37:22:ef:1e:62:23:4e:62:77:f1:45:cc:98:23:ec:73:33:
         82:6b:7e:15:00:bf:ab:34:44:9d:74:f1:5c:03:41:ba:82:49:
         92:77:da:34:d8:67:44:b8:54:53:a1:c9:21:01:89:11:2a:c0:
         27:f7:a8:a8:02:ca:c1:a9:0e:a5:fd:cf:52:43:7b:77:e2:e9:
         76:de:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:48 2025 by rpki-client