Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File:                     Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier:          HWiWyDaKoTrLVCNtv3fuJU/Ajk3Y7paN913NBQvUqzU=
Subject key identifier:   92:CB:AA:4E:7C:65:A0:C0:FA:D3:53:29:53:38:7E:21:ED:BC:83:62
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer:       /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial:       019873E1E143420A69E37A668B9EA743F3C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number:          0655
Signing time:             Mon 04 Aug 2025 07:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:39 +0000
Files and hashes:         1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: VKhbEiNn9Rg+txI4caoV3KuR0WKt7RQ6ttm/wj4+8NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:e1:43:42:0a:69:e3:7a:66:8b:9e:a7:43:f3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
        Validity
            Not Before: Aug  4 07:00:39 2025 GMT
            Not After : Aug  5 07:00:39 2025 GMT
        Subject: CN=92cbaa4e7c65a0c0fad3532953387e21edbc8362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:14:76:38:25:0a:68:eb:b0:84:d3:8e:45:
                    da:e5:2d:81:4d:96:e7:fc:f7:6c:d1:49:94:a4:75:
                    a9:c1:df:53:39:a3:f2:99:6c:1f:06:cd:11:0a:de:
                    7a:fc:b8:52:07:33:4a:00:20:04:72:08:ed:2a:3d:
                    05:17:68:8f:55:7e:c6:01:a5:01:a2:23:6c:1a:44:
                    53:2c:78:5a:cf:f0:2b:cc:ff:03:ac:07:8a:6b:ac:
                    d3:3b:61:53:24:6a:00:40:7d:9a:ab:60:cc:4e:eb:
                    86:a3:28:65:8b:81:bd:26:d1:e3:b6:cb:e7:b9:fd:
                    17:e8:af:03:f5:64:36:89:b3:8d:d8:90:8a:10:a8:
                    ca:7f:e3:f3:49:5c:8d:1d:ba:5b:63:b7:86:7c:1f:
                    d3:e2:8c:7d:80:1e:1e:f9:00:84:61:cf:eb:0d:ee:
                    f0:ba:79:7a:bf:65:ea:ca:3a:13:85:48:e6:9c:fc:
                    c3:6b:aa:08:14:ee:fe:ec:33:98:b9:e2:13:5f:71:
                    03:7b:b0:b0:86:0c:fe:cb:f2:d2:e7:4b:9f:32:3c:
                    e1:10:7e:4f:ea:61:28:e5:f4:4d:3a:7b:82:cc:8b:
                    82:e3:16:a1:06:a3:cc:44:95:a7:05:f0:f1:b4:a9:
                    e9:39:82:6d:a2:8c:a4:02:7d:fe:06:b3:31:95:67:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CB:AA:4E:7C:65:A0:C0:FA:D3:53:29:53:38:7E:21:ED:BC:83:62
            X509v3 Authority Key Identifier:
                keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:f8:9d:92:e4:b6:ec:ff:5d:db:38:95:9c:b8:43:a1:89:
         a4:24:1c:b1:23:06:fa:d6:db:c5:73:46:8e:c8:fa:c9:93:ea:
         35:93:f4:71:9f:bc:be:d5:40:e6:4c:89:ee:7a:e4:a7:59:2a:
         3b:ec:e1:4b:09:d1:3b:b3:09:43:cc:c5:a4:9e:69:62:49:ee:
         07:0b:3f:93:aa:e2:46:f7:de:a3:f7:96:86:f0:79:17:b3:ca:
         f8:05:01:b6:d9:47:9b:4c:d1:fd:9f:4f:22:dc:aa:71:59:3a:
         06:8c:65:35:93:ee:cc:91:cb:77:e0:dd:c6:43:8a:3c:2e:b7:
         5e:cb:20:fe:92:35:1a:68:71:f0:2b:02:2a:3a:86:14:fe:f6:
         a1:0e:1f:1d:78:10:1c:3b:d8:7a:5d:65:10:45:ea:f8:8f:77:
         a3:13:16:58:d3:ff:9e:6c:3e:0a:09:5f:ad:a3:7d:55:56:91:
         7a:13:8a:52:0c:f9:30:af:41:78:89:5e:73:37:41:06:bf:f4:
         be:cc:e4:0d:bd:aa:8d:c8:4a:42:fa:ea:4a:05:5c:82:15:84:
         27:a6:5e:ac:4d:b6:0b:43:9d:b8:f6:b0:fd:13:f0:01:f7:95:
         03:f3:f1:81:4b:54:30:ad:03:2a:53:93:4d:e1:cc:74:c1:6c:
         2d:5b:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:22 2025 by rpki-client