Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
File:                     spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json)
Hash identifier:          RLDbDl++OGG1P69V6uO49tkeKuBt7FGp9mKbqp0KPi0=
Subject key identifier:   31:5B:7B:23:63:FC:8A:EB:B8:C8:C4:6F:D8:75:B6:7A:5D:86:7F:AF
Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
Certificate issuer:       /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Certificate serial:       01988167642E246F3151050A70FD8D473251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
Manifest number:          0CB6
Signing time:             Wed 06 Aug 2025 22:01:33 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:33 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:33 +0000
Files and hashes:         1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: m1hIbC8pgzuAmeve3IMTZYdfMl6rwe1IZHjGAmzTgZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:64:2e:24:6f:31:51:05:0a:70:fd:8d:47:32:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
        Validity
            Not Before: Aug  6 22:01:33 2025 GMT
            Not After : Aug  7 22:01:33 2025 GMT
        Subject: CN=315b7b2363fc8aebb8c8c46fd875b67a5d867faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:a0:28:88:18:e2:95:31:c0:c0:f4:39:26:
                    05:fe:04:e9:80:96:14:6b:fd:58:75:9a:76:2f:aa:
                    6d:be:b1:02:78:28:43:a8:e4:20:66:02:02:53:e2:
                    66:9e:d8:ff:50:07:47:48:50:3c:cb:34:78:a4:d8:
                    f2:4e:fa:71:31:5e:f5:0d:7b:e9:45:fc:48:e8:f9:
                    b1:bf:2d:d7:73:d9:b1:eb:dd:92:1f:a5:ec:4a:8b:
                    14:06:4c:01:98:77:72:72:1b:83:8b:89:7f:62:93:
                    8c:2b:b1:7b:5c:dc:01:b6:26:9a:da:4a:26:fc:56:
                    5c:ce:87:90:69:05:ee:57:18:b4:c6:be:d3:75:bc:
                    57:a3:54:93:7f:06:a4:7a:22:6b:fe:7d:06:9b:b4:
                    4d:bf:d6:d1:bb:da:0a:3c:ec:30:ea:97:a0:c8:c8:
                    8f:11:17:56:4d:74:fa:4c:c6:3e:3f:10:9b:18:7c:
                    3d:08:86:bc:5d:0d:b6:23:b7:a9:f5:03:0c:f4:40:
                    73:91:0c:82:ca:0d:fc:07:be:dc:88:5c:e1:91:8d:
                    9e:7b:de:5c:24:12:0d:9f:89:9b:98:d1:3c:d4:28:
                    60:1d:9e:79:ae:14:a1:f6:15:9c:09:bd:7f:47:2e:
                    58:84:b2:64:e2:0c:2f:a3:11:3c:bc:9a:8b:11:45:
                    94:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5B:7B:23:63:FC:8A:EB:B8:C8:C4:6F:D8:75:B6:7A:5D:86:7F:AF
            X509v3 Authority Key Identifier:
                keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:00:05:2f:d0:2d:0a:86:46:4d:70:c5:d3:d8:be:46:41:
         f4:7d:63:5d:6b:e7:94:af:09:23:fd:c8:a0:25:1a:8f:1a:9f:
         30:6f:b2:fe:6d:1a:88:4d:e8:6f:62:d3:97:f1:f7:77:ae:80:
         07:c9:28:be:3b:d9:69:9e:13:2c:9b:1c:60:3d:93:1e:e1:33:
         1e:b4:7f:5a:7f:e2:17:95:bb:40:9a:57:e5:05:f3:27:06:7d:
         0c:70:ad:22:67:58:16:2e:44:41:bb:44:7c:19:94:2b:d0:a5:
         23:38:20:7f:da:5d:1c:60:8e:02:94:89:eb:e5:0b:07:2c:1a:
         41:3d:28:1b:09:e3:73:15:35:8b:61:e7:3e:75:0b:a5:ba:b9:
         3f:0e:3c:a3:d9:31:ef:eb:df:a0:86:38:51:5b:3c:c7:8a:79:
         4e:27:da:f8:6a:1c:40:8c:32:14:fe:ca:b4:25:f4:33:da:47:
         cd:89:8b:f9:e0:b1:89:65:df:66:c0:8e:8a:d4:aa:2c:62:21:
         9f:5f:72:c9:24:e2:36:a3:5c:47:37:fa:70:5a:13:a0:d5:e7:
         6c:44:d0:60:a5:aa:ec:15:45:70:ba:92:87:69:54:05:3e:43:
         6d:fa:89:10:d7:21:83:21:18:fd:db:cb:df:5a:77:7d:ca:fb:
         7d:42:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:57 2025 by rpki-client