Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File:                     tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier:          vPSvTAOABQNKL3sgpryREpdWxEpj11VbwoFC9n7+Nx4=
Subject key identifier:   3D:34:76:AA:14:93:46:73:30:30:82:E7:16:98:87:17:1A:47:62:4F
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer:       /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial:       0198A04EB495CFECD77B45BD770F2C290FEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number:          07BB
Signing time:             Tue 12 Aug 2025 22:02:49 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:49 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:49 +0000
Files and hashes:         1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: CV+exrh/mF8WbfXEmEdulmx4RnbMI9XwI3ifLaRSqck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:b4:95:cf:ec:d7:7b:45:bd:77:0f:2c:29:0f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
        Validity
            Not Before: Aug 12 22:02:49 2025 GMT
            Not After : Aug 13 22:02:49 2025 GMT
        Subject: CN=3d3476aa14934673303082e7169887171a47624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:7c:2f:0c:5e:45:48:0a:78:9b:e4:ad:ff:
                    c1:a8:5f:6c:06:16:e6:31:3f:70:81:30:5b:03:f0:
                    ae:a9:1e:ed:9d:86:ba:97:30:8f:01:39:0c:24:88:
                    30:b7:8f:eb:a9:b3:2f:34:cc:24:d6:82:ff:ec:21:
                    f9:38:bf:06:32:65:8a:7e:6b:86:e7:7e:b7:00:4a:
                    40:02:c1:42:84:1d:8d:e9:05:a2:ed:a3:a6:4f:e2:
                    15:77:41:b5:b3:a2:47:ac:d3:34:bd:a9:76:16:d1:
                    80:d0:15:50:71:48:b8:9c:f6:05:3b:4c:a4:c0:45:
                    25:9e:b0:57:e3:16:c8:84:d5:de:9e:6f:30:e6:77:
                    c2:b5:eb:50:b1:b0:51:11:eb:dc:f8:c1:d4:f5:c1:
                    2b:d6:40:45:75:0a:2b:ee:6b:47:9c:58:bd:d0:26:
                    de:6d:d9:57:0d:6a:d6:49:ad:cc:cb:90:b5:47:e8:
                    8c:89:de:a1:ac:8a:3d:ba:a5:16:0e:01:cd:f2:c2:
                    78:c0:47:86:cd:d5:be:3f:2f:6d:0f:4b:17:4b:e7:
                    f1:ec:b3:b6:41:6d:c9:8e:00:6a:3e:9e:a8:14:15:
                    10:15:0b:8b:7e:a5:c0:5d:30:00:bf:aa:6e:0c:67:
                    f2:69:67:04:f2:f1:9e:22:96:30:83:33:38:77:3a:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:76:AA:14:93:46:73:30:30:82:E7:16:98:87:17:1A:47:62:4F
            X509v3 Authority Key Identifier:
                keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:18:7a:af:bd:60:6c:4e:0b:a2:12:bf:ed:e3:b2:6f:4d:b3:
         1f:5b:b7:a7:03:c7:81:59:83:04:6d:d3:b1:25:a6:f5:4d:c4:
         b3:e7:2b:ac:92:e6:0e:f5:19:f5:6d:f9:4f:18:17:29:32:cd:
         7e:14:af:55:e7:e3:f4:7e:9a:c4:bc:9a:d0:33:e6:70:6a:f1:
         37:03:6d:ba:43:9e:77:c4:2d:69:c1:13:87:ac:7e:c1:45:65:
         47:77:05:18:0f:2b:25:9f:5a:c4:eb:64:40:8b:6b:a0:b0:71:
         b0:b7:d3:58:70:09:d1:57:cb:57:6a:e8:9e:60:a7:11:a3:3b:
         d5:e8:74:de:d7:88:d2:e6:61:b8:d2:c7:b1:91:f4:60:b7:fe:
         1c:8c:ea:f1:71:14:15:a4:70:30:f8:81:78:ba:7b:fa:92:14:
         ba:e6:74:71:91:80:74:2c:82:60:1c:19:cc:06:21:c5:a8:86:
         3c:10:2c:4f:de:ea:70:bb:04:fd:52:50:d8:f2:ae:d3:53:86:
         e4:97:63:92:f0:3e:a3:e1:ea:a3:0e:c2:8c:89:64:cc:bb:8b:
         cc:21:a2:8b:ff:ac:3b:c0:49:c7:64:a9:b6:e1:99:14:e4:0c:
         da:47:6c:aa:f7:f5:43:62:af:9d:67:47:87:03:6b:74:3a:40:
         1c:fb:0e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:02 2025 by rpki-client