Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File:                     d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier:          ODPhIBPquSxNcVHWmgaGFsZTOGPqAtjvL7HoMaVXaGY=
Subject key identifier:   2D:27:55:22:EB:22:4E:AF:B2:AC:5B:F5:8C:B5:C3:65:FB:F7:FD:17
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer:       /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial:       0198737482A4F0029272FDAD88D7B53590E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 05:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:12 +0000
Files and hashes:         1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: O4JZzsgt6YYWNQ2sMVAqty2npAzwTtAbrdpRSYoWvuw=)
                          2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:82:a4:f0:02:92:72:fd:ad:88:d7:b5:35:90:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
        Validity
            Not Before: Aug  4 05:01:12 2025 GMT
            Not After : Aug  5 05:01:12 2025 GMT
        Subject: CN=2d275522eb224eafb2ac5bf58cb5c365fbf7fd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:57:2a:81:c3:7d:0a:7f:74:9d:7b:1c:c8:
                    46:af:4f:c1:9e:35:68:a4:fd:c1:96:4f:05:1f:23:
                    54:3c:4d:ec:d0:ad:e5:0a:55:d4:2a:74:c5:0a:3d:
                    55:3d:41:5b:e3:55:e4:3f:b5:68:d7:5b:2a:e9:5d:
                    49:32:81:5d:13:bc:19:84:24:2d:2c:4c:6b:76:43:
                    af:89:10:7e:c4:95:22:d3:10:44:c6:e5:2e:90:7c:
                    3c:8b:86:e6:12:91:16:73:f1:5e:a5:40:22:a6:00:
                    01:38:36:5a:de:7a:2a:74:42:72:b3:19:72:35:9c:
                    ea:f2:71:6f:4b:2e:c4:c2:43:53:97:74:10:63:18:
                    48:48:84:e3:00:bd:39:49:b9:94:61:72:71:8c:44:
                    60:63:74:45:18:4b:c9:73:0e:9f:3f:38:56:fe:f2:
                    75:a7:6b:57:ed:52:ac:32:a3:a8:7e:c7:e2:a9:d2:
                    92:16:99:5c:e4:12:4d:18:77:62:cc:1c:b7:69:2a:
                    2e:6b:be:05:34:ca:2f:34:c5:96:f9:ef:32:95:c5:
                    11:f7:10:31:bb:a6:52:60:32:75:a4:0f:04:89:de:
                    b2:a4:d9:dc:0d:28:f8:43:b5:df:81:ae:f1:f3:bb:
                    d7:96:7d:52:5b:12:1f:73:a9:b6:e3:6f:ed:5e:5a:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:27:55:22:EB:22:4E:AF:B2:AC:5B:F5:8C:B5:C3:65:FB:F7:FD:17
            X509v3 Authority Key Identifier:
                keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:98:42:be:3c:2d:a2:04:f4:08:de:2e:6b:8e:39:21:36:
         bc:b4:d0:93:05:b5:2c:3b:86:4e:49:d0:85:12:44:16:d7:75:
         77:88:6d:36:6e:1b:e7:5e:d0:11:9d:d4:5c:0d:85:15:28:dd:
         79:f0:41:c2:62:fd:e5:87:0e:2b:c3:71:cb:35:54:f9:32:ed:
         44:c0:d6:2f:04:1b:75:e9:fe:b7:44:f8:85:df:d0:df:dd:85:
         f1:3b:bd:16:6d:72:2b:96:66:c3:0e:2f:fd:6a:bb:74:30:5f:
         18:6d:e9:ab:8d:a4:47:fb:b8:e3:a9:d0:ff:2e:9b:c0:e3:c3:
         94:6f:18:dd:22:2a:1b:a5:e0:ef:98:c0:d9:cb:da:40:fb:db:
         04:f0:da:f4:8d:c1:dc:1a:e3:1f:11:4b:30:ba:d7:45:53:de:
         a8:5b:20:f0:ba:82:51:02:72:45:97:ef:bd:23:f8:bb:f4:41:
         68:0f:42:59:12:68:4f:2a:70:03:14:9d:cd:b7:47:3e:b5:c9:
         fe:f6:ec:f3:a1:e3:b1:8c:bb:33:35:54:25:01:da:5e:ef:9b:
         0a:43:2a:fa:7b:08:e9:19:0f:44:19:33:88:96:53:5a:cd:37:
         3e:b8:cd:eb:d3:78:7f:4f:e0:61:98:f6:fc:93:92:0f:54:45:
         3a:d6:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:41 2025 by rpki-client