Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File:                     _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier:          XYzGM/iUbmR5xjQSbxMjE1gWxivgyVBju/onGnvoS3k=
Subject key identifier:   EC:1C:29:A3:74:CB:BD:35:B9:4B:68:E4:52:F7:EF:F3:97:5F:AF:FB
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer:       /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial:       0198733DDA1680AFC2C378E08AA97B155D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number:          0E91
Signing time:             Mon 04 Aug 2025 04:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:29 +0000
Files and hashes:         1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: 0xdzzswIme/1gOiX4GrUUlCY0ayqtYJux90ze3WY5dE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:da:16:80:af:c2:c3:78:e0:8a:a9:7b:15:5d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
        Validity
            Not Before: Aug  4 04:01:29 2025 GMT
            Not After : Aug  5 04:01:29 2025 GMT
        Subject: CN=ec1c29a374cbbd35b94b68e452f7eff3975faffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:5f:07:f9:0f:df:a6:2e:60:85:c3:4d:f9:
                    af:94:01:33:48:cc:80:6f:65:4e:49:d1:05:59:9e:
                    8a:5b:2a:1a:bd:9b:41:19:10:d2:3d:c5:5b:92:dc:
                    87:79:aa:74:53:0d:d1:e9:03:03:45:d6:82:9e:cf:
                    01:85:11:12:6c:ec:93:79:01:49:d9:69:5d:ad:14:
                    34:04:45:c4:37:3c:3c:c0:47:0f:eb:e7:a8:5d:40:
                    f7:fa:1d:f2:1c:80:4d:a4:fc:93:07:ec:c7:9e:81:
                    47:9f:89:5c:50:aa:52:34:f1:0c:38:a2:8e:c3:83:
                    4e:68:d4:4e:c2:aa:9f:3a:82:12:a8:35:c9:33:0b:
                    af:d4:90:0a:74:a9:96:39:99:58:8b:36:b6:1d:1a:
                    7d:c1:cf:92:3a:05:a6:c9:2d:fa:d5:eb:6b:d4:60:
                    45:38:ea:90:4f:4f:5c:46:0f:d1:5c:c1:f3:1e:10:
                    7c:0c:ff:2b:04:61:8a:6f:ca:25:ef:a1:99:65:07:
                    4e:e4:d0:66:35:d9:04:f1:d8:c7:3d:0d:fd:53:a9:
                    a7:30:93:e6:fe:04:33:0c:5d:41:3c:ab:a6:cb:13:
                    38:c9:3d:6d:63:37:93:d0:57:f8:8a:67:48:f8:03:
                    c1:d7:0e:18:22:46:1a:24:b4:03:38:ca:22:75:90:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1C:29:A3:74:CB:BD:35:B9:4B:68:E4:52:F7:EF:F3:97:5F:AF:FB
            X509v3 Authority Key Identifier:
                keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:46:5d:fb:6a:9e:54:7d:18:06:a8:6f:1c:eb:83:d5:c2:
         36:b5:92:b9:63:60:7c:d2:65:bc:20:47:d5:15:c7:78:0e:89:
         b1:d8:2f:2d:db:a3:6d:aa:2b:ea:de:25:7b:a3:33:97:22:f9:
         a1:ab:98:75:05:75:65:c1:0b:e8:b3:09:31:1b:a2:f5:6c:ac:
         84:fb:8a:91:48:d1:24:ee:2b:47:43:f1:6d:60:59:00:31:c2:
         a0:d2:7e:2f:47:86:0e:57:e4:1e:45:94:94:4d:3b:a6:0e:4f:
         fc:90:3e:e2:a6:4d:d1:35:c4:43:aa:5e:f4:57:1d:31:f0:77:
         08:36:0f:bd:c3:23:0a:a4:e4:ab:49:c0:ff:ef:73:e4:a4:78:
         a3:36:7c:f1:fe:4b:f2:a6:fb:72:6d:80:91:8c:d8:28:35:d2:
         60:18:0e:a8:de:fd:97:4f:94:00:aa:62:ad:43:36:2b:e4:08:
         de:97:c5:de:9f:db:1c:be:5c:0a:e2:25:86:7a:13:74:ef:16:
         06:68:b5:70:0b:2a:7a:b5:a5:b9:50:9f:46:7c:2a:64:f0:f9:
         f3:41:a5:ea:5f:d0:fc:77:32:18:b6:7b:5c:0c:83:a1:42:28:
         55:f1:ae:0e:a8:2c:08:ad:47:16:07:16:da:c3:af:12:4a:0e:
         14:9b:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:36 2025 by rpki-client