Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File:                     t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier:          YQ2dqoOLJN6I8ackDjx4SWTqE/2GJ9UKRzTZuFTtsGo=
Subject key identifier:   23:9A:FD:3B:CA:FE:45:67:45:51:BF:5E:6D:82:C5:DA:9C:CD:FE:F7
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer:       /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial:       019873E2D17F241826CA07928EC89C6BDEBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number:          0F7B
Signing time:             Mon 04 Aug 2025 07:01:41 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:41 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:41 +0000
Files and hashes:         1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: /TQV2lGDAI0WSMlqCkmG0F+BmZCEAKwfrZK3uir4Z1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:d1:7f:24:18:26:ca:07:92:8e:c8:9c:6b:de:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
        Validity
            Not Before: Aug  4 07:01:41 2025 GMT
            Not After : Aug  5 07:01:41 2025 GMT
        Subject: CN=239afd3bcafe45674551bf5e6d82c5da9ccdfef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:54:4d:61:8d:3f:87:d7:d2:73:99:be:94:6f:
                    20:8c:3d:00:d1:e2:13:de:11:41:99:27:81:6b:20:
                    12:48:3a:b2:f6:51:43:6c:ec:11:52:8f:2e:95:ba:
                    67:f0:3f:5a:f8:4b:17:a4:7b:8d:3a:c6:4b:24:b0:
                    47:e0:09:3e:22:58:15:82:cb:1d:46:58:72:3c:3b:
                    4b:c4:e7:d6:0b:2a:43:45:fa:48:1e:c3:bc:ec:10:
                    ba:90:4f:6c:b7:a7:0f:be:08:af:49:93:f0:46:18:
                    14:a7:2d:e7:97:50:3f:ee:8d:4b:ef:65:57:2f:33:
                    b4:5d:7b:92:5a:f0:7b:f1:cd:52:c6:12:46:29:24:
                    27:f2:03:52:3a:e3:28:95:d6:1a:10:40:3d:8d:46:
                    02:3b:f5:a1:79:38:4e:f7:78:10:5f:52:33:a4:0d:
                    c7:2c:10:4c:d3:7c:b2:7a:31:4e:75:7d:a5:a1:1f:
                    26:ee:99:23:3d:28:b3:75:0f:0f:98:be:f3:e6:17:
                    4f:d5:f5:64:ed:ba:d5:91:55:03:be:e1:f2:a0:96:
                    41:ed:39:18:47:f8:20:e7:64:18:07:bd:f5:65:8d:
                    22:68:2b:66:83:17:33:cc:9a:07:f1:0d:e8:34:16:
                    25:27:8e:b7:b8:01:a1:b6:74:2b:59:0f:9d:5f:f2:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9A:FD:3B:CA:FE:45:67:45:51:BF:5E:6D:82:C5:DA:9C:CD:FE:F7
            X509v3 Authority Key Identifier:
                keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e3:55:ae:e7:a3:01:a8:27:9e:2d:30:18:3e:94:62:de:ca:
         72:f1:16:e1:9d:be:1a:21:e1:42:29:cb:57:29:62:17:58:c1:
         21:1c:2d:d6:a8:61:77:a1:22:9a:ae:5a:e3:f0:98:f4:83:7e:
         69:39:29:de:82:71:dc:86:96:72:89:7f:b8:8b:9a:6a:77:08:
         1e:b9:e2:c2:a1:32:a6:18:5e:1d:59:79:ca:89:87:b1:69:a5:
         e6:4e:84:f4:45:1a:3f:17:78:0a:c9:65:df:b1:a5:a2:5a:87:
         21:7f:67:94:e6:60:ce:81:42:d7:21:bb:8b:c3:a1:77:ac:ff:
         11:35:6d:36:b7:a3:2c:a2:14:01:81:ce:b1:60:4a:28:6b:75:
         2f:21:ac:b1:b9:db:2f:b3:0c:91:4b:d6:40:dc:1f:44:c8:3e:
         47:28:fe:8a:b4:ae:d6:6a:90:f0:d4:d6:69:b8:35:01:5b:c3:
         42:16:c3:05:d1:8e:3a:d0:bf:69:79:ec:f9:c8:34:bf:4c:d7:
         c2:b1:6f:ba:6a:2f:e7:b5:95:96:3c:c8:2e:86:b5:a5:32:df:
         30:e6:40:ff:76:7c:b4:eb:a3:22:ab:43:47:b4:2c:c8:97:66:
         5c:3b:a5:2d:30:2b:89:c6:50:55:ba:99:82:f1:69:18:07:b3:
         a8:c1:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:25 2025 by rpki-client