Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File:                     n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier:          MsTPwMe3OzVwX0Rv8PJd8SW/oV/4CO08unTlC8a+XoQ=
Subject key identifier:   74:3D:43:1E:25:4C:78:D3:3A:91:F8:6A:6E:55:E9:34:46:A1:21:F9
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer:       /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial:       019897809B3F14CE068A496DCDD001FA1CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number:          0525
Signing time:             Mon 11 Aug 2025 05:00:44 +0000
Manifest this update:     Mon 11 Aug 2025 05:00:44 +0000
Manifest next update:     Tue 12 Aug 2025 05:00:44 +0000
Files and hashes:         1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: 2Dy+ZapolC+n8UB08wxjeMApSdDE4g0wTuFAcK041Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:80:9b:3f:14:ce:06:8a:49:6d:cd:d0:01:fa:1c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
        Validity
            Not Before: Aug 11 05:00:44 2025 GMT
            Not After : Aug 12 05:00:44 2025 GMT
        Subject: CN=743d431e254c78d33a91f86a6e55e93446a121f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:2c:16:bf:8b:82:5a:47:27:67:0f:f2:4f:
                    71:66:dc:e0:28:93:c8:e4:8a:fb:ac:24:1f:0b:5d:
                    2e:da:bf:7c:56:3b:9f:ae:05:44:cd:87:db:d9:af:
                    db:3d:ec:21:3b:89:17:29:70:5d:94:58:2d:d6:96:
                    c9:4c:ba:d3:ed:86:8e:c1:0f:a5:71:55:cd:be:5a:
                    55:18:ea:70:bc:da:17:ab:eb:b5:4c:ba:54:61:5f:
                    ce:3f:7f:70:05:71:0f:87:bc:5f:90:0b:d3:a9:0a:
                    71:c6:3e:73:9e:76:17:43:5b:a2:8c:35:00:75:ba:
                    2d:1d:07:b8:8b:c1:68:3f:29:0c:9d:6e:d6:0d:70:
                    6f:95:b4:e7:0b:66:e7:eb:4c:62:7b:79:7a:73:da:
                    89:ee:28:d7:f7:69:41:93:69:d8:de:d1:28:84:2f:
                    4e:fe:0b:fe:c5:9f:57:14:3e:d6:d6:b5:0f:b2:b9:
                    80:1a:67:e6:95:38:37:87:0d:8d:d5:e8:9e:76:ea:
                    1c:7f:d7:35:ea:a0:5c:81:01:eb:d8:96:f2:b5:82:
                    6a:17:5e:6e:04:25:3e:66:30:ae:41:f8:f8:b6:e4:
                    ae:e1:b2:25:13:d0:57:37:7a:d6:3c:62:0d:f6:81:
                    23:79:b7:09:4c:e5:75:2b:8b:10:b9:9f:10:d6:7d:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3D:43:1E:25:4C:78:D3:3A:91:F8:6A:6E:55:E9:34:46:A1:21:F9
            X509v3 Authority Key Identifier:
                keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:61:00:c3:ee:48:c7:90:55:72:e8:ac:3a:1f:1d:b3:19:d0:
         6b:d7:73:8e:94:83:f9:ee:d3:1f:e5:32:5d:aa:5b:e3:40:4b:
         d7:58:70:13:f8:d5:ff:9b:92:7f:05:3b:51:6b:19:61:6a:f8:
         fd:b2:9d:b5:ba:5a:48:d0:26:a3:c3:96:b3:55:a7:74:b7:3f:
         5b:34:8b:52:8b:97:cd:69:6c:3b:fb:ab:ce:47:2e:d7:0b:15:
         3b:5b:ba:e5:a2:b0:38:91:a8:c0:71:c7:35:25:b0:1c:f4:95:
         6d:6b:f4:5c:a4:65:25:d1:18:ae:3d:60:14:2e:0f:12:54:f8:
         6a:77:5f:c1:44:ce:21:aa:77:55:23:87:01:44:de:f6:c9:ee:
         a7:e7:b4:da:b3:79:b8:d0:0d:d7:b0:c4:16:93:c3:bc:07:35:
         99:cf:28:fe:a3:98:09:dc:92:88:33:b3:c6:7c:3e:78:66:15:
         57:3c:ae:51:f9:af:18:c9:06:40:7d:c3:e9:5a:89:b5:78:d9:
         5d:b3:e4:fb:82:d3:9a:8f:80:a0:6b:0d:22:d9:f3:94:a3:96:
         9c:ca:db:43:a4:bc:67:d2:c8:42:36:e0:df:31:0e:22:8a:d0:
         6c:ab:1f:b1:eb:24:03:fc:33:72:e2:96:c8:28:e1:64:01:56:
         43:98:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----