Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File:                     cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier:          FW4LrxbRsf+esLEDtTV/paV3HafoDGJsUU8aYwpbMR8=
Subject key identifier:   E4:15:D4:FD:F2:7D:CC:A6:25:34:DF:CE:2B:51:5F:8E:A6:28:AB:4D
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer:       /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial:       019A503E689AD40F9ACC8A89B575CAC41E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number:          1393
Signing time:             Tue 04 Nov 2025 19:00:58 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:58 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:58 +0000
Files and hashes:         1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: 0Ge8nVzOC+47Cf2oQiENDcvYZV7XZEGqnC9pxM0ZgIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:68:9a:d4:0f:9a:cc:8a:89:b5:75:ca:c4:1e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
        Validity
            Not Before: Nov  4 19:00:58 2025 GMT
            Not After : Nov  5 19:00:58 2025 GMT
        Subject: CN=e415d4fdf27dcca62534dfce2b515f8ea628ab4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:23:a5:6f:63:82:cd:19:df:53:39:5b:21:
                    f3:8c:6c:56:7f:5b:43:82:d0:e7:cb:ed:c7:b4:84:
                    26:45:35:77:e2:41:14:d2:d9:b1:08:d8:41:54:de:
                    a0:4f:7b:7e:ba:c5:cb:9a:b7:ad:64:01:e7:c5:df:
                    83:d3:3c:b5:36:51:16:c2:d8:de:2d:22:aa:92:de:
                    c9:10:85:88:cd:dd:dc:5a:47:5e:d8:a1:80:da:6b:
                    1a:2a:ba:a6:46:8b:8e:ff:ad:d1:cb:b1:13:dc:ac:
                    2f:4b:92:0a:5f:37:67:80:22:04:bf:53:8c:27:dd:
                    1b:2f:33:51:7e:f6:e4:e9:9f:58:11:25:91:5b:36:
                    c1:51:80:62:16:e0:cd:d9:d1:f2:2a:0b:3f:f2:1f:
                    ee:c9:a1:b1:35:62:b1:a1:14:90:86:c6:5f:24:0f:
                    f0:04:5c:91:8d:f3:14:73:9e:78:dd:d6:64:08:e2:
                    2f:c9:b3:bb:3c:fb:3f:74:72:d6:f3:c7:76:ed:1c:
                    2b:49:1c:22:c7:66:2c:98:6c:aa:44:c9:5f:4c:00:
                    6b:03:af:37:70:16:bf:81:3c:72:4e:57:63:c6:b3:
                    9d:44:26:76:58:d0:07:dc:be:25:5c:8e:2d:0e:ab:
                    59:6c:d2:9e:5a:d0:26:da:cb:13:8f:be:0f:ff:b0:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:15:D4:FD:F2:7D:CC:A6:25:34:DF:CE:2B:51:5F:8E:A6:28:AB:4D
            X509v3 Authority Key Identifier:
                keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:53:e7:43:e0:1d:e2:b8:2e:cd:b4:08:2e:45:bf:1a:d4:2e:
         31:38:d9:ec:d4:8e:45:b8:ea:c3:2b:b7:01:cf:98:36:b3:63:
         0b:3a:20:4d:a6:c0:28:5b:2f:c6:39:8f:0a:a0:e6:e5:fb:5e:
         ab:c4:81:d1:cc:c5:ea:d7:19:f2:f2:3a:b3:73:a2:2b:5c:96:
         c1:af:03:da:b1:48:8f:e9:68:d4:d4:0b:da:a2:b4:0b:f3:29:
         d3:bd:34:92:02:4d:cd:7e:26:ef:01:f9:4b:44:c6:c1:34:d8:
         0c:d3:06:36:fe:86:cd:8c:ce:16:4e:a5:48:a6:db:89:05:55:
         69:ae:b5:2a:7e:46:09:1b:eb:72:47:26:97:ae:5b:b2:d5:f0:
         5d:12:e1:a0:ea:72:d1:0f:db:b3:f4:df:ce:df:9d:b7:1b:f8:
         40:28:e9:c9:2b:d5:c4:ee:72:da:fd:7f:8e:1a:1a:ef:1b:1a:
         29:56:94:54:25:dc:89:b5:37:86:55:a0:d6:d5:86:4f:f2:e8:
         28:e6:aa:17:f9:a9:34:23:9c:58:a2:b5:00:44:df:40:a6:a1:
         c9:32:40:0f:24:bd:f9:43:c5:a2:9c:b4:a4:71:38:10:c9:4c:
         aa:44:e3:3b:40:76:0c:23:07:3e:46:f6:79:91:39:6e:f1:ba:
         2d:33:9e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:53 2025 by rpki-client