Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File:                     MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier:          pML1O5qLLlOum8sOBTw0OygJjYP2y8Pd6fLzymKsxEI=
Subject key identifier:   3E:9F:A8:E0:92:58:52:00:59:A1:96:52:22:A0:B6:4B:01:80:CF:09
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer:       /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial:       01987F78882F29BF01EF2F96F5B9D853CFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number:          157D
Signing time:             Wed 06 Aug 2025 13:01:02 +0000
Manifest this update:     Wed 06 Aug 2025 13:01:02 +0000
Manifest next update:     Thu 07 Aug 2025 13:01:02 +0000
Files and hashes:         1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: 23cw6yWRMp3tYRW3RC1K6/sMqMYspfIcNZBrJev6g0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:78:88:2f:29:bf:01:ef:2f:96:f5:b9:d8:53:cf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
        Validity
            Not Before: Aug  6 13:01:02 2025 GMT
            Not After : Aug  7 13:01:02 2025 GMT
        Subject: CN=3e9fa8e09258520059a1965222a0b64b0180cf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:c6:7c:31:af:3e:46:75:2b:45:70:87:4d:
                    7d:f3:7f:83:94:4d:da:26:c1:6a:f5:24:ab:d7:7c:
                    70:0c:36:0e:8c:a0:83:08:2c:1a:7a:f7:30:f1:ff:
                    3d:54:ff:0f:37:e7:b0:29:98:30:65:12:d0:ad:eb:
                    af:a1:a6:d5:c0:90:9d:76:0f:da:54:85:cc:05:2e:
                    10:ee:e1:1d:60:d4:b5:5a:e0:d2:af:79:22:c8:2b:
                    be:32:fb:f2:55:33:1c:0a:f5:30:4a:b1:63:5f:f4:
                    cb:a3:0a:61:62:6b:a1:25:c1:1d:e7:fa:84:68:fd:
                    5e:05:42:85:1a:aa:af:01:fb:6a:9d:76:70:32:a2:
                    fa:9f:5e:c2:54:b1:8f:46:d8:22:3b:e4:66:60:96:
                    94:32:ac:c4:07:f0:fb:df:8d:05:ab:1a:52:e5:54:
                    0b:37:6b:ae:33:09:44:41:da:43:dc:ca:aa:ae:59:
                    bf:08:72:53:3a:52:36:cd:f0:a3:d9:44:21:30:6c:
                    fd:1f:da:f1:54:9a:65:9d:bf:c6:9c:48:50:02:8d:
                    a1:31:6e:25:6f:c9:f4:8a:64:e8:f2:dd:3d:cd:39:
                    5b:0d:43:25:c1:6c:89:37:0f:d4:1e:f6:68:64:d9:
                    27:a0:86:25:b8:bf:b0:23:af:3a:aa:37:a2:04:92:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9F:A8:E0:92:58:52:00:59:A1:96:52:22:A0:B6:4B:01:80:CF:09
            X509v3 Authority Key Identifier:
                keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:87:d8:15:0c:5d:43:4d:1f:f4:7f:73:88:19:f2:6b:66:d0:
         d9:2c:58:fe:96:6f:86:0e:d8:50:c2:6b:66:e6:5a:7a:c2:61:
         4d:4e:5f:54:84:e7:ff:bc:78:ed:fc:57:31:93:78:1b:e8:10:
         5b:21:86:8d:18:37:04:c3:35:a9:6c:6c:20:6e:1a:69:cc:fe:
         a1:a4:8c:76:d2:eb:e6:b6:78:5c:d5:e9:4b:a7:91:b9:aa:0c:
         a7:b5:bf:51:87:51:68:93:78:59:70:2a:d2:fd:10:3a:b5:2b:
         ca:70:25:d2:7b:b2:97:1c:f8:2f:32:fd:e4:fd:ce:ed:30:c3:
         b0:70:d5:6c:c0:22:7b:98:8a:3d:47:2c:90:7e:f8:8d:8e:6f:
         d0:1a:e7:0b:cd:64:80:0a:86:6d:11:c9:b4:a8:3f:b3:a0:91:
         62:41:7a:ca:92:01:13:29:07:43:a4:e0:51:73:e0:b6:bd:f5:
         cc:13:1b:5c:25:fa:82:7d:6e:22:58:60:13:b9:c5:0d:f2:7d:
         85:4a:c0:6e:26:25:52:91:e4:40:c9:24:e7:b1:70:b9:da:8f:
         4a:65:49:e7:d1:ae:c2:34:37:a6:60:54:82:1d:b3:a1:62:7d:
         f1:fe:46:dc:2e:39:44:df:62:86:ab:74:fc:e4:7d:52:69:9b:
         3d:ee:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:17 2025 by rpki-client