Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File:                     2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier:          Rz0a+SIeAq/1Bynzb4PPGMaYV8jTXOj03+M1dCzBqCI=
Subject key identifier:   6B:E8:99:EC:70:21:2F:79:58:85:52:4F:BE:3C:E3:33:E8:C9:34:30
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer:       /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial:       01987B9B837905D4D7BDCDBF67D790EAEE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number:          1617
Signing time:             Tue 05 Aug 2025 19:00:45 +0000
Manifest this update:     Tue 05 Aug 2025 19:00:45 +0000
Manifest next update:     Wed 06 Aug 2025 19:00:45 +0000
Files and hashes:         1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: 1pRB5CcHltH/fUmncEqT6v8lo0m79KQ1sn8VTK+dkzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9b:83:79:05:d4:d7:bd:cd:bf:67:d7:90:ea:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
        Validity
            Not Before: Aug  5 19:00:45 2025 GMT
            Not After : Aug  6 19:00:45 2025 GMT
        Subject: CN=6be899ec70212f795885524fbe3ce333e8c93430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:89:21:61:10:51:10:fb:42:8d:be:47:51:
                    58:c4:2a:56:fd:85:33:dd:55:20:df:f6:af:ee:9f:
                    25:73:d3:ba:fe:79:aa:06:04:b0:e9:16:9a:ab:44:
                    de:6d:b3:b7:ca:93:f8:f0:ad:f3:15:d4:ab:1f:70:
                    92:6b:8c:b0:73:bb:60:98:7e:9a:d0:36:71:06:ca:
                    c9:f4:d2:b2:ee:8c:c2:73:1d:92:30:e2:38:3f:57:
                    27:19:25:3a:70:c3:f4:53:ca:35:2c:65:b4:2d:e4:
                    f4:81:6a:bc:48:f5:c8:d5:25:26:88:75:b1:96:b2:
                    d0:7e:53:fb:a9:a3:ff:98:d0:66:22:07:68:ea:2c:
                    ca:a9:29:77:40:5b:96:cd:fe:d2:a7:99:62:45:1c:
                    88:30:ed:d7:8d:94:d8:03:71:2b:59:b7:42:55:97:
                    f0:bf:d8:b7:00:60:0b:ba:80:0c:90:25:79:3d:7b:
                    0e:c6:72:4a:34:e2:6a:ad:44:db:1e:99:e1:ba:b3:
                    2f:5b:8b:44:11:89:0e:bb:97:8f:d9:94:28:02:36:
                    a9:b1:a1:e6:90:12:74:92:a7:ea:8c:18:81:6e:b4:
                    e1:f0:51:d7:da:03:f1:74:7e:bf:1a:80:f3:58:3c:
                    ca:4a:b6:46:14:54:7a:a5:70:d7:14:88:49:12:af:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E8:99:EC:70:21:2F:79:58:85:52:4F:BE:3C:E3:33:E8:C9:34:30
            X509v3 Authority Key Identifier:
                keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:62:7a:be:d4:52:1c:7c:3d:22:45:5d:90:13:35:08:0f:86:
         e5:f9:77:ae:a3:41:f2:71:00:57:1c:07:77:c7:c9:8a:1a:cf:
         71:d6:a8:b2:70:6c:b8:08:95:89:09:a6:9a:48:d1:02:30:fc:
         f4:f0:89:f0:76:3d:70:f9:ea:66:bd:ad:3d:b6:70:02:57:96:
         e3:ce:b1:46:e8:50:b9:49:bf:ba:1c:04:ef:17:d8:bf:b3:07:
         e2:b4:33:5b:a2:84:67:01:a3:9d:b1:e0:a8:09:c1:69:94:ff:
         82:56:aa:0d:b5:16:d5:e7:69:13:9a:b3:32:bf:9c:ad:b3:40:
         62:7a:17:29:4e:09:59:b3:a2:71:60:89:8c:ca:12:09:95:ba:
         ae:65:1d:71:50:30:ac:35:86:a6:aa:e0:81:3a:fb:e7:12:34:
         13:0d:59:3f:9c:16:07:c4:a1:31:83:5c:12:e8:d2:50:bf:33:
         bd:13:6a:03:d9:57:19:66:f5:e0:58:d1:43:90:4c:b2:c8:9e:
         1d:48:71:52:34:81:54:c5:d9:7e:b7:b2:c3:28:a1:1e:e7:f7:
         ea:c9:99:65:a5:2e:b0:f7:84:f0:5c:fb:68:ce:f4:26:22:13:
         5d:ba:98:8c:fc:74:df:64:81:bd:ec:a9:6b:a5:24:bd:b8:be:
         2c:06:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:40 2025 by rpki-client