Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File:                     k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier:          XRcsG5hMUUuus7XUbTQhfwyHu2lA9vlZcilXXrwxxNs=
Subject key identifier:   FB:94:CA:84:15:AF:FC:E1:7D:50:3B:C5:99:FD:09:20:D2:FE:15:D4
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer:       /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial:       019892C9EC9BE2B3E5212A001E624035654B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number:          068B
Signing time:             Sun 10 Aug 2025 07:02:43 +0000
Manifest this update:     Sun 10 Aug 2025 07:02:43 +0000
Manifest next update:     Mon 11 Aug 2025 07:02:43 +0000
Files and hashes:         1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: oncsNzEl27NwNNNckudZOVU7GaAp5aLxHMZHn0dsnto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c9:ec:9b:e2:b3:e5:21:2a:00:1e:62:40:35:65:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
        Validity
            Not Before: Aug 10 07:02:43 2025 GMT
            Not After : Aug 11 07:02:43 2025 GMT
        Subject: CN=fb94ca8415affce17d503bc599fd0920d2fe15d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:1f:8d:a9:1e:f6:a8:bc:95:5a:d2:e1:67:
                    ec:4f:85:a8:26:0c:f6:85:5c:ff:ae:6e:7a:41:0e:
                    8f:85:9f:8b:23:92:01:62:c2:47:af:c3:6b:98:ea:
                    9e:46:26:16:f4:31:79:38:76:58:af:eb:72:5e:56:
                    2e:71:60:ea:74:e3:2c:ec:c4:fc:13:36:e8:75:74:
                    f2:e4:7e:88:e7:fd:46:4e:91:7c:62:4a:ac:5f:bd:
                    03:47:4c:c0:d9:1d:7b:a9:19:8f:32:f1:fa:0a:6c:
                    e3:7f:b4:b6:ca:2d:d8:7d:f0:8d:fa:3f:a5:e0:19:
                    76:12:bf:14:b3:88:96:78:66:8b:ff:8b:56:17:8f:
                    fc:1b:18:db:df:9f:27:9b:34:7e:d0:dc:7f:d5:9c:
                    15:65:cd:37:00:a0:5a:db:be:b2:32:9c:9a:45:e3:
                    49:42:08:e0:bf:0a:9a:44:31:e9:c4:4d:62:fe:02:
                    8b:05:ce:4d:60:f5:c0:be:0c:50:47:20:2a:96:bf:
                    c4:8e:48:de:f5:c0:da:57:40:e8:af:8b:3e:65:4c:
                    cd:27:16:fc:c4:30:6b:0b:67:71:b7:3a:ce:15:90:
                    71:32:a0:60:e5:57:16:c7:05:44:39:66:27:31:d0:
                    24:45:84:03:2d:09:bc:ea:8a:b7:f4:0a:a7:55:2c:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:CA:84:15:AF:FC:E1:7D:50:3B:C5:99:FD:09:20:D2:FE:15:D4
            X509v3 Authority Key Identifier:
                keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ba:d5:15:0e:6f:d3:4d:7f:fc:af:4a:dd:0a:9f:02:9c:a4:
         6d:bc:98:a2:9f:af:07:db:c6:ea:b8:2e:e9:57:29:c9:4c:ea:
         04:62:24:a1:94:05:42:37:85:10:b5:10:13:53:a7:c3:9f:e2:
         21:9c:d4:df:82:29:cb:d9:42:ae:3c:72:98:45:d9:5f:04:32:
         e3:98:a9:a8:ce:50:3c:d2:ab:79:80:63:0d:f9:08:28:d0:80:
         0f:6b:41:35:0e:f4:52:54:eb:00:a1:2b:12:da:4d:ce:03:8a:
         c5:8b:62:a2:0a:71:2d:a7:b3:09:1a:d2:5d:df:da:15:c9:5f:
         01:af:cd:03:60:ce:81:b8:1e:ad:f0:4a:e0:6b:c6:60:0f:a1:
         0f:5a:5c:7a:d6:be:1b:71:8f:23:47:61:27:87:78:17:66:a1:
         d8:05:0d:25:c7:df:ae:92:9e:ec:3f:37:14:31:59:b5:d9:ac:
         57:fb:aa:88:93:3d:42:3c:c5:a1:80:59:79:cc:bd:da:26:7d:
         8d:39:31:5c:b6:5e:80:c6:cb:47:7f:39:ad:83:5b:73:94:6e:
         04:b3:ba:19:3c:10:07:6d:67:5e:da:73:74:62:36:77:4a:48:
         f6:38:f5:67:35:f1:ee:5a:4d:fd:a1:e1:ee:59:dd:36:e1:23:
         27:d7:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:57 2025 by rpki-client