Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File:                     rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier:          s0ZpAWn12hnR3ec55AOLQRGRJZvkDE2usEztFdnDW6o=
Subject key identifier:   E1:33:9A:9C:B3:52:8B:97:63:A8:6E:B0:1E:6A:57:CC:24:C2:56:D3
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer:       /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial:       0198917F02A52C5649E476E5F424870C4FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number:          0466
Signing time:             Sun 10 Aug 2025 01:01:16 +0000
Manifest this update:     Sun 10 Aug 2025 01:01:16 +0000
Manifest next update:     Mon 11 Aug 2025 01:01:16 +0000
Files and hashes:         1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: 8KFLhvHojEuOovFbNs+w4Ik9c3XG4JnpAytij5ytjuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:7f:02:a5:2c:56:49:e4:76:e5:f4:24:87:0c:4f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
        Validity
            Not Before: Aug 10 01:01:16 2025 GMT
            Not After : Aug 11 01:01:16 2025 GMT
        Subject: CN=e1339a9cb3528b9763a86eb01e6a57cc24c256d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:33:52:0b:8f:a2:a8:a0:cb:03:d3:f8:12:b5:
                    f4:45:45:ec:3e:cb:3e:7e:21:4a:d4:2c:c0:ea:9c:
                    0b:30:df:04:26:c7:09:a0:34:0c:17:ae:02:e1:f8:
                    e3:08:b8:b5:d4:e5:c4:ea:9b:92:f4:60:15:05:5d:
                    cc:5b:56:f0:d0:03:0b:d4:61:64:a9:c7:49:3a:00:
                    4d:a4:d4:8e:ff:84:70:0e:f1:38:8c:1f:f0:5f:b9:
                    b3:4c:34:fe:74:1a:04:16:80:27:16:32:9a:00:f1:
                    b8:6f:e1:7b:f2:0e:cc:2e:aa:60:0d:dd:a9:63:f2:
                    4a:ac:8d:4b:f6:04:21:54:c6:44:23:1b:10:32:35:
                    d0:52:a9:f8:bb:d8:42:d6:c0:51:96:33:8f:d5:a1:
                    67:04:c6:a8:c7:44:f6:a9:3b:f4:55:0d:93:8a:78:
                    1b:76:dc:4c:54:5e:b2:ac:91:15:4c:9a:fd:53:b0:
                    67:33:a2:89:7b:95:73:99:6d:0f:fb:71:a5:9e:9d:
                    00:aa:1a:ec:dc:24:f5:c6:20:08:e1:78:cb:06:8f:
                    50:44:2a:22:59:8d:30:9e:9c:8b:c3:2f:94:7d:48:
                    ea:86:3c:ce:2f:13:5b:a3:12:51:fa:97:ab:02:6b:
                    93:d6:08:90:d7:45:cf:7e:06:41:a7:e6:9f:df:bd:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:33:9A:9C:B3:52:8B:97:63:A8:6E:B0:1E:6A:57:CC:24:C2:56:D3
            X509v3 Authority Key Identifier:
                keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:5c:e5:79:08:a8:f1:20:a1:bb:a6:c6:ed:47:5c:3b:03:
         7c:da:13:06:bd:20:f5:13:dd:f2:5d:45:6a:87:74:ab:54:a1:
         d9:46:2e:b8:a9:ab:83:66:98:0e:c4:1b:9b:d1:28:a7:44:38:
         77:d5:59:c6:c6:dd:84:5d:7b:45:d5:8b:63:0d:ae:16:56:75:
         95:d7:41:23:c6:bd:2c:7b:54:22:1a:96:de:bf:1d:8a:6b:ff:
         d1:61:e1:f0:8f:85:5f:83:b6:5e:12:c8:be:5e:73:3e:e8:01:
         2d:c3:41:6a:a0:6a:82:18:32:45:e9:25:e1:38:ad:9e:a3:75:
         64:39:73:b8:a8:5f:91:99:fe:b6:14:4f:02:e5:dd:35:79:1f:
         0a:7d:3c:90:ce:a6:39:d7:76:ea:25:98:79:83:40:3e:9c:71:
         23:ee:87:de:66:1c:a8:84:b4:2f:8a:09:48:60:34:dc:93:ce:
         56:35:0d:69:13:69:02:37:83:7d:85:4a:29:60:e0:6d:7a:6b:
         d7:be:41:f5:29:eb:16:3f:f3:45:86:cb:c7:50:a9:5e:e2:98:
         3c:93:06:2c:ef:2a:fc:d1:8f:25:74:eb:98:50:28:d3:22:b7:
         b0:05:7e:50:37:3b:72:9f:cc:fa:2a:f6:cf:22:4b:02:b5:10:
         5c:1f:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:27:04 2025 by rpki-client