Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
File:                     aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json)
Hash identifier:          4mTB2VRaZ6koWFIA2sV4GJF1ig7GTwrCVPBGmmGezn0=
Subject key identifier:   F2:28:8F:F6:2D:9D:6F:91:47:1A:67:DF:E0:C4:A5:1F:46:E7:4B:0F
Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD
Certificate issuer:       /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
Certificate serial:       019874F51EE67AA7E154B6FDB8283D71782D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
Manifest number:          26
Signing time:             Mon 04 Aug 2025 12:01:17 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:17 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:17 +0000
Files and hashes:         1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: u0QsyB1csTJopYDmb7m6PbYWPVI6GIJAHSKaZZnnpcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:1e:e6:7a:a7:e1:54:b6:fd:b8:28:3d:71:78:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd
        Validity
            Not Before: Aug  4 12:01:17 2025 GMT
            Not After : Aug  5 12:01:17 2025 GMT
        Subject: CN=f2288ff62d9d6f91471a67dfe0c4a51f46e74b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:a1:46:e2:de:e7:1f:c9:43:c4:be:72:e6:
                    c7:22:84:e5:92:70:0d:58:00:9a:4a:99:e9:d9:f0:
                    88:f1:3b:cb:c0:df:c0:b3:cc:ff:82:9f:85:df:6e:
                    33:e3:3f:07:f7:22:fc:a4:69:04:68:dd:1a:4e:90:
                    73:a2:7e:81:a4:ee:32:b6:e3:f7:b3:4f:e2:78:b9:
                    ce:f4:dd:f0:b7:66:1f:1a:8b:e0:68:c6:36:d9:97:
                    8c:81:2d:6d:ee:fc:65:16:79:97:c6:3c:f8:b4:01:
                    c2:51:e5:6f:62:87:93:43:20:7e:85:69:b7:ff:89:
                    e7:b9:61:ba:94:56:53:1d:13:55:5a:89:43:05:91:
                    02:0a:8b:08:5e:25:b5:84:10:d6:88:53:a5:62:6c:
                    d5:f5:ff:6b:c2:cc:b1:43:ae:a0:31:f5:bb:c1:38:
                    cb:37:a1:17:72:55:3a:6f:3f:ba:35:ff:b3:d5:2a:
                    b8:d3:58:56:c9:57:ed:26:8c:3e:ab:3e:43:6c:5a:
                    f5:b8:28:71:5a:af:bd:64:75:05:55:55:10:5a:fd:
                    77:ea:3a:36:b5:49:1c:af:2d:44:1e:39:c5:db:e1:
                    01:8f:14:9e:a0:12:7d:52:2e:7a:90:51:85:61:95:
                    d4:2e:b1:61:d4:18:44:53:40:a6:ca:2d:06:3b:d3:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:28:8F:F6:2D:9D:6F:91:47:1A:67:DF:E0:C4:A5:1F:46:E7:4B:0F
            X509v3 Authority Key Identifier:
                keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:57:7f:1a:eb:79:fc:57:df:92:02:cd:0a:c6:80:47:41:
         0e:c5:2b:7b:d4:d1:eb:6e:ec:5a:4a:96:ca:94:0a:93:31:06:
         6a:6c:84:d1:c8:5a:02:38:45:d8:c3:12:7c:8b:6e:4a:88:f5:
         b7:d3:a1:ed:31:a4:75:16:9e:b5:36:74:61:69:e7:d8:24:8f:
         50:17:c9:1a:8f:ea:55:7c:f9:08:35:63:3e:a7:fb:24:1d:60:
         b1:30:36:a4:f7:78:33:87:99:0f:47:02:5d:ba:be:d9:06:d0:
         c7:80:4a:57:4a:cb:1f:95:20:52:19:ff:00:b9:95:59:3d:e5:
         e7:eb:82:44:5f:9b:26:26:41:1b:da:b2:6f:67:0d:6b:a7:f6:
         bd:f7:e0:57:39:20:c7:02:64:02:6b:35:73:20:e6:4e:f8:b6:
         8f:04:40:73:45:6e:e8:47:a8:31:00:cd:ad:5c:cf:1a:bd:9b:
         ad:56:db:0f:6a:d0:ab:3f:ce:f1:f5:c5:cb:59:ca:96:28:36:
         83:1d:82:23:bd:80:53:b7:0c:62:ed:2e:31:6f:57:78:ba:28:
         7f:7e:ef:87:28:1f:3e:42:5a:d9:ea:58:da:30:7f:7e:e2:b8:
         ca:9a:a9:d7:65:2d:b0:0a:ba:17:04:9a:f3:67:8e:d3:03:1d:
         2e:8c:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:02 2025 by rpki-client