Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
File:                     H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft (raw, json)
Hash identifier:          0ICHxdyBh7kQgvOS0eVMbBPkN8l6Rg801I9bP1ejZz4=
Subject key identifier:   9D:A8:D3:B9:5C:26:3D:72:86:AB:4D:91:45:8B:62:F3:0C:DC:C4:07
Authority key identifier: 1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
Certificate issuer:       /CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Certificate serial:       01988167C32A531EFFD06222955BEC351B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 22:01:57 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:57 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:57 +0000
Files and hashes:         1: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl (hash: 17y9fgUvKPaWUvOjgJ28PHiNeHBcvGeNjFb1ZYWvy9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:c3:2a:53:1e:ff:d0:62:22:95:5b:ec:35:1b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
        Validity
            Not Before: Aug  6 22:01:57 2025 GMT
            Not After : Aug  7 22:01:57 2025 GMT
        Subject: CN=9da8d3b95c263d7286ab4d91458b62f30cdcc407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:86:58:c4:23:c6:2b:26:7b:76:32:f0:7c:
                    4d:8d:f2:67:25:fb:c7:e1:eb:5c:b7:52:97:47:03:
                    66:4c:1e:24:f1:f8:f2:cf:c7:15:9e:49:55:8c:0e:
                    68:d0:00:3e:c7:93:1d:90:dd:34:29:48:84:bf:74:
                    ad:b3:a9:19:5f:f0:7c:b9:fd:86:0b:4a:20:ff:e1:
                    d4:c0:73:85:17:e7:c3:10:9f:a5:32:d3:3d:85:fa:
                    50:cc:b6:ba:60:f6:f3:13:f8:20:7f:66:f8:4d:a1:
                    66:c4:8c:c9:8a:55:83:b9:2c:d0:ca:1e:07:b2:a4:
                    56:58:da:a6:ab:ed:23:91:bc:9f:8e:fb:7e:9a:bb:
                    50:62:2e:fb:d3:d3:6f:7b:53:84:0e:3d:d5:d0:ff:
                    84:fa:41:6d:3a:01:19:46:cd:00:e7:53:f6:48:91:
                    3c:a0:93:fb:22:e9:7f:03:02:7e:5a:c1:68:23:31:
                    b3:22:60:d7:e0:fb:79:cc:c3:40:8d:ba:cf:8b:b4:
                    e6:98:e5:6f:e7:cd:c8:10:9a:f6:82:06:34:4a:73:
                    44:90:98:72:41:96:f2:c6:47:56:0d:2e:d6:43:b1:
                    b5:7e:6e:85:5f:22:9a:d2:83:64:15:35:9a:cf:a1:
                    b8:ed:b2:ab:77:64:b6:f9:bf:9b:a3:b3:4d:f1:18:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A8:D3:B9:5C:26:3D:72:86:AB:4D:91:45:8B:62:F3:0C:DC:C4:07
            X509v3 Authority Key Identifier:
                keyid:1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:23:9f:71:23:cd:23:2d:73:3f:ed:db:6a:c9:3f:24:c3:a1:
         37:aa:04:a1:cc:55:5d:3d:e5:26:1e:b6:ba:77:3b:23:9c:4a:
         11:1f:9a:aa:bf:87:53:45:78:5e:01:02:82:1b:73:80:5a:77:
         49:13:bd:ca:d2:16:93:6d:88:8b:fe:fb:e0:46:8c:e5:e1:5f:
         fc:07:32:5f:10:4a:0d:e6:aa:eb:7f:7a:11:c4:88:ff:a5:77:
         d8:9c:1a:bd:e5:33:52:09:d8:29:08:69:70:ea:da:31:4b:0d:
         06:27:f9:0a:49:23:9a:6e:0d:71:7e:84:45:d5:e1:97:53:05:
         f3:93:0b:fc:c6:05:6f:b1:67:d5:4c:ef:e8:93:55:b9:18:c7:
         3f:d5:57:f8:e8:9a:73:89:0b:32:02:67:3d:a6:e7:cd:49:1c:
         7f:1c:27:e4:2a:72:5a:53:29:47:79:01:f3:a8:dc:99:f3:75:
         a5:ba:14:03:f7:49:8b:2d:3d:bf:68:df:12:31:b3:13:86:3d:
         d4:43:12:fa:f4:ac:1d:6a:97:1a:2e:d1:28:9b:9b:28:90:12:
         00:1b:05:54:3f:13:17:ca:d0:cb:02:8c:ec:17:ab:1f:e3:25:
         df:35:8b:68:90:fe:2b:85:52:4a:e8:8c:2a:3d:66:2f:a2:97:
         cf:37:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:38:04 2025 by rpki-client