Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File:                     K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier:          DmWeLjzanDdE8crUEWmNpSP67ZMRVNGh4ldP/9t0w3s=
Subject key identifier:   77:50:D9:3E:11:1F:11:E6:F8:B5:43:8D:9A:62:CF:91:02:73:E6:C4
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer:       /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial:       01987C40567AAB6718810BA3358495D966EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number:          12CC
Signing time:             Tue 05 Aug 2025 22:00:47 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:47 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:47 +0000
Files and hashes:         1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: ShyBnG8aoVDDyrU61tFTBAsWU/h5MTezHul+GSm1LWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:56:7a:ab:67:18:81:0b:a3:35:84:95:d9:66:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
        Validity
            Not Before: Aug  5 22:00:47 2025 GMT
            Not After : Aug  6 22:00:47 2025 GMT
        Subject: CN=7750d93e111f11e6f8b5438d9a62cf910273e6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:25:21:fb:c5:38:3a:1f:27:61:e9:ab:bd:
                    24:ab:7b:ec:f4:c8:cc:bb:fd:d5:2d:7f:9d:a7:84:
                    bb:b2:8a:ea:5d:10:79:7d:c6:01:1f:2f:23:ce:81:
                    e7:34:2c:6c:44:4a:4f:c9:c5:6a:4e:fb:7c:68:c7:
                    2c:49:32:f2:6e:f5:42:93:cf:57:86:ab:2c:fd:24:
                    66:af:c6:11:bb:58:90:cb:b0:8b:23:77:d9:f4:17:
                    99:e8:19:3c:08:6e:ce:e5:f3:b5:fe:7c:aa:6a:dc:
                    39:bb:2b:12:14:aa:7e:e3:17:99:97:a5:32:4e:87:
                    6b:a4:b9:26:58:00:c7:90:44:37:ea:ca:9a:f9:63:
                    d9:cf:2f:30:21:05:58:f5:be:6c:61:4a:6b:6d:ff:
                    5d:56:4b:27:4c:99:18:c4:95:69:a2:55:2c:a8:33:
                    a7:e6:ee:c7:14:92:b3:b0:06:57:fc:a8:56:a6:6d:
                    9b:5b:56:ab:8c:da:0e:a6:e9:d9:94:46:b8:c2:e2:
                    14:22:76:7a:0a:e4:ee:1c:9e:f4:02:46:9a:e2:af:
                    66:e4:f2:e0:38:06:41:81:e4:cb:ef:90:ff:1b:47:
                    39:a6:98:78:bc:42:54:9b:8f:77:71:87:b1:9d:93:
                    05:0c:fd:ce:c9:ca:c5:cc:c8:72:71:b1:20:a0:ad:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:50:D9:3E:11:1F:11:E6:F8:B5:43:8D:9A:62:CF:91:02:73:E6:C4
            X509v3 Authority Key Identifier:
                keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:61:46:1e:b4:de:da:bc:77:2b:2c:3e:d2:da:5d:af:8c:69:
         26:dc:54:18:be:f8:7d:9e:fd:47:9e:79:73:e4:c4:8f:f9:5b:
         66:fc:1e:a4:34:2c:ac:53:f3:a6:4f:80:3c:f0:a6:26:05:49:
         b8:32:db:67:b9:fc:a1:d8:10:3c:6f:90:01:b5:3f:bd:43:f4:
         c9:9c:66:67:bc:3a:b9:05:79:0a:da:76:4c:58:e6:45:4c:73:
         a6:c3:da:4f:f9:c2:3f:38:f9:30:94:b9:2b:80:16:9e:81:bc:
         9f:09:1f:f6:d0:eb:58:8a:b9:c8:3b:2f:13:37:ea:dc:2c:e6:
         da:aa:64:8d:f6:cc:d3:3f:10:78:45:46:d1:a2:b6:e1:e5:c3:
         9b:c2:30:22:87:6e:34:27:f7:33:b4:9e:60:9c:f9:9f:87:0b:
         3a:dc:06:58:39:14:05:3b:e6:c8:73:7c:48:be:ce:0c:7f:e1:
         af:87:97:f6:f0:5c:30:4b:fc:e7:2b:41:62:fe:82:83:04:04:
         0c:80:f4:db:73:58:98:49:0f:fa:56:45:aa:85:95:8b:c9:64:
         11:b4:ff:c3:49:6d:3d:73:7b:c6:2c:4c:15:01:6e:04:c2:36:
         a3:ff:c1:88:78:2c:46:eb:39:08:49:cb:52:25:c8:30:3d:2b:
         31:75:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:21 2025 by rpki-client