Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File:                     dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier:          yy5adQITDL16jBU+5rq/9LFjcJ5v9lmYUSecEeenYVQ=
Subject key identifier:   3A:0E:12:AB:15:3B:7B:12:0D:BE:29:CE:EB:9D:55:98:E6:36:7F:55
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer:       /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial:       01988B456FAEEA1D03AAFD351C6DF64A53E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number:          01AF
Signing time:             Fri 08 Aug 2025 20:00:40 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:40 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:40 +0000
Files and hashes:         1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: qYduHr5/Yo0j74X8z7+FhT97BfdHWS4EmVLKP86LG5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:6f:ae:ea:1d:03:aa:fd:35:1c:6d:f6:4a:53:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
        Validity
            Not Before: Aug  8 20:00:40 2025 GMT
            Not After : Aug  9 20:00:40 2025 GMT
        Subject: CN=3a0e12ab153b7b120dbe29ceeb9d5598e6367f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:1d:36:11:04:ae:e8:f1:6b:fe:dd:c3:7a:
                    bd:54:43:15:1f:5c:8a:d2:1c:94:5d:f5:9e:eb:da:
                    55:24:e2:af:9d:7f:fa:05:41:1b:b6:49:af:2e:b0:
                    04:48:f4:15:5f:0c:ed:77:e8:aa:cd:98:9a:8e:f2:
                    3f:e9:d4:5b:1e:dc:d2:fe:2c:fa:9f:06:bc:fd:17:
                    ab:73:a2:b1:2c:a4:63:b2:2c:9e:db:9d:0f:8c:3f:
                    2b:81:ef:01:f2:16:2d:ce:f3:0f:75:a7:d8:64:11:
                    0c:1d:db:4d:f5:75:55:d0:5e:52:aa:8e:02:ce:8e:
                    1c:9b:d8:55:f6:99:f2:14:13:8b:40:be:c3:a8:a8:
                    f2:ac:3a:8f:3a:fc:cc:5d:fb:8a:90:89:4e:34:e9:
                    15:85:be:a7:84:10:f7:66:fa:74:11:f3:d8:27:c7:
                    5e:57:a0:fd:85:97:1e:18:f3:6d:36:be:53:4c:99:
                    71:64:b4:c5:5b:ee:51:85:52:81:d9:5a:71:a9:0d:
                    9f:97:53:10:32:31:bf:7f:b5:b3:09:01:16:e4:74:
                    b7:e5:15:f8:f2:a6:5e:5f:da:cc:20:79:12:12:8c:
                    d7:16:02:f5:41:d3:82:f9:8b:32:66:a4:9a:59:97:
                    8c:d0:fc:98:be:cc:9b:b4:bd:ba:fc:45:33:cc:27:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0E:12:AB:15:3B:7B:12:0D:BE:29:CE:EB:9D:55:98:E6:36:7F:55
            X509v3 Authority Key Identifier:
                keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:bb:fa:51:13:2e:2b:3f:2a:99:52:af:2f:f6:a3:92:99:
         bf:99:f5:52:6b:06:ab:d4:46:cd:94:ff:1c:46:ab:d1:6a:30:
         e1:9c:72:17:60:11:51:38:66:8a:70:67:e7:48:d1:a3:5c:80:
         40:04:dd:e7:c9:20:9d:43:43:ee:f0:48:b2:7e:38:e2:5d:f1:
         09:2d:05:82:35:c5:23:f7:74:c2:cb:35:5b:e1:2c:55:be:a3:
         69:7f:aa:da:41:ec:a9:96:27:2e:1a:bc:b2:b0:12:24:3d:ab:
         23:fe:44:06:eb:1a:90:8f:37:75:a5:ba:4c:6f:1f:e7:ad:52:
         f9:01:86:2d:50:01:dd:f2:a4:ae:8c:11:d9:65:c1:79:7d:32:
         5c:43:ca:d0:b3:d6:50:e8:3d:6d:ec:f9:5f:d4:14:74:87:8c:
         4b:a9:68:44:fa:73:63:a2:f9:af:15:a6:e0:07:93:06:c2:03:
         81:e3:99:95:ed:d5:e6:96:71:d3:63:06:32:c9:ed:90:8e:5d:
         68:8f:e0:1d:5d:d1:c9:8c:69:ed:68:c8:7e:0e:9a:85:02:2a:
         c8:d8:58:5c:3c:a3:b0:00:ee:4a:bc:8a:09:41:0a:21:45:cd:
         bd:a8:2c:87:82:1c:04:c0:83:42:63:81:98:64:b4:ec:8f:07:
         28:b0:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:37 2025 by rpki-client