Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
File:                     rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json)
Hash identifier:          phgoApRr04PmfqmLKCGZ7IGiqGCjw6ej+SsEZTf9n9k=
Subject key identifier:   8E:13:E5:C5:7C:76:EF:72:6C:06:FF:6C:85:76:F6:9A:65:7E:3C:06
Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
Certificate issuer:       /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Certificate serial:       01988B1010D4950A657500808063A59AAE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
Manifest number:          110C
Signing time:             Fri 08 Aug 2025 19:02:22 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:22 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:22 +0000
Files and hashes:         1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: 1QHbsyW3UL3urOcCmi3GSLbYH0ga5zqf/w7HDA2ExmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:10:d4:95:0a:65:75:00:80:80:63:a5:9a:ae:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
        Validity
            Not Before: Aug  8 19:02:22 2025 GMT
            Not After : Aug  9 19:02:22 2025 GMT
        Subject: CN=8e13e5c57c76ef726c06ff6c8576f69a657e3c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:70:0e:e4:bd:7a:df:71:c3:c3:83:ac:ba:
                    a4:3c:25:38:7a:69:08:4b:fd:f4:b3:d2:95:a9:ce:
                    0d:fc:9d:32:2a:b3:96:92:43:7c:70:86:8f:0b:2a:
                    51:51:21:1a:f7:e2:de:cc:88:05:92:f0:63:72:6b:
                    49:7c:7c:8a:e2:1e:31:6f:ba:20:4a:95:cf:80:83:
                    3a:d6:cd:1e:39:04:5a:62:82:a1:aa:76:27:8a:70:
                    81:ac:00:92:3a:c4:ce:11:9e:8c:ed:f9:64:8e:71:
                    e9:77:2e:e2:f5:ea:b2:7d:63:3d:56:72:95:39:f9:
                    6c:0a:ef:80:19:08:07:9a:c8:90:61:4e:b4:d8:0a:
                    c5:ff:45:ce:c3:30:f5:2a:07:62:4a:fc:4b:31:c9:
                    29:ce:cd:af:e9:4e:b4:04:aa:a1:b5:54:6c:da:2a:
                    cc:a8:1b:ab:15:d9:45:68:b9:a1:b1:e7:32:b0:f8:
                    69:89:00:8a:e2:9b:1f:03:4e:1a:f4:0d:9b:52:8a:
                    69:4b:16:a5:92:14:80:a1:59:ac:00:93:91:e8:61:
                    66:aa:9f:a7:7f:c1:38:a6:56:3c:9e:1b:5a:8d:52:
                    a4:86:ce:10:6d:4a:46:f0:1b:ce:91:5b:53:d5:15:
                    ee:ab:1b:8b:07:bb:1a:9f:90:17:92:cb:e3:a3:5a:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:13:E5:C5:7C:76:EF:72:6C:06:FF:6C:85:76:F6:9A:65:7E:3C:06
            X509v3 Authority Key Identifier:
                keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:b7:aa:7c:b5:f7:63:95:d9:43:d7:51:db:75:44:df:24:
         37:87:43:cc:63:52:98:50:88:95:fc:2e:a9:78:df:14:f6:43:
         96:a0:21:13:f2:81:d3:ed:99:d4:1e:86:37:be:2a:5c:e5:09:
         12:86:86:91:7e:15:f5:f2:16:d8:a2:aa:0b:01:52:2c:6d:41:
         6d:e6:5b:f1:53:19:77:4a:36:35:84:79:7d:d1:44:7b:20:4e:
         f6:56:e4:9c:5f:fc:7b:3b:04:b9:91:56:c6:33:45:9f:2e:30:
         7b:53:41:be:d0:40:f4:70:99:3f:a4:62:10:1f:ed:a1:ac:c8:
         09:e7:27:ff:63:d0:ae:44:b7:c3:cd:49:8a:bc:5a:96:74:08:
         9e:00:a2:c9:0f:d9:6e:eb:a8:fe:a9:5c:5e:be:c3:0b:85:c2:
         89:51:df:94:fd:4b:85:fd:a5:0f:6d:b5:95:59:be:38:78:fe:
         ae:af:8d:70:92:a1:66:d4:e5:19:db:27:11:49:69:07:e7:46:
         b3:51:3c:5c:76:16:ed:8a:09:7d:93:75:d1:a8:c7:1e:c8:45:
         d8:9a:92:d6:e0:75:e1:75:20:93:a8:b9:18:24:77:82:e1:67:
         85:c1:75:24:cc:bd:1e:d1:0e:c0:55:e7:59:af:60:f2:ce:0a:
         8a:ac:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:42 2025 by rpki-client