Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
File:                     9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft (raw, json)
Hash identifier:          MKby8rvyFkuxhxiZTeZaUmWykormg1sRFiD50T5IseA=
Subject key identifier:   E7:A4:5C:2F:2F:10:4E:F5:0C:A5:9E:3D:E8:F5:84:DD:9B:52:2A:86
Authority key identifier: F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
Certificate issuer:       /CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
Certificate serial:       019872619B1ECC81614AB111760177F072F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
Manifest number:          0CCD
Signing time:             Mon 04 Aug 2025 00:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 00:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 00:00:55 +0000
Files and hashes:         1: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl (hash: vzCc5G50o1cJDJQ+xCqNzCC8+XRjImflciu5qKlqJqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:61:9b:1e:cc:81:61:4a:b1:11:76:01:77:f0:72:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
        Validity
            Not Before: Aug  4 00:00:55 2025 GMT
            Not After : Aug  5 00:00:55 2025 GMT
        Subject: CN=e7a45c2f2f104ef50ca59e3de8f584dd9b522a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:0f:50:85:e9:ff:b5:13:90:57:83:b0:3c:
                    64:2c:06:64:46:2f:e4:02:b1:2c:7a:bc:8d:8a:51:
                    0f:3f:85:c6:b5:13:e7:4c:68:a1:5a:4a:0c:43:19:
                    62:fa:93:f2:b4:ae:bc:7f:e3:ba:50:4c:a5:b5:83:
                    ea:91:ec:28:bd:33:e9:10:d7:a3:8d:f7:41:0a:44:
                    53:c7:e8:17:72:ec:ff:0f:0b:50:59:46:2c:75:69:
                    36:ed:eb:8d:0a:7c:c6:7e:ef:3c:a1:1b:d8:96:0a:
                    6b:d8:df:67:07:9e:ac:0e:a3:ad:78:8d:2c:68:78:
                    ff:04:7d:29:a0:44:b3:86:bd:63:29:f6:37:19:1d:
                    ff:8e:20:cb:a4:05:d4:ea:a4:d7:3f:9a:5d:cc:82:
                    b7:36:52:d4:3a:4d:57:70:0e:96:44:bf:4d:88:3d:
                    7a:1c:c0:ad:4b:f8:81:cc:2c:89:cb:63:64:0c:f1:
                    35:0e:a1:fb:1a:f7:e8:c1:12:08:85:54:ea:67:fb:
                    a1:d2:d1:59:6d:f5:e7:c8:65:e0:fa:aa:86:a5:a8:
                    98:14:fd:3c:79:76:43:87:56:14:86:d2:65:7d:3d:
                    d1:19:38:ad:ac:c4:1e:e6:71:17:b5:73:9b:7b:6d:
                    cb:09:66:5b:7b:68:30:1e:c9:75:79:67:d6:bc:c1:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:5C:2F:2F:10:4E:F5:0C:A5:9E:3D:E8:F5:84:DD:9B:52:2A:86
            X509v3 Authority Key Identifier:
                keyid:F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:2e:21:5b:70:e3:d4:50:47:90:ff:0b:0d:b7:4a:3e:63:a9:
         90:cf:e7:a5:35:37:16:70:01:11:55:08:a9:6f:80:2c:9b:43:
         0d:d2:05:a9:7b:33:ba:c0:04:8a:47:07:7c:bd:59:8c:06:e9:
         2e:e3:53:8e:25:da:33:88:d7:f0:82:8c:5d:72:b4:ce:67:82:
         8f:98:cf:d7:b9:7d:71:e2:85:9b:71:9a:36:8e:28:bc:12:b0:
         6b:5f:97:8b:62:9f:53:49:d7:f9:5d:98:b6:83:01:0a:8c:bd:
         de:07:0c:f5:de:56:9c:81:b4:16:cb:0a:a1:f7:9d:2a:b5:b2:
         4f:b5:db:58:1a:9f:41:87:ee:6d:f5:fb:7a:69:f0:50:3d:fa:
         21:9f:7a:3b:a7:1d:85:d2:d0:ad:69:99:62:4e:2b:99:48:7a:
         63:65:99:ba:85:8e:09:1e:ee:ab:ff:05:c5:ad:f9:32:56:f2:
         b6:ab:41:33:b5:2a:59:ba:d5:89:2d:46:aa:17:58:bd:59:77:
         96:e1:92:9b:d9:7f:67:2a:81:54:ff:39:d9:7f:87:9c:d7:f5:
         0b:57:12:77:f4:bc:92:eb:29:bf:d0:d8:ba:e6:c3:fe:c1:dc:
         0f:43:51:c3:00:8b:19:de:c0:4f:39:33:d1:f1:79:d3:35:dd:
         54:46:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:54 2025 by rpki-client