Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File:                     D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier:          ijq4q5LoqgdOrlg72lozYE32yfj7CiKTMFWlygLn3aQ=
Subject key identifier:   A1:F9:6E:2A:5A:1B:F8:5F:2F:AC:D3:E2:8D:D9:EB:CB:07:35:F2:AF
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer:       /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial:       01987B9C47B58D4755EEF83BEA68C2EC0F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number:          0BC8
Signing time:             Tue 05 Aug 2025 19:01:36 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:36 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:36 +0000
Files and hashes:         1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: ujp91RuVxkgvo0JnrAsuyXGXnoR6Kr6uH2qQ+mTNmWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:47:b5:8d:47:55:ee:f8:3b:ea:68:c2:ec:0f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
        Validity
            Not Before: Aug  5 19:01:36 2025 GMT
            Not After : Aug  6 19:01:36 2025 GMT
        Subject: CN=a1f96e2a5a1bf85f2facd3e28dd9ebcb0735f2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:be:04:6e:02:fe:89:fa:ff:8e:ed:27:db:
                    90:f3:f6:25:e2:bd:0e:96:52:dd:5d:58:ec:73:aa:
                    a4:c0:69:4f:74:5b:56:33:cf:dd:d2:22:a3:5d:b0:
                    49:63:e6:d4:11:fa:81:b5:b9:e5:86:e8:20:f9:2f:
                    9e:ab:27:e7:ad:54:f4:63:d9:26:67:dd:0c:cb:43:
                    24:a7:a6:11:37:6a:5f:57:91:3c:36:c5:5d:41:a1:
                    d5:2b:dc:81:20:63:5f:2a:7c:6f:a4:47:2e:f8:73:
                    59:23:fc:3b:bf:4e:2a:96:74:3b:de:40:a7:d0:3c:
                    ef:e6:7b:d4:9e:58:5a:ce:31:3c:db:aa:4e:99:d3:
                    3d:e2:e7:b6:04:d8:01:aa:86:ef:86:f4:c4:e7:89:
                    42:22:d4:23:0a:d3:0f:f9:a2:2f:2a:8f:0e:4e:8a:
                    b3:91:2d:e3:3d:62:52:e5:65:dd:85:07:a2:1d:7d:
                    bc:c6:66:83:e2:99:40:ca:c4:b7:7c:48:f6:f5:63:
                    83:ef:1f:6b:e6:0a:0e:51:b4:86:bc:29:aa:ad:49:
                    fd:cf:8a:53:20:ba:91:6f:b4:8e:e5:da:be:b9:d4:
                    81:be:6d:62:f8:81:59:e6:53:5c:a2:f4:0e:01:d5:
                    a6:af:bd:b3:e0:d4:0f:5b:8f:db:b2:05:41:5d:36:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F9:6E:2A:5A:1B:F8:5F:2F:AC:D3:E2:8D:D9:EB:CB:07:35:F2:AF
            X509v3 Authority Key Identifier:
                keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:19:84:86:4d:65:ab:4f:36:d8:a6:20:23:1f:6b:f3:43:da:
         8a:36:c3:99:92:a3:23:6d:75:65:0d:8b:02:de:85:3b:7f:60:
         06:91:e2:ca:b7:0e:c7:ea:7e:03:c2:17:f8:b1:c4:10:0b:f3:
         5b:dc:02:97:b4:32:91:19:f5:0b:23:b4:6c:32:13:ee:fe:09:
         e9:d1:fc:18:a1:b7:e5:b9:b5:63:69:b1:5a:54:2f:e5:7f:d0:
         36:b5:17:b7:ce:b0:1c:84:70:34:69:75:ab:23:50:6a:71:b3:
         8b:a6:b2:c6:70:c2:e9:c8:e6:0b:6c:72:be:33:aa:f8:a5:72:
         26:15:dc:69:78:d5:9d:58:a2:98:11:da:f6:e6:89:62:a4:a8:
         34:41:6a:fd:f9:89:18:47:2b:23:08:79:2a:be:03:af:a8:95:
         e0:92:04:d2:73:05:f0:ee:e8:38:09:dd:13:b2:02:bb:85:89:
         1a:65:54:95:03:ea:32:51:2b:58:2b:59:ed:a4:16:f1:d4:a1:
         e6:97:dd:d9:14:26:71:aa:78:ba:c7:4a:00:b2:a5:29:59:b2:
         e6:71:3a:17:3d:3a:28:50:82:48:f4:99:01:42:94:c8:ed:f4:
         05:68:4f:d0:75:c2:2d:e0:d2:2d:80:52:98:3a:c7:ad:d6:bc:
         42:4f:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:55 2025 by rpki-client