Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File:                     bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier:          FfruNLWaVfee6UXPx+FdVXoAYP5EiGMJavK1p+AdZd0=
Subject key identifier:   67:01:04:59:14:17:51:53:95:7E:0A:0D:62:47:48:EA:3C:67:19:4E
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer:       /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial:       0198892100420FE304B271D4746503182435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 10:01:37 +0000
Manifest this update:     Fri 08 Aug 2025 10:01:37 +0000
Manifest next update:     Sat 09 Aug 2025 10:01:37 +0000
Files and hashes:         1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: zcvtejTnoc9N2NFwoQUmoC9QfYFnwmtBsXnY4tuq5X8=)
                          2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:21:00:42:0f:e3:04:b2:71:d4:74:65:03:18:24:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
        Validity
            Not Before: Aug  8 10:01:37 2025 GMT
            Not After : Aug  9 10:01:37 2025 GMT
        Subject: CN=6701045914175153957e0a0d624748ea3c67194e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:73:18:97:38:49:83:60:93:d1:3b:4c:53:
                    7f:36:4a:a5:4e:21:c6:36:e3:8a:65:27:e5:31:eb:
                    ab:a8:39:1f:41:33:29:98:32:0b:f6:4d:81:66:ae:
                    82:d4:11:cd:10:c9:e3:7d:13:ea:f7:88:3a:e3:c7:
                    bb:63:06:48:2f:af:f1:c8:6e:f2:75:ea:f8:b1:28:
                    b3:42:3d:64:c6:a5:16:98:c9:33:89:da:52:a1:2b:
                    4e:99:63:78:8d:0f:bc:a8:e1:03:b6:85:ae:da:19:
                    d2:0b:67:9a:84:55:06:8a:5d:79:64:de:4d:97:68:
                    c8:10:e9:9a:2a:4c:2a:50:11:ef:13:a7:83:0f:59:
                    5b:0e:1d:b9:79:15:c5:3c:95:35:e6:ba:0a:6c:40:
                    56:1d:0e:11:f4:39:76:ce:8b:5c:ee:fc:27:21:b7:
                    14:7b:7a:9b:28:f1:26:44:7b:2b:cc:a8:b9:01:ba:
                    21:d9:57:79:bb:4c:29:08:be:af:96:a0:81:b9:2a:
                    78:53:46:58:38:e9:3b:29:69:1a:0c:99:b0:e6:fa:
                    35:ae:cb:e3:61:26:c9:c3:48:2a:4f:1e:b6:59:89:
                    a5:49:08:fd:b3:71:b2:7c:52:84:6c:41:25:75:34:
                    50:c2:96:d4:f5:5e:df:18:c9:57:1a:8c:ea:fb:01:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:01:04:59:14:17:51:53:95:7E:0A:0D:62:47:48:EA:3C:67:19:4E
            X509v3 Authority Key Identifier:
                keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:86:35:e1:1a:58:8d:69:01:4b:3e:5d:6d:da:4c:b9:9f:
         ec:ee:ad:e1:bd:3b:a6:59:95:fd:c7:eb:10:f6:b0:66:00:a7:
         4f:28:6e:63:65:40:ee:d1:96:93:71:d7:dd:b0:89:6b:7e:0b:
         73:4d:50:44:05:83:3e:07:7b:6a:97:f4:a6:86:1e:26:47:d8:
         db:d8:78:87:f8:f5:63:fb:20:54:a3:1a:56:ce:f1:98:2a:3a:
         07:e0:b8:2f:17:a8:f2:c3:6b:38:04:44:6d:5e:87:37:3e:ef:
         ff:8a:bf:55:88:e1:cb:72:af:88:1b:87:94:59:fc:07:94:d7:
         1d:58:8f:db:21:c1:04:56:31:cc:26:13:be:ef:92:2a:e1:43:
         f3:f6:1e:88:d2:2c:b6:1d:9c:5b:54:22:59:cb:b4:cb:fe:3e:
         80:98:e3:74:21:e7:5c:26:33:b1:90:fc:5d:e4:63:9c:84:a8:
         9b:27:d7:1d:b7:77:f8:dc:88:a9:f0:a8:b8:f8:a6:32:65:fc:
         81:7c:23:2f:b6:02:ff:5a:6a:31:7f:af:bc:b7:3b:bb:ab:4a:
         a6:05:17:f7:f1:0e:4d:0d:80:4f:10:00:6c:6d:ba:2a:38:2b:
         92:8d:62:13:cc:1a:4c:64:11:8c:63:1f:38:84:b4:10:a7:99:
         55:09:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:28 2025 by rpki-client