Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File:                     7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier:          hDw00qrlHT5LaPeeLDLe0RuLIETF1i7AFZY/HntmoNM=
Subject key identifier:   1E:B1:39:23:29:7A:A9:BB:64:4E:10:1D:06:56:4A:17:F2:69:A3:DB
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer:       /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial:       019A4EF4DC1ECDA8FCEC854CCC8B8971E417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number:          1548
Signing time:             Tue 04 Nov 2025 13:01:01 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:01 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:01 +0000
Files and hashes:         1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: 3jrSDpUCfnhNNMUV4CuVOIUYx/UALxo5mkXGFYn27l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:dc:1e:cd:a8:fc:ec:85:4c:cc:8b:89:71:e4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
        Validity
            Not Before: Nov  4 13:01:01 2025 GMT
            Not After : Nov  5 13:01:01 2025 GMT
        Subject: CN=1eb13923297aa9bb644e101d06564a17f269a3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:c9:de:a8:f7:55:84:ca:1d:74:6e:22:82:
                    b8:70:78:bd:12:a6:3d:e5:7a:2d:4e:df:5c:8f:73:
                    3f:a6:5e:0e:e5:46:09:c2:36:23:d7:53:a7:ff:df:
                    e4:36:ca:b5:5a:51:5a:9f:cc:e1:d5:be:92:a4:3a:
                    a7:e4:38:80:71:6c:5f:72:34:96:d8:72:cd:e0:4b:
                    cf:03:64:0d:47:8d:8e:47:45:8f:e0:67:09:79:28:
                    15:45:8e:bf:dd:44:fc:e5:4c:62:ea:fd:53:24:32:
                    d5:20:f9:7e:f7:9e:9f:c3:0d:28:e9:9d:69:be:1e:
                    2a:18:ab:75:22:5b:eb:70:0e:03:1f:c4:3d:b9:07:
                    94:5d:71:1e:8c:7c:8f:25:69:28:05:d1:be:a1:c9:
                    58:dd:89:c6:d9:fd:90:42:f6:57:c0:34:fc:58:78:
                    cc:17:b1:bd:a1:bd:92:83:9d:17:b1:e1:ae:99:3a:
                    76:d8:7c:dd:d2:ae:88:d6:76:c4:d0:fa:7d:c7:69:
                    4b:fe:4d:c9:cf:6f:6e:22:d8:33:5c:da:23:01:c4:
                    e6:8d:b2:43:2e:2f:65:08:73:48:7b:c1:a9:eb:2e:
                    53:fa:b1:49:63:4f:62:0a:5d:4b:f8:74:bc:f9:f1:
                    5d:b6:b8:38:6a:17:99:65:b0:77:b3:a0:0e:68:84:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B1:39:23:29:7A:A9:BB:64:4E:10:1D:06:56:4A:17:F2:69:A3:DB
            X509v3 Authority Key Identifier:
                keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:55:86:e9:b9:00:4f:d2:b6:fc:8b:6c:34:5a:2f:f4:e6:44:
         85:4a:d5:68:2a:f5:de:83:ed:81:7f:ef:1f:61:aa:9b:a9:6e:
         9d:a6:d8:1a:ad:2b:71:e7:c0:26:19:26:68:9b:75:82:df:66:
         f0:10:50:fb:bc:b1:4e:16:d8:51:db:40:20:6f:17:95:61:c7:
         74:80:e0:af:fd:1f:24:6d:a1:e0:c8:32:d4:17:6a:46:b2:32:
         97:40:2e:d7:84:fb:4d:48:b8:a6:08:60:39:b2:fe:a7:11:fc:
         28:b9:18:0d:83:d9:2e:7f:d5:fa:58:d3:e1:af:6e:39:ed:8b:
         36:fe:12:0b:96:c1:94:9b:a7:85:19:47:04:ed:e3:e4:6b:4c:
         4f:68:49:9f:d5:f0:79:8b:7e:ed:d0:12:05:1a:b0:a0:74:13:
         e9:87:1b:cb:a9:65:f3:e8:04:3e:7f:a2:c6:16:9b:04:55:18:
         d5:3f:42:79:c9:a6:2f:fa:9f:90:ae:ba:b6:3e:33:5b:32:c9:
         7b:09:49:6b:7a:13:90:3f:08:c5:78:32:fe:f8:db:97:62:f3:
         57:77:59:2d:7e:ac:d5:9b:29:7e:d4:4f:15:7f:7b:35:57:0b:
         3c:4b:3c:f0:01:fb:0c:8e:0c:2c:8f:ad:a1:8a:6e:f1:fc:5c:
         d8:14:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:13 2025 by rpki-client