Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File:                     7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier:          IGTr0EGv5Vf7U3PXrCcTdBRXc8tSaYlZzioPIoBoSv0=
Subject key identifier:   4B:B7:44:F0:97:8A:32:D7:5B:BB:74:73:FF:00:88:82:FA:81:B4:A8
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer:       /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial:       01988168BE8C4CF7EE0041699BBF096D47A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number:          1459
Signing time:             Wed 06 Aug 2025 22:03:02 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:02 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:02 +0000
Files and hashes:         1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: XRGBbCEANpptT6qq/p5Nc9ZmQEQwUpFcobXBhFvWiMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:be:8c:4c:f7:ee:00:41:69:9b:bf:09:6d:47:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
        Validity
            Not Before: Aug  6 22:03:02 2025 GMT
            Not After : Aug  7 22:03:02 2025 GMT
        Subject: CN=4bb744f0978a32d75bbb7473ff008882fa81b4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d6:70:07:84:ee:eb:98:47:4d:94:af:d6:84:
                    15:90:83:64:5b:40:b5:bb:f3:d6:d1:4c:bf:c7:28:
                    30:e8:c3:fd:c5:6c:88:c9:c3:8e:9a:95:99:a8:4d:
                    1c:54:96:f4:f5:cb:63:81:ad:7d:c1:3b:2a:e3:39:
                    cc:3e:5e:11:28:61:cb:c4:b5:0c:bc:c7:51:6f:56:
                    53:63:4b:2e:e2:db:73:db:23:56:12:68:a9:77:a1:
                    8e:11:2d:1e:97:80:21:cd:85:87:ca:60:a6:28:e9:
                    81:7f:b8:fc:af:63:42:ba:5e:89:de:28:52:01:4a:
                    14:10:f9:5d:37:b1:dc:3b:79:4a:bf:60:45:dd:65:
                    32:6d:0e:40:a7:4f:19:95:7d:fc:ad:36:1f:56:6a:
                    8c:4d:10:df:44:38:1d:f5:88:32:07:be:81:a5:56:
                    88:f4:ee:ed:c4:3e:0b:ab:cb:20:52:00:98:49:a4:
                    b9:84:3f:2f:de:7e:94:5c:11:40:87:19:47:32:f4:
                    51:8a:97:e3:92:61:7d:5d:a7:12:97:59:55:31:5e:
                    33:15:cb:af:ac:d6:05:ee:4a:de:54:9c:c9:19:44:
                    5d:54:b5:44:57:ec:6a:a7:19:f7:ca:2b:d5:8a:66:
                    4d:4b:b5:ad:23:ba:c4:99:92:ae:09:3c:87:c7:b8:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:44:F0:97:8A:32:D7:5B:BB:74:73:FF:00:88:82:FA:81:B4:A8
            X509v3 Authority Key Identifier:
                keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f7:11:ed:26:a7:8b:0e:f2:82:57:ae:af:15:9f:cf:b5:b2:
         51:3e:b2:43:83:3b:aa:0b:67:a3:94:e3:1a:fe:eb:94:40:36:
         c7:fe:e7:fd:d9:e4:94:36:a9:60:cc:32:ec:48:45:79:84:ab:
         d7:6f:19:de:64:f2:92:b5:fa:75:aa:19:65:3f:06:fd:2f:5a:
         bd:92:fd:af:d6:4e:08:be:e9:54:e0:6c:0a:36:ec:ec:90:9e:
         9a:7d:77:da:5b:d0:25:7b:7f:e2:83:e9:ed:25:5b:b9:40:9c:
         df:0b:b5:81:1d:cf:01:7e:92:2d:f0:7f:a9:56:8f:cf:de:58:
         4d:35:20:f2:7b:15:d0:53:ee:56:45:b7:68:a5:34:36:9e:40:
         d2:42:b4:fd:0f:3c:bf:38:c9:24:fc:58:9d:e5:2b:86:f0:f9:
         68:0b:7e:50:35:32:35:68:77:f4:69:20:cf:02:56:14:9a:84:
         a5:18:32:46:e7:51:c2:62:7a:91:22:cf:4b:69:fe:fc:ce:83:
         22:ae:7b:d7:3b:69:58:24:78:ce:f8:ef:ce:96:d7:db:bb:03:
         8e:f0:c8:9f:f0:d9:1e:df:d7:f0:0f:eb:a3:53:63:08:07:68:
         1f:9f:fa:3a:d8:b8:97:50:14:98:a4:87:35:24:e4:1b:7c:e9:
         64:cb:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:25 2025 by rpki-client