Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
File:                     RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft (raw, json)
Hash identifier:          P9ITY4AxWwmBh09BMOjGWDgU3/Ss9lpIzNijyBILlOY=
Subject key identifier:   CD:B6:BA:4C:10:26:A3:8C:68:6C:4B:71:2D:C8:A6:15:64:97:8E:FA
Authority key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Certificate issuer:       /CN=440586c54614b96edb84709524a334b31c9999fd
Certificate serial:       019894B86831DDF0085E29EB9767848F2141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
Manifest number:          0930
Signing time:             Sun 10 Aug 2025 16:02:49 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:49 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:49 +0000
Files and hashes:         1: RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl (hash: NrBgUaMyAYIu5nNZM7FzdO+mwsZ/jsse3tUXKkjg/x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b8:68:31:dd:f0:08:5e:29:eb:97:67:84:8f:21:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440586c54614b96edb84709524a334b31c9999fd
        Validity
            Not Before: Aug 10 16:02:49 2025 GMT
            Not After : Aug 11 16:02:49 2025 GMT
        Subject: CN=cdb6ba4c1026a38c686c4b712dc8a61564978efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:59:12:c5:66:0c:2f:3f:24:25:23:e5:98:
                    44:08:ae:6e:93:dd:f7:21:78:a5:f0:63:c0:f0:81:
                    32:a0:1b:f5:14:bb:81:f0:1f:5d:de:f5:35:b5:64:
                    46:58:b4:da:78:ce:bd:36:9b:c4:b2:fc:71:13:a0:
                    49:7a:3d:9b:38:fe:f8:b5:9f:31:66:74:a3:84:6a:
                    b1:c2:95:f4:14:fb:44:2a:21:d3:c1:b1:85:2e:41:
                    ff:65:10:62:1f:db:11:17:6c:18:7f:0c:17:15:01:
                    dd:3f:3a:88:68:ef:b1:51:3b:3b:30:83:bc:13:b3:
                    16:76:cd:38:67:52:e4:e4:18:14:5d:9c:93:cd:5e:
                    42:dc:2b:3a:47:50:98:3b:3e:59:d6:cf:c7:57:ba:
                    60:fe:8c:7e:f2:55:b1:39:f7:02:66:2d:12:1e:1d:
                    fc:15:2a:4b:fb:2a:9a:2e:91:ff:cb:78:3a:99:28:
                    ec:37:63:96:8c:6a:7b:75:6e:37:0b:3e:47:40:f2:
                    e5:a6:09:68:dd:bd:12:1a:d4:ca:27:44:90:27:8f:
                    af:1c:3b:13:53:7d:4a:09:50:6e:7e:c5:28:38:c7:
                    a3:c5:17:3d:c1:56:c0:69:26:b8:00:fc:f0:f5:f7:
                    3b:5a:99:42:a0:28:b8:d1:9a:46:74:43:8f:8f:3c:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:BA:4C:10:26:A3:8C:68:6C:4B:71:2D:C8:A6:15:64:97:8E:FA
            X509v3 Authority Key Identifier:
                keyid:44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:6d:4f:d5:4b:2c:1a:64:38:0f:4c:39:45:cc:61:e1:89:
         62:c2:de:3c:0b:a5:77:35:5c:41:af:f1:76:57:ef:9a:44:fc:
         2d:3e:00:0b:3d:c6:64:87:8e:8b:d1:26:12:28:03:9a:be:e5:
         0d:38:c6:3a:00:b6:c0:98:8e:58:fc:78:02:b7:ce:14:43:9f:
         fb:1f:08:de:8b:c1:75:7f:8e:96:2b:1d:2e:e1:e4:b8:0c:f9:
         a0:92:fb:fd:89:81:c8:6e:a4:4b:34:b6:e9:2a:1c:a3:17:39:
         7e:dd:77:dd:80:93:72:86:d3:a0:88:0f:76:46:c3:d8:24:40:
         81:60:79:da:9a:9f:03:f7:66:8e:86:e9:bd:b5:dd:a7:69:a0:
         bf:ec:1e:ed:ee:05:bd:eb:26:e0:9e:97:cb:87:5a:70:5a:d3:
         8e:bb:54:a7:0a:04:0c:c9:da:d0:f5:df:7e:fe:a7:a7:45:b9:
         c1:e8:b5:8e:e8:1f:f9:e8:86:8a:c4:5d:e1:51:82:b9:7d:5d:
         90:fd:4d:22:c8:1f:4f:b3:c6:7e:68:85:a7:5b:0f:9a:79:e4:
         cc:e1:4a:6f:95:3b:13:61:42:0d:ee:ec:a6:60:fc:67:e9:da:
         aa:fc:c2:4b:18:c6:88:23:15:6f:2f:35:72:aa:d0:77:eb:4f:
         32:ed:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:44 2025 by rpki-client