Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File:                     718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier:          CuzHJvEoNXtoHQUtJfu/pEcAd1Yn7NjOxLCvxjwYP9w=
Subject key identifier:   41:A6:1E:E3:58:77:07:2A:11:36:42:5E:34:33:A3:51:B6:8B:78:36
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer:       /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial:       0198A04EF77362CEEB82FA994DABB3991216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number:          1026
Signing time:             Tue 12 Aug 2025 22:03:06 +0000
Manifest this update:     Tue 12 Aug 2025 22:03:06 +0000
Manifest next update:     Wed 13 Aug 2025 22:03:06 +0000
Files and hashes:         1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: 0XUvxj0Z4mkbARvHfa/+QLsvI/ZruN/9ZaBkkEjcJEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:f7:73:62:ce:eb:82:fa:99:4d:ab:b3:99:12:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
        Validity
            Not Before: Aug 12 22:03:06 2025 GMT
            Not After : Aug 13 22:03:06 2025 GMT
        Subject: CN=41a61ee35877072a1136425e3433a351b68b7836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:a9:bf:76:f8:15:c1:13:f9:b8:cf:06:96:
                    e3:dc:4b:bb:5a:06:6a:c2:85:c7:f0:a6:b6:a1:8d:
                    b5:88:53:5b:fb:b3:66:be:81:07:84:42:0a:44:7d:
                    78:51:9d:ab:73:be:23:2f:b2:63:e2:03:ac:aa:de:
                    a1:5a:90:d4:bd:d7:65:9b:cf:1b:36:d1:8b:18:fd:
                    3b:d0:73:68:02:23:9c:94:73:b8:04:dd:17:28:91:
                    62:7c:a3:5a:d2:51:47:e6:7d:a9:a7:31:20:f3:91:
                    2c:9e:70:eb:1c:d1:a1:7a:bc:12:d2:4e:b8:a1:10:
                    fd:cb:74:8e:6b:91:dd:8e:b1:0c:b8:94:74:c7:9a:
                    4e:6a:3d:b9:35:56:b5:51:e0:30:39:ae:59:35:17:
                    51:ac:f1:75:32:2a:10:27:a8:7d:86:5b:c5:6c:1b:
                    fc:3c:cf:e9:e3:7e:74:c1:76:6d:4b:b2:1c:e6:bf:
                    db:c0:64:2b:b7:5d:ef:70:c6:9a:a3:cc:aa:1c:a7:
                    b1:8d:b3:12:21:cf:60:be:5e:82:4c:51:c9:9c:a9:
                    1c:16:00:73:be:9d:ec:b8:49:1b:f5:eb:82:6e:c4:
                    b6:4a:63:b4:e5:59:4c:84:e1:4b:19:70:94:14:9e:
                    82:29:1b:a9:fa:58:51:02:18:9f:39:03:21:b5:09:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:1E:E3:58:77:07:2A:11:36:42:5E:34:33:A3:51:B6:8B:78:36
            X509v3 Authority Key Identifier:
                keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:0b:63:d9:19:1d:f9:22:ba:43:9e:96:4f:f3:01:8c:b7:
         3b:62:43:66:39:20:fa:63:bf:90:5f:a6:ab:96:a9:ab:f8:83:
         d6:8e:4a:68:64:5e:ff:d5:2a:dd:e6:67:c1:d9:af:98:be:71:
         b6:55:54:67:4a:08:be:62:c4:40:32:91:44:37:18:2d:c8:0c:
         8d:a1:e9:87:eb:7e:53:da:54:69:0c:f4:df:1a:76:96:ca:6b:
         90:bf:55:5d:2e:c0:07:f0:b5:b5:b9:5e:31:d4:ed:36:fe:40:
         05:51:16:93:c6:bb:28:89:98:36:99:40:44:d5:be:ca:3c:bf:
         82:83:14:d5:f9:3c:0f:2d:f6:f6:95:2c:f3:ce:83:bd:b8:e4:
         35:54:37:05:e6:24:eb:9d:33:05:10:0c:5d:f7:fe:12:90:10:
         88:b0:12:37:2e:65:72:a0:10:42:6a:99:08:5c:6e:43:b0:ea:
         3e:ac:87:c2:cf:2f:d9:a0:19:62:be:df:2b:ab:38:8e:16:cc:
         ae:2b:98:b3:3a:ea:7f:f5:97:2c:7f:8d:ca:ad:70:2b:15:af:
         ed:57:8c:86:e6:c9:10:b3:f4:34:53:6c:e2:da:f3:c6:db:1e:
         5b:b9:7f:b6:a0:30:2b:f0:7d:71:c2:16:f3:92:26:8a:f8:fd:
         b8:b9:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:20 2025 by rpki-client