Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          1/XMYfqw5mtzbxfJuzkBo8v3EV7+YSoa/HbkOz9l5fw=
Subject key identifier:   E4:4A:1B:49:E4:AF:DF:25:40:6E:DD:40:30:5E:F1:CF:22:2F:30:59
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       01988A69D174B74F041DFA6776BAFC751145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          07A5
Signing time:             Fri 08 Aug 2025 16:00:47 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:47 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:47 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: 7jy6KPVZvoEbvXd+DlXzNxd3CCZFwRLiT1DNl1cgiP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:d1:74:b7:4f:04:1d:fa:67:76:ba:fc:75:11:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: Aug  8 16:00:47 2025 GMT
            Not After : Aug  9 16:00:47 2025 GMT
        Subject: CN=e44a1b49e4afdf25406edd40305ef1cf222f3059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:8c:5e:3c:fb:74:2d:cc:80:18:d1:69:2e:
                    54:38:f4:87:2d:8e:e9:d7:1c:e4:d3:ad:03:b0:5a:
                    1e:dd:11:83:ec:f0:9a:f1:76:8a:5d:fa:46:1b:d2:
                    cb:94:ea:32:4c:71:1e:f1:51:e1:9b:56:40:90:f7:
                    f6:da:fc:cb:02:6b:02:26:ba:db:14:91:1f:6f:c1:
                    a7:3c:ec:11:c3:ef:d9:b0:58:b4:47:c0:b0:81:4f:
                    6d:74:e6:c1:5f:63:b8:a3:b7:55:4a:dd:3e:7d:0d:
                    79:86:42:48:de:74:0d:e5:63:44:1e:69:94:6c:47:
                    5b:2b:4b:17:b1:d6:80:49:a2:65:e5:2b:0f:bb:db:
                    31:48:b7:3b:23:74:bf:7c:f1:04:5f:92:cd:5e:cb:
                    0e:92:a2:88:b6:d6:5f:de:4a:87:16:27:b4:6d:3b:
                    89:1e:f1:90:fe:ac:ac:28:62:16:38:fd:21:9e:8f:
                    b3:0e:8c:70:7b:65:df:34:38:e0:9a:51:29:6a:f2:
                    85:0e:7a:d6:ed:01:5e:d6:0f:fb:76:b6:3c:86:fc:
                    07:02:95:dd:53:fd:de:86:44:f3:9c:fe:f0:b4:00:
                    0a:8e:51:73:31:5c:35:f1:cf:87:df:d2:27:13:6b:
                    21:c6:af:03:f0:f7:3b:07:ad:a8:df:37:08:f7:2e:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:1B:49:E4:AF:DF:25:40:6E:DD:40:30:5E:F1:CF:22:2F:30:59
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:ef:84:88:ef:e2:14:99:68:31:da:59:fc:b4:e1:f5:19:
         e7:f3:3f:ae:52:12:3a:2c:70:91:e3:cb:c3:b0:5e:31:51:50:
         9c:6e:cb:7e:df:b7:dd:7c:e9:94:09:df:7e:ec:41:24:47:66:
         31:2c:be:c5:bc:fc:4b:d5:26:67:e9:b6:9a:cd:3c:b7:87:3c:
         37:9d:dd:19:e1:b7:85:a1:d2:84:37:8e:7e:09:1d:93:40:e2:
         16:67:71:bb:76:cc:02:96:51:78:f8:e7:9a:2b:66:a9:83:a7:
         0b:0a:ec:79:2a:f0:18:c0:9d:3e:94:54:82:cd:eb:b5:3c:39:
         81:ef:3b:a5:53:04:df:d2:c5:82:23:9e:e4:a2:7a:e8:50:3e:
         d8:5b:ca:a3:95:30:79:02:e2:18:06:1a:1d:08:78:f0:83:70:
         d4:45:b6:ae:49:55:ea:cd:ab:d8:d8:49:17:5c:01:46:f8:e1:
         45:91:95:d2:5b:25:0b:bb:0e:ba:d4:6d:a2:d1:5e:4c:1c:95:
         d6:ff:a5:84:b4:6a:b3:c7:c6:78:43:87:f9:d1:35:4c:16:3e:
         15:aa:56:f1:03:ce:a6:0c:f7:bf:04:cd:c4:f2:13:89:03:8a:
         63:b0:59:b2:23:8c:ba:50:7a:6b:1b:31:ed:5d:3e:50:af:a8:
         19:05:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:03 2025 by rpki-client