Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File:                     B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier:          u2r5L16ev9+UBmR8vV1wMKJl5vU0FnnstJGXNWKP6h8=
Subject key identifier:   19:E3:AE:F5:13:2D:90:FE:D7:9D:AB:B6:1A:19:50:E3:D2:1D:3F:EF
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer:       /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial:       019873E1D1867071EE7825F718D1BB33321C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:35 +0000
Files and hashes:         1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: x7Q4rBQgcqRkDbXf2kc9UDRU9nedsGKwNGWrTEX6S3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d1:86:70:71:ee:78:25:f7:18:d1:bb:33:32:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c610b2a06db1831854b6726c33090336287415
        Validity
            Not Before: Aug  4 07:00:35 2025 GMT
            Not After : Aug  5 07:00:35 2025 GMT
        Subject: CN=19e3aef5132d90fed79dabb61a1950e3d21d3fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:56:0a:fc:8b:bd:f0:56:cf:d2:f6:c9:7d:
                    2b:37:48:0b:42:fd:81:e4:cf:5c:4b:76:0b:95:0c:
                    61:9f:06:e2:c9:d0:96:75:53:27:ab:10:83:20:10:
                    58:8e:f9:70:1c:b8:cd:00:86:13:f6:b9:bc:ce:3f:
                    0e:bd:5a:17:29:78:f6:60:6f:d7:a3:87:7e:17:b9:
                    cf:1e:6b:c8:f9:c0:19:72:c6:6c:4d:7a:7a:cd:7a:
                    3d:31:06:3a:ea:a8:06:31:bb:76:27:b6:0c:d0:fb:
                    f5:52:b8:7d:d3:a9:ef:cc:fd:82:2a:17:d1:57:77:
                    9c:9f:e3:e3:60:50:55:72:a2:f5:84:9e:eb:e7:5c:
                    8f:00:39:4f:34:75:aa:75:4f:67:41:55:57:d7:53:
                    9b:f8:4c:a3:90:c3:10:88:3a:25:27:cd:fc:76:e8:
                    25:0d:96:6e:7a:63:a9:d4:9f:6c:e3:f5:8b:7e:3f:
                    27:96:c3:1b:08:1c:bf:9a:82:fc:3d:7e:10:5e:89:
                    6b:24:95:bd:2b:09:5a:49:e6:d7:46:49:43:38:e4:
                    19:36:ce:56:1d:57:7c:b4:0e:f0:95:87:dd:b7:57:
                    67:8d:9c:97:8f:64:72:95:36:28:c8:a7:eb:66:69:
                    f3:25:ed:2d:bd:9e:a2:b0:43:20:d8:4d:bd:a2:1e:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E3:AE:F5:13:2D:90:FE:D7:9D:AB:B6:1A:19:50:E3:D2:1D:3F:EF
            X509v3 Authority Key Identifier:
                keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:17:c3:6e:60:a8:a7:4d:ce:1f:5c:a8:a2:40:b0:83:e8:c0:
         d6:44:56:1e:cd:90:ce:54:e6:6c:38:5c:4b:4b:85:7b:34:98:
         25:39:d9:47:5d:1e:d2:33:87:d0:c3:c5:e3:d1:3a:d3:ec:62:
         50:76:0f:38:48:26:57:79:4c:1f:6f:75:e1:c0:ad:4d:7c:78:
         c3:45:d2:4a:e5:b3:51:e1:3a:61:0b:cb:03:06:76:75:7c:91:
         fd:ca:5c:3d:13:ef:5e:83:c7:af:fb:56:8e:d1:cf:ff:b5:1c:
         e0:ea:68:18:0f:1c:64:5d:6a:e9:b0:02:e2:08:09:2d:37:8e:
         42:29:0e:97:e3:5f:a7:81:6a:70:1e:f8:de:4a:fd:e0:00:15:
         13:4f:a6:ec:c4:1f:93:35:d3:2d:a2:99:1f:19:42:0d:8b:a7:
         c3:3d:3d:fe:b2:92:20:00:b7:16:de:54:c2:31:95:2a:c3:ee:
         a7:36:ef:e0:a4:5e:4f:57:54:20:95:23:66:e4:a2:2e:f6:a2:
         2f:d2:af:9d:d5:a6:08:00:c2:c7:26:cb:c4:4e:9f:cf:e0:5b:
         8c:a3:4f:c5:fc:d0:cf:b2:c4:17:39:05:6d:0c:be:e8:2f:11:
         c1:05:b2:62:32:a6:3c:38:9a:e8:3a:2a:4b:b0:a5:54:0d:8a:
         36:c2:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:55 2025 by rpki-client