Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File:                     14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier:          vyc9pa9KROzg0VXgPdiGF/dC7tg8ui8/uq6UsvaOBMc=
Subject key identifier:   E8:AA:FC:53:85:0F:8D:B7:CB:2A:5A:48:93:E1:F6:D7:8C:DB:CB:3B
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer:       /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial:       019875D15D8E01D3005B2A96D9C32FF3B3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number:          04EE
Signing time:             Mon 04 Aug 2025 16:01:51 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:51 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:51 +0000
Files and hashes:         1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: Ef+I9qHFpxXQ09BGQb+t0qn+fsJ2qDUI3TIvHGwor+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:5d:8e:01:d3:00:5b:2a:96:d9:c3:2f:f3:b3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
        Validity
            Not Before: Aug  4 16:01:51 2025 GMT
            Not After : Aug  5 16:01:51 2025 GMT
        Subject: CN=e8aafc53850f8db7cb2a5a4893e1f6d78cdbcb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1b:04:75:e7:76:06:3b:3c:46:4d:a3:e6:9b:
                    88:1f:b9:61:21:e8:af:3e:13:ed:a4:78:ca:c7:dd:
                    94:58:28:28:80:74:f9:c4:62:f3:a3:32:af:e3:89:
                    20:81:e2:6d:db:15:66:71:6a:c1:c5:aa:3a:84:1e:
                    55:e1:89:83:6d:3d:39:03:ec:38:aa:39:05:a2:20:
                    a8:c4:e9:f0:00:20:c5:6a:5a:8f:14:23:49:81:04:
                    5f:28:0c:6e:a4:52:a1:bf:90:90:3f:d9:5c:9e:c9:
                    a6:ee:23:7d:29:92:55:f1:ca:6b:e4:35:0f:44:92:
                    78:00:3e:a5:01:21:41:5e:63:c2:1a:99:c5:78:3b:
                    74:24:0f:ac:a2:18:6f:f8:a9:f8:25:9e:fc:2b:72:
                    5c:2b:f4:78:38:d3:6b:46:cb:e8:7f:a0:bf:dc:0e:
                    ad:2b:6b:1a:ed:fe:26:74:4a:a2:57:77:40:00:0d:
                    1b:94:d3:e8:64:36:29:95:b0:de:3f:48:45:77:43:
                    ee:a5:e5:cb:37:f7:c5:cb:2b:fd:a9:e3:cd:19:bc:
                    ac:1d:f2:40:98:91:60:51:f6:54:0d:1e:37:64:0a:
                    f8:8a:87:c2:2d:da:2c:60:9c:06:e8:92:bf:2e:fc:
                    df:8e:44:a3:cc:92:b8:65:b5:a5:fa:94:ee:d4:7a:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:FC:53:85:0F:8D:B7:CB:2A:5A:48:93:E1:F6:D7:8C:DB:CB:3B
            X509v3 Authority Key Identifier:
                keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:a2:8b:d7:6e:bd:43:58:df:af:7e:0a:2e:3b:e2:b5:b5:
         7d:1a:e7:c1:92:be:2d:55:ae:cd:21:a2:da:fa:04:0f:77:ca:
         00:01:b9:d9:6f:db:c3:58:6d:a2:40:d5:80:96:42:d2:d8:a6:
         f3:8a:1f:6e:2a:70:ff:62:40:3c:d5:b5:10:44:a9:8a:f8:94:
         3c:c7:2f:90:0d:1f:de:0b:6d:68:8e:74:99:0c:73:4c:83:fe:
         8e:55:98:f3:d3:1f:e3:43:33:3a:eb:61:16:12:e3:73:71:c2:
         39:0f:34:85:01:7c:d6:cb:aa:e2:9c:d6:49:12:96:75:d7:5d:
         b1:53:87:be:54:0f:6a:16:2f:8b:cd:e1:e6:be:85:1a:75:c5:
         e2:e6:bf:b3:c4:89:3b:0d:0b:1e:4e:1d:d0:56:63:4a:64:c9:
         3b:d2:1a:0e:b6:eb:4d:da:4b:eb:00:85:47:a5:ef:ee:e2:a9:
         5a:ad:7b:51:ed:97:b4:b3:0b:76:0d:5d:ff:2f:7a:19:c1:78:
         b7:85:35:48:ad:e3:a8:d0:9f:57:c6:1b:91:e1:22:c2:a6:b9:
         c3:09:fc:62:a2:c9:4d:3e:7c:de:0e:ed:b6:6b:90:aa:4d:43:
         ec:ea:96:21:fa:7b:64:b4:b3:ae:ea:53:61:8f:50:38:8f:f4:
         01:5b:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:01 2025 by rpki-client