Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File:                     94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier:          7A97GbU9gdWmQavTzEp/LEIcF3J9YLzp4nZL6/EOfS4=
Subject key identifier:   C1:FB:C0:DA:42:0B:6D:13:33:08:20:8D:1B:59:E2:F0:A7:36:C5:C1
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer:       /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial:       01988B7D2643B82020F017CCDA2757BFF963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number:          1621
Signing time:             Fri 08 Aug 2025 21:01:31 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:31 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:31 +0000
Files and hashes:         1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: K+yuMYK7mxW0ikIw4TPgE+1FCQivVAZsf/ogdbFV/io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:26:43:b8:20:20:f0:17:cc:da:27:57:bf:f9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
        Validity
            Not Before: Aug  8 21:01:31 2025 GMT
            Not After : Aug  9 21:01:31 2025 GMT
        Subject: CN=c1fbc0da420b6d133308208d1b59e2f0a736c5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:ac:06:16:02:81:02:9c:e7:eb:a3:f7:0f:
                    40:e7:ca:8d:18:18:6b:12:dc:11:7d:9a:ef:f9:c3:
                    b0:0e:e7:f4:c7:3f:c1:d1:3f:b3:13:b0:d0:97:e7:
                    ca:fa:d9:40:d1:87:d7:c2:b4:b9:f1:d6:77:62:33:
                    39:d1:b5:71:ae:25:b2:e4:40:57:d0:bf:b8:41:7e:
                    10:1d:1a:a8:47:55:92:ab:60:46:3a:27:b9:3a:d5:
                    e1:b5:ae:73:20:ed:28:cc:9b:ac:21:86:0c:6f:92:
                    cf:16:bf:c2:55:d7:1e:31:cf:ee:6b:3d:f6:04:95:
                    78:9d:d7:ba:12:98:e3:5c:16:96:80:b4:0d:7a:52:
                    d5:ad:d0:93:d4:cd:e4:c7:82:d5:d4:57:a7:f6:65:
                    03:b5:89:20:10:8d:6b:cd:d9:64:f5:59:93:59:b7:
                    b8:fd:2e:34:62:7e:03:36:a9:32:8d:05:a2:8b:e3:
                    4d:1c:1b:d7:e0:85:dd:bd:3f:8c:2a:d2:a7:b1:c0:
                    7c:c1:a5:1e:cf:c9:33:75:72:3e:16:64:44:77:2f:
                    83:c9:c0:2c:ed:6a:fd:ab:0b:96:a9:af:3a:7d:6e:
                    3b:29:80:0d:54:dd:36:df:f6:1e:3a:6c:02:2b:a2:
                    09:35:72:05:37:8d:b9:76:19:30:a6:11:a9:bf:cf:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:C0:DA:42:0B:6D:13:33:08:20:8D:1B:59:E2:F0:A7:36:C5:C1
            X509v3 Authority Key Identifier:
                keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:76:61:5b:6b:19:28:e1:50:b0:34:66:6a:10:97:59:a6:
         f0:d8:07:99:04:dc:59:39:5b:a1:d4:76:64:c6:9e:cd:da:4c:
         87:27:36:17:9f:42:d2:4b:1d:d8:09:54:00:f3:5b:19:39:3b:
         71:2c:22:b5:14:9a:8f:26:5a:ad:db:27:98:f9:8d:b1:e8:a7:
         9f:18:66:68:1f:4c:15:e5:88:eb:a5:75:9c:3b:fc:1f:f8:97:
         b0:c7:e5:76:d8:52:df:25:fc:03:48:9c:e0:9f:a9:76:94:30:
         cf:09:c8:ce:20:2e:e5:1e:ab:a6:4a:fd:b7:d9:7f:37:dd:b8:
         90:49:82:29:fd:f3:cc:35:24:b3:f8:e6:86:6c:b8:8f:8e:5b:
         ba:0d:57:0f:aa:7d:9a:cc:00:76:ae:60:51:42:ff:fc:77:84:
         97:36:c6:71:5e:77:f6:9b:35:ed:50:93:42:38:50:4f:35:f8:
         c3:eb:5a:44:a2:08:2f:b5:9b:dc:d3:f5:dd:84:39:1e:4c:a9:
         d1:5b:15:69:8e:37:88:be:22:79:5a:99:f1:c3:0a:ab:71:3f:
         71:f9:ca:91:f5:a0:23:c3:c2:b1:a7:c1:42:6f:9a:52:4d:76:
         ed:bc:d3:98:4b:55:d7:15:5f:dc:ac:0d:43:01:b8:a1:d8:3a:
         18:04:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:13 2025 by rpki-client