Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File:                     dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier:          bjzb65tKji5Zz3ZMdBwX7Xr+BJ7wIsfs01z39lM/A2I=
Subject key identifier:   1E:23:BD:2A:E6:FA:C7:83:B6:6D:1F:CD:D8:6F:89:AF:AA:B1:28:9B
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer:       /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial:       01987450BE46F2AAA5E300E3CDFA78E41C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 09:01:45 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:45 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:45 +0000
Files and hashes:         1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: 55ysUgG8nSpSVF16eVy7+KoFAvKpZAg+RLLGzfzz4JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:be:46:f2:aa:a5:e3:00:e3:cd:fa:78:e4:1c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
        Validity
            Not Before: Aug  4 09:01:45 2025 GMT
            Not After : Aug  5 09:01:45 2025 GMT
        Subject: CN=1e23bd2ae6fac783b66d1fcdd86f89afaab1289b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:94:7c:76:bc:cc:f5:65:78:63:bf:e3:67:
                    54:1e:f7:6a:33:e8:ee:6f:98:3a:59:40:06:91:a4:
                    b0:a9:24:d5:e1:c3:00:82:25:e6:7a:e2:71:b7:95:
                    f1:cd:c8:b3:78:15:61:2d:de:40:3a:9b:da:4f:e2:
                    81:ce:4e:4a:22:d8:be:c0:3e:4c:06:48:d4:3b:5d:
                    57:0a:19:08:02:8c:52:6e:10:f5:f5:da:3d:bd:35:
                    4d:b5:87:b1:bf:24:95:e8:3f:64:83:08:e6:ee:b3:
                    5b:ef:20:a9:2b:66:ba:1d:b4:f9:6f:69:2f:73:33:
                    dc:36:bb:0a:43:5a:bf:ea:33:69:17:98:5b:f0:a3:
                    2f:26:73:57:6e:19:6f:09:d0:f2:b2:6a:c7:a1:f8:
                    4c:51:cb:6b:99:ed:f1:c5:cf:99:e2:c6:82:9b:4c:
                    8b:af:08:ce:74:8a:86:a4:3e:c6:6f:4c:18:84:9e:
                    4f:2d:a1:6f:c0:bd:d1:04:5c:78:5d:78:7a:5b:45:
                    fd:e5:bf:ea:6b:9a:f9:9b:99:d8:f4:f2:da:83:aa:
                    24:c3:ce:72:20:3b:5d:4c:09:34:48:e3:dd:61:75:
                    c1:25:03:78:bf:66:e2:5c:86:0f:63:15:d4:23:f8:
                    be:b5:e2:42:28:19:7d:65:09:28:57:8d:ed:91:8f:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:BD:2A:E6:FA:C7:83:B6:6D:1F:CD:D8:6F:89:AF:AA:B1:28:9B
            X509v3 Authority Key Identifier:
                keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:41:92:e4:00:d8:71:80:73:0d:76:fb:08:e3:d9:f7:a9:
         f3:fe:36:a6:e7:f4:f2:74:35:7f:3b:b4:d2:78:09:bd:70:64:
         85:95:15:60:de:6b:8b:f4:ef:d8:89:24:2e:84:cc:5e:86:0b:
         71:bc:49:0b:6a:89:ab:42:e1:2d:8e:09:9c:50:fe:9a:c7:d4:
         6a:66:a4:27:f2:7d:90:ea:44:7f:7d:30:61:e5:ed:9b:2d:bb:
         d2:7f:96:5e:ea:c0:61:03:09:ca:66:12:a2:41:07:5c:6c:2c:
         7a:64:8b:6d:82:b0:27:db:9e:c3:20:42:c2:c9:31:3e:90:16:
         bb:f7:f1:16:db:99:f1:66:5f:78:be:6a:22:2d:cb:99:10:33:
         37:43:c3:a3:d3:ce:e0:3f:b6:60:59:4d:bc:28:4d:c4:71:7f:
         0e:10:0d:cc:25:e1:74:ff:a7:08:ef:5b:9e:d1:a2:31:8d:16:
         51:af:cb:c7:f6:08:6a:2c:6b:ac:bb:4f:cd:ab:d8:37:e2:20:
         d8:72:e9:26:19:24:f9:7a:c3:97:0b:6c:07:48:5e:19:72:2c:
         4c:10:50:b1:8f:24:e4:14:52:d6:01:96:b1:b4:ae:11:84:81:
         b3:1b:b6:a4:18:6b:aa:86:be:18:72:7e:89:3b:26:d2:d4:4c:
         b7:2a:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:59 2025 by rpki-client