Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
File:                     dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json)
Hash identifier:          UEmdcwnKLh+glKrW1EOUbO3SKIbGjE7EgLdiUVG/GoA=
Subject key identifier:   F5:47:E8:E5:F6:03:BF:A0:9B:4C:5F:C0:F0:17:56:91:C8:28:3F:A5
Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
Certificate issuer:       /CN=7571c892999bb4564bce480c921b6ff17205ecc6
Certificate serial:       019872CFB6D2D2915149A4974B818792A33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
Manifest number:          05F5
Signing time:             Mon 04 Aug 2025 02:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:12 +0000
Files and hashes:         1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: dSL6Bk/F8XXT+rZO2o0WO5yuAiIFMeX4ZBJCngXQdNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:b6:d2:d2:91:51:49:a4:97:4b:81:87:92:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6
        Validity
            Not Before: Aug  4 02:01:12 2025 GMT
            Not After : Aug  5 02:01:12 2025 GMT
        Subject: CN=f547e8e5f603bfa09b4c5fc0f0175691c8283fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:11:b5:08:06:3e:74:21:39:b0:6d:39:24:
                    f3:13:0b:0c:5c:f7:a8:ee:c8:ea:8e:23:5b:33:e6:
                    f4:f0:7d:d7:c7:38:17:32:49:50:c7:b6:d8:e0:6d:
                    01:e4:05:27:4a:40:4f:2b:71:75:fa:bf:89:22:71:
                    7d:88:b5:70:79:10:26:b2:96:78:24:00:98:c0:c8:
                    98:e0:a4:58:51:15:3f:67:c7:7d:3a:ca:38:51:f4:
                    2f:a7:0a:cf:59:89:68:a2:a2:7b:7f:e9:9d:38:30:
                    23:83:6c:ab:59:1f:d5:e7:70:d2:ea:4b:e7:cd:7e:
                    a3:05:9c:9b:64:78:2f:57:9d:51:fe:6d:4e:35:07:
                    94:bc:a0:18:6c:41:6c:15:34:2f:67:30:fa:6b:e2:
                    93:54:5b:7b:6a:b9:39:78:d3:eb:29:2d:65:7f:92:
                    4e:45:34:ac:cf:00:83:c4:2b:5f:f3:c5:69:5f:bf:
                    f3:1b:0e:9e:19:d3:c5:f3:fa:21:08:7b:f6:60:10:
                    bd:45:eb:09:d6:77:f3:a4:78:fa:fb:f5:13:00:6a:
                    60:67:08:3d:61:c5:02:08:f1:aa:75:87:c9:0b:e2:
                    d1:ba:99:39:cb:90:da:9a:1b:ee:42:c4:d9:96:a5:
                    3d:96:35:59:38:3d:e5:ce:8a:88:11:38:18:e6:18:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:47:E8:E5:F6:03:BF:A0:9B:4C:5F:C0:F0:17:56:91:C8:28:3F:A5
            X509v3 Authority Key Identifier:
                keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7d:70:23:13:21:ff:5c:4c:ca:cf:c5:4c:eb:7d:b9:53:ba:
         2f:96:0d:cb:9c:7a:69:21:59:9b:93:64:c0:96:08:86:06:8f:
         06:f6:4b:ca:60:4c:7e:60:a6:64:d7:ca:95:6c:aa:2c:40:e5:
         e0:23:1b:ec:cd:c0:df:17:44:7b:92:f2:90:e5:6a:22:31:2b:
         44:d6:de:52:90:29:7a:1b:e8:40:20:fa:a6:2f:0c:c2:d6:14:
         10:f9:e5:ac:d1:23:fb:b5:ac:be:f8:0f:92:c1:f9:91:18:1f:
         6a:2f:65:81:01:73:92:34:eb:51:b3:12:83:0b:bd:3a:72:bd:
         96:44:f3:60:64:ca:7a:48:a7:ea:65:b1:be:66:90:4b:f3:ad:
         2a:e7:84:ac:e5:55:3a:82:20:fb:bf:d3:1e:68:cd:39:a9:ab:
         ee:16:13:80:d9:8b:27:b4:91:ae:fc:cd:43:37:8a:ee:d1:2e:
         36:c6:69:56:5a:f7:ce:c3:57:28:78:a2:00:d6:1e:7d:b4:ae:
         7d:84:32:ac:2c:bd:da:0e:4d:76:80:e0:cb:15:ba:04:49:ef:
         a0:ca:15:8a:f7:34:ea:24:f3:78:5b:99:0d:20:45:c2:aa:63:
         b8:06:b6:ec:72:a6:ed:ed:82:a4:af:da:6a:9e:ad:15:e7:37:
         60:b7:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:18 2025 by rpki-client