Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File:                     ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier:          8PuFQPt23WdOF+4Ws1qrJNMBH+or2vdpbyFVR970eW8=
Subject key identifier:   48:AA:06:AE:50:79:DE:93:C5:5E:57:9A:5F:7B:26:C4:94:52:13:F7
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer:       /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial:       019883571D1499AB0C8BF328437F3AB4FDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number:          09B0
Signing time:             Thu 07 Aug 2025 07:03:00 +0000
Manifest this update:     Thu 07 Aug 2025 07:03:00 +0000
Manifest next update:     Fri 08 Aug 2025 07:03:00 +0000
Files and hashes:         1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: imtYxZ894PQinfYzNel44X3M1UXQHQoDx9RFRXcNgsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:57:1d:14:99:ab:0c:8b:f3:28:43:7f:3a:b4:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
        Validity
            Not Before: Aug  7 07:03:00 2025 GMT
            Not After : Aug  8 07:03:00 2025 GMT
        Subject: CN=48aa06ae5079de93c55e579a5f7b26c4945213f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:16:f9:95:8b:85:7f:ba:3c:81:f8:77:cf:
                    08:5a:6c:a2:77:52:6a:e3:08:9f:58:2e:6d:c4:ff:
                    2d:82:78:73:be:ac:03:56:2d:9f:7d:aa:9e:cb:1e:
                    05:c3:14:fc:c8:b8:8d:e5:37:51:01:9a:5a:a3:78:
                    fd:2e:43:06:a6:27:ff:86:bc:b5:0e:47:ce:8e:9e:
                    de:6b:96:53:a5:a4:2a:24:1d:86:e9:53:9a:ad:10:
                    47:75:eb:7d:1b:72:64:e7:d7:4a:dc:4e:e9:6b:8a:
                    da:93:ee:a8:2a:5b:75:cc:63:87:5b:b4:01:7f:08:
                    81:a2:82:8e:42:be:82:65:13:19:e6:ff:30:89:3a:
                    bc:78:6e:41:22:98:d6:4d:a2:69:65:07:32:30:5b:
                    49:fe:d6:8a:b1:d6:bd:09:54:05:83:04:6c:5c:b1:
                    51:db:e3:90:c8:9c:89:d8:4c:80:65:91:6b:90:28:
                    59:65:17:ec:8d:fa:45:09:94:b5:88:5d:86:f7:c0:
                    98:78:d7:ca:a4:eb:86:95:85:cb:ed:ec:5b:24:32:
                    28:d1:fb:5a:62:35:16:3f:9b:38:b5:4c:50:3b:d6:
                    a5:b2:36:ee:8d:4f:ab:b5:76:f2:7c:9f:c0:8b:e5:
                    2e:20:c6:ba:2c:73:47:ad:1d:38:46:04:86:5e:d0:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AA:06:AE:50:79:DE:93:C5:5E:57:9A:5F:7B:26:C4:94:52:13:F7
            X509v3 Authority Key Identifier:
                keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:59:60:aa:2c:0d:b6:fb:81:6d:d8:a4:ea:0a:6e:1b:92:cd:
         13:44:ed:3d:fc:bb:ea:89:b8:47:e9:78:12:01:b8:5c:81:7a:
         32:c3:4f:1e:1f:18:10:45:97:87:8e:80:d5:61:eb:bf:d3:9f:
         02:78:da:a6:bc:90:8f:24:70:e9:60:27:8e:2d:00:d8:97:90:
         44:29:1f:62:d5:4c:35:ba:58:8c:69:6e:8a:ab:58:2a:3d:d6:
         ea:06:db:23:a9:8e:94:9d:d8:71:7c:f2:8c:82:95:13:2e:ff:
         6e:d4:d9:ae:3b:a3:f2:09:b2:ee:20:4a:ed:d3:f2:ae:a5:d3:
         86:9a:20:51:0e:89:b8:12:09:93:98:d1:32:68:58:a3:d3:66:
         ac:17:f1:0d:d5:8c:fc:e9:9b:e4:65:7c:31:ee:16:8d:76:da:
         72:fd:dc:0b:f3:4a:6b:e7:42:ba:b3:91:bb:ea:d9:82:3a:5a:
         f3:cd:de:80:c0:3c:b3:8b:0c:42:f6:c9:9c:5b:ce:ec:2e:cf:
         b9:db:61:06:5a:75:ba:e8:d5:73:50:de:f3:c9:95:97:fa:70:
         6f:65:75:0f:1d:85:4e:f6:8b:8e:1a:eb:59:56:de:7a:52:ff:
         c2:a3:45:00:ac:6e:12:6b:54:15:c6:23:79:f3:b1:83:86:f1:
         18:e5:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:20 2025 by rpki-client