Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File:                     RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier:          e+jMI14ClK7ZHE/0XgwWSP3+gtzaJNjnn6UEznJn8I8=
Subject key identifier:   B3:CA:BE:AF:5A:78:C8:BC:D0:E7:F9:27:B8:17:48:9E:D8:F9:E6:D8
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer:       /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial:       01988BEAE4C2C258C896AAB9363D249807E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number:          0708
Signing time:             Fri 08 Aug 2025 23:01:23 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:23 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:23 +0000
Files and hashes:         1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: sIFvX5HFDmy5cbg2yyE7wq+tF46PMUjj/YiUetaqoCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:e4:c2:c2:58:c8:96:aa:b9:36:3d:24:98:07:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
        Validity
            Not Before: Aug  8 23:01:23 2025 GMT
            Not After : Aug  9 23:01:23 2025 GMT
        Subject: CN=b3cabeaf5a78c8bcd0e7f927b817489ed8f9e6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:40:48:a6:f4:45:2e:f3:b5:26:b5:13:0d:
                    dd:f6:45:fc:13:a7:e4:c1:cf:1c:c1:2d:66:02:38:
                    8c:75:96:d6:79:5d:c0:8e:d2:cb:06:c2:c9:6c:e1:
                    e8:a6:c7:60:ba:ac:44:d0:89:41:14:2c:78:78:1e:
                    cb:fe:89:0b:2c:59:c3:dd:ec:b5:22:5c:c8:58:76:
                    47:76:e8:8b:5b:0c:b6:59:d7:d9:f5:08:71:79:a6:
                    54:d8:6e:27:aa:8a:a3:6d:70:79:f2:8d:90:5e:be:
                    59:eb:6e:4b:26:a8:2f:2d:90:fd:de:ef:cd:0e:34:
                    28:e4:42:a4:1c:dc:d4:24:f6:d7:9e:60:6d:07:57:
                    a3:9c:a0:c7:dd:6d:95:a4:3e:f0:bc:ba:15:5f:35:
                    74:54:d4:e0:1a:ec:31:95:e8:b8:69:23:88:61:db:
                    fd:3b:b0:51:33:81:73:bb:cb:d3:6a:3f:3b:30:eb:
                    8e:b3:60:7b:66:39:8b:67:bf:05:59:27:c0:5c:fe:
                    40:31:aa:07:22:79:ca:3c:6a:01:cc:23:6c:b0:a4:
                    55:da:24:53:57:99:73:40:38:e2:25:36:5a:ed:5f:
                    b4:f3:6c:4f:ad:01:2f:d1:37:d7:b4:ac:00:ac:af:
                    bb:54:7d:82:e6:19:a0:02:43:cd:cf:51:35:51:c5:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CA:BE:AF:5A:78:C8:BC:D0:E7:F9:27:B8:17:48:9E:D8:F9:E6:D8
            X509v3 Authority Key Identifier:
                keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:29:dc:da:81:67:e0:cd:87:6c:16:08:5a:41:3a:37:bd:e0:
         14:8c:14:d6:c6:27:6a:de:d9:f7:b3:3a:ea:2a:33:d4:09:d0:
         57:00:fc:02:23:27:82:37:b5:59:82:66:f6:21:8f:62:64:da:
         3a:91:1a:2b:9c:5e:43:85:48:71:59:ae:8e:24:a7:0e:59:43:
         a5:2c:af:2e:74:7d:ef:21:d9:5b:23:df:c3:4a:a8:a5:80:f7:
         60:5b:dc:d4:76:5a:ed:4e:0f:29:07:fa:d7:fe:20:ae:99:83:
         f1:50:05:fb:ce:4a:ca:c7:40:e3:34:09:6d:99:c7:58:e2:6a:
         f9:68:6c:f5:8d:67:4f:e4:80:c8:1b:ce:ed:1b:b3:79:06:2f:
         78:b7:52:07:6b:31:48:95:76:f0:cf:04:90:c2:4b:4f:af:78:
         b0:a2:c4:4f:0a:a3:4f:2c:85:14:a8:9c:8c:0b:b8:4d:bc:60:
         09:f8:1d:c3:61:9b:eb:7d:9d:02:89:a7:87:ce:8a:52:2a:17:
         44:f2:40:37:29:23:ee:3d:82:ab:e3:db:fa:a3:5d:04:6b:bf:
         7f:d8:92:66:12:ac:14:35:d6:f9:42:f9:69:1d:f3:38:a5:bc:
         61:c2:37:54:7c:fb:bf:07:d9:16:ab:d8:91:f8:8b:2d:82:07:
         fc:b7:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:27 2025 by rpki-client