Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File:                     CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier:          ZuZQm5HYgB7lL3y+X+gioBU8Cv4TuGA9qR88/2U6wmM=
Subject key identifier:   82:7F:FB:C2:D9:7E:D8:60:98:B8:7D:64:D3:AA:5F:CE:A8:9A:93:53
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer:       /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial:       0198741915C87B3656E9D056D693F94574CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number:          0CE9
Signing time:             Mon 04 Aug 2025 08:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:57 +0000
Files and hashes:         1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: YG2Wlz+YUu4ZMxHxg8qgAcwxcrs1MgJsVBUHJ25RFBk=)
                          2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:15:c8:7b:36:56:e9:d0:56:d6:93:f9:45:74:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
        Validity
            Not Before: Aug  4 08:00:57 2025 GMT
            Not After : Aug  5 08:00:57 2025 GMT
        Subject: CN=827ffbc2d97ed86098b87d64d3aa5fcea89a9353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:0f:52:4c:df:b3:57:62:27:5d:4c:5b:ff:
                    3c:7d:d1:66:f9:96:2d:ed:57:12:60:59:bc:85:01:
                    05:ea:ea:51:f6:1d:ac:32:1e:e3:f0:98:1c:8a:9a:
                    31:37:db:66:88:f6:ea:21:7d:73:02:24:ca:53:05:
                    04:b9:0e:ba:a7:04:c7:5b:69:73:b3:4c:f4:aa:4e:
                    c2:bf:bf:56:ff:66:71:ea:4d:e4:2c:44:a4:17:5d:
                    fa:30:08:21:12:6d:c9:45:f4:c1:57:77:fb:d6:ce:
                    38:99:5a:bd:e2:0d:b5:2b:5e:32:ba:63:aa:10:69:
                    be:84:bc:22:b5:cf:ab:52:df:00:34:45:07:06:86:
                    1e:87:8a:68:54:e0:c6:a0:2f:eb:a5:e7:74:73:5f:
                    35:de:71:ac:33:60:d7:26:20:98:76:d5:7f:e9:f1:
                    ad:37:e0:46:41:2a:d2:94:ff:24:9b:95:d5:01:fc:
                    87:25:50:b2:1d:d6:c7:ea:01:40:61:cd:c5:08:f0:
                    67:7d:f8:8e:9d:98:4d:94:65:96:38:84:53:a3:d9:
                    76:75:3b:99:5f:28:bb:46:b9:05:73:c5:ff:38:2b:
                    6a:e6:4f:66:86:f4:98:43:08:5d:a7:2b:12:ea:48:
                    f8:ff:58:0d:dc:a3:35:f4:a6:94:3e:d6:79:58:3a:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7F:FB:C2:D9:7E:D8:60:98:B8:7D:64:D3:AA:5F:CE:A8:9A:93:53
            X509v3 Authority Key Identifier:
                keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:73:72:3f:0e:bb:d5:4e:a8:da:0d:eb:75:4c:d0:a3:9e:72:
         6b:4a:4f:4f:03:86:58:54:23:33:35:7b:8d:13:55:21:0a:51:
         fd:da:ca:d9:55:54:ec:4c:a1:20:ea:52:0c:1c:68:0f:19:fc:
         87:4b:7d:0b:91:ff:6d:c8:e7:20:29:de:8f:fb:aa:5d:ce:59:
         5c:b6:75:2a:3c:54:e4:00:4b:5d:8c:f5:99:31:82:eb:ca:ca:
         8b:60:33:be:5a:66:32:26:92:3f:63:56:12:86:97:1b:75:85:
         1b:43:ea:18:c6:02:01:19:f5:7a:35:4b:2a:4f:11:c7:2a:89:
         0d:59:da:db:ed:7a:e8:b5:8d:bc:33:b8:60:a7:b4:fd:66:d4:
         6f:14:ff:88:59:91:73:fb:1d:d4:ef:c3:58:a6:47:c1:d6:ac:
         b7:84:42:5b:43:e0:50:1c:ab:16:d0:70:67:e8:f0:1b:54:d1:
         80:a7:95:7e:8c:e4:cd:7e:94:f7:c0:b0:98:11:0d:8b:da:8a:
         d6:5b:a2:bf:76:c3:84:0d:49:77:93:34:ef:91:b1:e8:e6:bd:
         31:7f:91:81:31:5e:39:9d:43:45:7e:3c:1f:b7:fb:9c:cc:02:
         72:3d:a1:67:ac:e5:ce:e0:54:6d:53:83:5e:64:0b:a9:57:b6:
         8d:2b:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:04 2025 by rpki-client