Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File:                     ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier:          YJ7TR3InsALPc+nYdF+k/0xmurVPQEfE2KL43FxPWBM=
Subject key identifier:   40:FC:89:DE:D0:75:9D:72:77:90:EE:9F:E6:77:3E:74:8C:DD:3C:B7
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer:       /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial:       019848F726A3FC8E58D202C3BACCE04C4DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number:          10BF
Signing time:             Sat 26 Jul 2025 23:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:13 +0000
Files and hashes:         1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: /ucg1ufs6SjxO2WP0Pdx0eZrvuSwKZ130nPgwky8MMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:26:a3:fc:8e:58:d2:02:c3:ba:cc:e0:4c:4d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
        Validity
            Not Before: Jul 26 23:00:13 2025 GMT
            Not After : Jul 27 23:00:13 2025 GMT
        Subject: CN=40fc89ded0759d727790ee9fe6773e748cdd3cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:1d:8e:a8:df:5e:d7:81:0d:75:5a:d1:1d:
                    8c:9b:09:6c:b1:a4:ae:a0:b4:2e:85:db:6b:69:41:
                    31:20:14:67:d2:4b:11:15:de:15:f4:7f:27:76:d5:
                    64:e2:4a:55:d8:a1:7f:27:5d:8a:01:3f:23:64:df:
                    07:5d:8d:d6:b4:d9:2d:89:45:1c:b1:9b:a1:b9:45:
                    d6:a5:b7:20:94:6d:de:f9:72:61:ef:20:15:57:46:
                    e8:32:24:4d:0b:a7:8c:85:27:81:05:c5:70:65:8b:
                    37:0c:bd:3c:f1:25:98:71:07:76:5b:2c:56:18:89:
                    45:6a:c3:0d:ad:30:31:7b:7f:17:ba:03:be:42:da:
                    43:6d:b0:fd:e1:ab:c2:4e:93:56:47:46:ed:04:74:
                    e5:ad:ea:e5:1a:ad:52:67:f1:e5:0a:0f:4b:f6:84:
                    9f:bd:d5:16:c2:df:a2:a0:9e:73:4b:0e:0d:a8:6d:
                    5b:e6:cf:6b:7b:b2:03:5e:80:37:ea:2b:39:4e:8b:
                    dc:87:a1:25:31:ac:65:15:df:81:11:c8:e4:16:2a:
                    47:20:1a:74:a3:50:1f:2d:58:7a:f6:03:b8:8d:08:
                    8e:ec:c9:7a:11:94:97:24:69:cb:01:c0:ef:c5:39:
                    55:7d:ce:6a:56:ea:5b:05:14:f1:fe:5c:88:b3:50:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:89:DE:D0:75:9D:72:77:90:EE:9F:E6:77:3E:74:8C:DD:3C:B7
            X509v3 Authority Key Identifier:
                keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c3:da:a8:05:dc:e3:d0:60:ce:f2:89:8c:35:7b:9a:d3:a5:
         66:12:c7:ce:04:57:37:b0:e9:48:13:19:76:3b:fa:36:a4:29:
         56:2b:3d:8c:86:39:d4:c9:d4:9d:bf:26:af:80:ce:3d:5d:73:
         0e:e5:d3:a7:4e:c6:ec:fb:31:59:f2:81:d2:35:09:48:09:4a:
         54:b9:fb:46:2e:ef:ae:2d:62:23:69:c7:54:50:b7:30:e0:d1:
         84:fc:1e:5b:73:20:b1:2b:e4:18:41:3b:4b:25:e4:a5:1b:22:
         7b:54:d5:72:a5:ce:bd:50:aa:a3:a6:12:e0:61:16:55:a3:99:
         01:97:5d:84:b1:43:7b:61:e5:a5:11:46:5c:4d:ad:79:20:0b:
         27:2b:ba:b3:85:07:db:b4:e3:b4:c1:61:b5:a7:79:c8:92:4e:
         ba:84:2d:e5:4b:37:b6:96:08:4a:e2:b7:dc:8d:16:f2:40:f5:
         3a:a0:58:10:c0:5d:26:81:d6:54:02:ea:0f:1c:fc:69:f6:ad:
         d9:e3:8c:18:dd:fa:7a:fe:3f:5e:62:6c:cd:10:4d:d8:b6:eb:
         2f:ec:41:4f:36:1a:e6:6e:19:41:4a:83:5a:ee:94:16:6c:7a:
         f3:16:08:8f:52:16:d0:74:c1:c6:0c:b3:70:f2:a4:02:78:f5:
         e0:11:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:28:47 2025 by rpki-client