Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File:                     t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier:          FjT9zNkLY+BAMn/aZL8bCu5hDxAcpdkfoM/vHT9XPOo=
Subject key identifier:   4F:44:A9:A8:16:C8:1E:0C:04:6A:7C:06:6B:D4:B8:2C:30:E8:13:D6
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer:       /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial:       019849661388D0988DBC734F5E7968C0600D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number:          09A6
Signing time:             Sun 27 Jul 2025 01:01:23 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:23 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:23 +0000
Files and hashes:         1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: AyxIuqq7ZyRdLxfj14zp9cT3OADdjyI5Jn/j6LmIMz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:13:88:d0:98:8d:bc:73:4f:5e:79:68:c0:60:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
        Validity
            Not Before: Jul 27 01:01:23 2025 GMT
            Not After : Jul 28 01:01:23 2025 GMT
        Subject: CN=4f44a9a816c81e0c046a7c066bd4b82c30e813d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:a5:4a:43:46:6a:a2:f9:3f:19:f1:8c:0b:
                    03:c4:ae:35:57:de:8d:f1:87:29:d4:f0:8a:a0:02:
                    61:c7:76:eb:b1:c5:89:f0:2f:98:c7:d4:ca:12:eb:
                    6c:43:0f:1e:58:3b:2a:94:35:b7:1a:06:33:0c:0e:
                    78:6e:c2:66:c3:85:04:0c:69:b3:c6:19:d0:53:72:
                    14:e6:3c:5f:4d:94:96:aa:e3:5e:59:0f:08:e0:36:
                    19:70:15:16:e4:19:0e:5c:ec:61:ec:c0:20:fb:1d:
                    9f:f8:ef:a1:03:8d:e2:f7:25:e3:10:bb:7d:7c:71:
                    d4:45:75:10:ad:a7:ce:c7:68:d3:d6:65:91:58:66:
                    a2:39:97:45:3c:76:bc:54:26:e8:04:bf:c9:a4:1f:
                    ce:f6:a3:87:67:fa:b9:33:ff:8b:d3:c5:f5:33:56:
                    7d:14:ba:b3:d6:de:4a:a6:c5:c6:d7:2b:0c:c2:b3:
                    70:03:50:ee:14:d1:ad:9c:3d:16:59:e9:1e:da:8d:
                    11:7b:90:92:51:7e:41:a6:f4:15:d6:83:10:9d:f7:
                    39:37:6c:d9:c6:a1:f8:29:70:4a:ec:f9:41:fe:56:
                    4c:2f:1d:33:d2:64:7a:dd:5a:2b:4f:32:63:b8:e4:
                    38:17:ff:5d:cb:75:0c:4f:ef:bb:0f:46:8e:8c:cc:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:44:A9:A8:16:C8:1E:0C:04:6A:7C:06:6B:D4:B8:2C:30:E8:13:D6
            X509v3 Authority Key Identifier:
                keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7e:48:38:ca:16:05:6a:32:2f:58:2d:f6:7b:04:6d:67:df:
         80:95:14:66:82:b1:a5:85:91:8f:67:57:4c:45:f7:bc:f0:9b:
         a5:08:42:42:31:79:fb:10:05:b1:bf:ec:8b:b5:fc:25:a2:be:
         62:d3:f5:7b:01:6d:2a:61:c6:fc:7e:42:e4:a8:f3:0f:53:3e:
         a8:40:00:76:64:1f:15:b8:2f:04:47:f7:ab:fa:36:fa:9d:08:
         6d:0c:28:ba:d6:47:d1:5e:e4:ae:c9:b2:31:f6:73:0b:35:23:
         99:53:66:2e:ee:5e:a3:17:6b:22:db:67:25:ea:a6:4a:a3:9b:
         c3:86:56:f7:01:09:33:b1:cb:0f:a0:67:ab:e0:1b:53:0b:73:
         9c:c4:b5:4b:5a:59:ee:fd:b9:31:76:ea:37:c2:4a:57:cf:86:
         18:8f:b7:a0:6a:cd:78:96:e7:a5:92:66:25:ac:25:e7:00:a5:
         6b:13:81:55:1a:b9:71:d4:55:de:9f:ee:8d:ac:f1:36:9b:27:
         1f:8d:95:f3:e1:bf:0b:a2:50:f5:ee:5e:b5:88:77:6a:90:30:
         60:05:4b:fb:22:90:c9:1c:cd:af:39:e0:ff:06:79:50:d3:23:
         a2:77:96:43:55:4b:6f:ac:b6:7e:ef:1d:53:b5:46:3c:61:35:
         b4:45:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:27 2025 by rpki-client