Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
File:                     Mnib05LhxcabdCDMA2gDrxJYzvk.mft (raw, json)
Hash identifier:          +bib9HwvV96yr7WpyVgeHqr3Mo7GEgs6GgiwOn9YQro=
Subject key identifier:   98:AB:58:5B:BA:ED:EA:C0:F8:4F:22:76:98:9C:C1:8A:08:AC:B9:B8
Authority key identifier: 32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9
Certificate issuer:       /CN=32789bd392e1c5c69b7420cc036803af1258cef9
Certificate serial:       019849D3A3629DA43BC566AFCEA5395678DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
Manifest number:          0753
Signing time:             Sun 27 Jul 2025 03:01:03 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:03 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:03 +0000
Files and hashes:         1: Mnib05LhxcabdCDMA2gDrxJYzvk.crl (hash: DHKon2LF4+hnaLvlHDrmW+KwSiPN2B78LgHjO+8Dyjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:a3:62:9d:a4:3b:c5:66:af:ce:a5:39:56:78:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32789bd392e1c5c69b7420cc036803af1258cef9
        Validity
            Not Before: Jul 27 03:01:03 2025 GMT
            Not After : Jul 28 03:01:03 2025 GMT
        Subject: CN=98ab585bbaedeac0f84f2276989cc18a08acb9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:a9:53:dd:1b:99:60:77:9a:68:13:cf:12:
                    37:83:3c:78:2b:9f:42:d0:2f:75:58:3e:fb:e9:c2:
                    25:93:b5:c0:ec:12:60:6e:c7:ff:5b:49:bc:83:f0:
                    83:27:89:92:50:a1:e2:48:8b:92:03:f1:08:8f:13:
                    b3:b7:2d:d6:88:58:ad:7b:35:20:91:40:15:13:13:
                    4a:a8:2f:81:dd:f6:c9:7a:ee:2b:20:93:0b:f6:3a:
                    1c:58:90:0e:69:01:d2:42:8a:1a:91:91:78:47:11:
                    ca:59:ee:e9:c2:62:45:5d:1a:b9:34:8a:9e:b1:9c:
                    6d:9d:44:4d:4f:09:ef:e0:f7:5b:6d:8b:07:21:15:
                    c4:5e:b5:fc:54:64:00:09:c1:76:3b:05:09:52:f8:
                    01:51:82:74:6e:11:2c:d4:d6:86:a9:b2:08:fb:b1:
                    26:ca:39:3a:10:0f:d6:3d:7b:21:ea:f6:66:24:b4:
                    77:49:78:77:c2:03:7f:0e:40:3b:8a:a8:2f:10:c9:
                    56:ea:28:61:1b:82:6f:51:71:74:40:ea:1b:61:4b:
                    76:7d:69:bf:3f:2a:94:26:cb:84:2f:c8:1d:e8:f9:
                    71:1f:8f:44:b8:ac:bd:22:d2:b1:be:29:e5:25:d1:
                    45:b7:df:23:b9:58:8b:d7:53:83:46:8f:21:d7:bb:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AB:58:5B:BA:ED:EA:C0:F8:4F:22:76:98:9C:C1:8A:08:AC:B9:B8
            X509v3 Authority Key Identifier:
                keyid:32:78:9B:D3:92:E1:C5:C6:9B:74:20:CC:03:68:03:AF:12:58:CE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mnib05LhxcabdCDMA2gDrxJYzvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1c17d6-3fd4-4ba1-be4c-3866d4412893/1/Mnib05LhxcabdCDMA2gDrxJYzvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:f7:52:71:ab:77:a8:fb:25:09:e5:13:19:45:3c:4c:1e:
         c2:50:2e:15:44:c3:eb:8f:71:12:01:8b:ab:1d:fc:b0:13:2c:
         ad:1b:b6:3c:cb:01:5e:e4:e0:3b:0a:8f:34:1d:dd:e2:b6:fb:
         78:ce:c2:b5:38:d0:e3:e7:c1:de:c2:a4:c7:79:8d:fa:56:ea:
         2b:a4:6f:ad:5b:a4:1a:a5:67:e6:f6:46:78:e0:1b:88:b7:99:
         fe:b5:93:76:46:66:d4:9a:a1:f6:fe:e6:d1:d2:1d:91:2f:81:
         46:eb:f8:d1:14:af:74:a3:76:5b:e8:ec:0d:ea:66:a4:cb:f2:
         91:18:4a:43:64:f0:ed:50:55:ef:24:6d:13:77:18:f5:37:77:
         97:c4:54:40:ab:0b:32:99:06:5e:30:fb:df:1e:00:d9:3f:34:
         30:61:3a:3b:f6:b6:61:38:85:b9:32:9f:f2:55:0b:36:33:82:
         ee:35:c8:3e:7d:bf:14:ba:fc:db:1b:f1:bf:8b:6e:14:18:89:
         ea:7a:a5:de:7b:29:92:25:c4:1b:b2:66:f1:30:c0:87:db:0b:
         b0:5e:9a:d2:32:a8:14:4a:fc:4b:a3:36:52:2a:de:c1:71:83:
         8d:4d:9c:13:3c:bb:1e:eb:5d:d8:71:2c:9d:e9:58:93:f0:e3:
         d1:d5:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:01:16 2025 by rpki-client