Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File:                     zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier:          F/5+Odw3Ltrd4MWhNHhPirq5HBlWxR/EArYGxTu0OJQ=
Subject key identifier:   91:9B:C2:20:9E:D0:15:34:87:96:40:64:77:EE:5B:9C:6A:02:64:14
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer:       /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial:       01985268B4C16D0BF15133FD47C0EF62B4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number:          08E2
Signing time:             Mon 28 Jul 2025 19:00:50 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:50 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:50 +0000
Files and hashes:         1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: cACmITTYT8ebl58a9L/Z7tCUZZ5hq6qpp7kGTeUVQ7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:b4:c1:6d:0b:f1:51:33:fd:47:c0:ef:62:b4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
        Validity
            Not Before: Jul 28 19:00:50 2025 GMT
            Not After : Jul 29 19:00:50 2025 GMT
        Subject: CN=919bc2209ed015348796406477ee5b9c6a026414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:c5:90:6d:89:56:f7:b7:d6:ba:d0:71:10:
                    a7:eb:43:34:44:b0:ba:43:09:b8:6f:11:c6:58:af:
                    c3:d6:fc:57:ab:b4:61:9e:64:d1:fd:4d:1c:a4:0c:
                    ea:79:dd:f1:79:03:59:e6:05:8a:3b:75:34:5f:29:
                    e3:9c:19:eb:e0:f4:68:14:4b:83:2d:19:37:03:08:
                    ca:8a:3e:76:04:f4:ad:1d:f6:98:bc:ed:5b:87:2b:
                    b8:d4:c3:41:fb:c3:32:1a:9f:a6:20:cc:80:d5:ff:
                    76:01:aa:9a:87:02:a7:bd:ce:79:2f:ce:19:c8:38:
                    47:4e:1a:1d:61:98:39:ee:89:98:6f:10:29:5a:fd:
                    16:7b:d8:e4:f6:f1:47:66:cc:70:cc:1b:2e:70:9a:
                    e7:94:88:45:35:f1:8a:a3:02:6e:e0:e0:6e:ea:c2:
                    28:7d:4a:0e:4f:8e:00:bb:9c:b0:5f:f9:29:29:bc:
                    eb:a6:b9:c6:a4:15:17:da:ae:03:0b:43:ab:11:c7:
                    2c:d7:92:ee:69:22:45:23:c7:e5:92:41:e7:b6:51:
                    9a:47:23:fa:16:e4:87:ad:5a:ce:eb:9a:c6:e8:4f:
                    81:7d:93:9c:f0:57:16:60:08:22:7e:3a:16:13:1a:
                    3a:2a:07:23:5e:7c:fa:64:56:28:20:b9:da:9c:5d:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:C2:20:9E:D0:15:34:87:96:40:64:77:EE:5B:9C:6A:02:64:14
            X509v3 Authority Key Identifier:
                keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:09:19:73:83:bd:34:d3:66:50:b3:a0:ad:91:10:76:39:08:
         8d:de:cf:ff:7f:f3:3e:8f:ec:bf:68:d3:1c:bd:c0:51:b8:7b:
         71:9d:0c:89:68:f6:de:11:d2:b4:75:7d:0d:82:2b:30:5b:02:
         d5:30:d0:a4:50:a1:a1:06:54:d9:a5:d3:2f:30:7c:56:45:e1:
         dc:1e:24:c7:49:6b:12:06:30:8f:42:fd:7a:9d:b0:11:e5:09:
         72:b9:d0:a5:0d:f4:a1:52:a0:9b:7c:e5:7f:35:01:17:c1:4d:
         a5:06:08:9a:b8:a3:5b:31:32:4d:be:c1:78:06:20:20:79:91:
         ce:47:17:50:f1:f1:26:1c:4f:e0:5a:59:68:fc:cb:9f:e1:77:
         a5:de:7f:1a:bc:e7:4c:b0:ad:2c:06:a1:ab:01:97:6a:b3:b4:
         d8:c0:dd:96:a9:d1:30:ea:bd:f6:d9:f1:2b:b7:42:b7:d7:cb:
         0f:54:a6:81:6a:52:8d:4f:57:de:2b:48:46:ae:2b:6c:ce:16:
         0a:24:46:e1:90:e5:7e:fc:6a:14:62:8e:67:93:47:80:bd:12:
         27:29:21:bf:52:d1:71:87:e0:94:04:ef:77:26:7f:e9:ec:1a:
         3f:2f:f9:b6:02:f7:8d:de:67:16:71:82:0d:43:3a:8d:da:f6:
         7c:08:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:40 2025 by rpki-client