Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
File:                     _gG0rfO5SE6VdhmUdLIbtCXgWvI.mft (raw, json)
Hash identifier:          sMoeZA48wGEA6sEtIBwsNYrLF8l9Qo2x4CvbSkpKiOo=
Subject key identifier:   2D:B9:29:42:EA:1E:0B:B0:B6:99:BC:12:9B:C7:55:2A:FC:DC:C3:6C
Authority key identifier: FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
Certificate issuer:       /CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Certificate serial:       01984777CE5A95110C2248DED9CAEB002981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
Manifest number:          15FC
Signing time:             Sat 26 Jul 2025 16:01:30 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:30 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:30 +0000
Files and hashes:         1: _gG0rfO5SE6VdhmUdLIbtCXgWvI.crl (hash: nMdAyruMWI9MVnVzx+vqQ97KI+BbE+4swjyTbt3MXZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:ce:5a:95:11:0c:22:48:de:d9:ca:eb:00:29:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe01b4adf3b9484e9576199474b21bb425e05af2
        Validity
            Not Before: Jul 26 16:01:30 2025 GMT
            Not After : Jul 27 16:01:30 2025 GMT
        Subject: CN=2db92942ea1e0bb0b699bc129bc7552afcdcc36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:f5:08:b3:7d:e4:ce:ae:38:17:c2:4f:70:
                    e1:a3:7b:73:b3:fd:90:6c:73:30:59:24:f4:82:95:
                    c1:04:06:4b:82:93:cc:df:ab:c0:9f:dc:95:b7:4f:
                    ae:ae:aa:f1:e0:48:f7:20:e8:28:04:19:94:41:9c:
                    b6:b3:81:90:17:80:62:1b:d3:bc:d2:36:18:78:6b:
                    30:ee:96:b5:eb:23:2b:ab:0e:5c:47:56:bc:90:ae:
                    89:96:a2:24:2a:e7:13:ab:29:c3:66:1a:0e:00:83:
                    8b:95:92:5d:6f:9e:5a:81:0d:8e:72:9e:63:d7:7b:
                    50:1d:21:32:e8:85:94:e4:3f:e0:d9:26:cc:e5:49:
                    4f:5a:af:c7:1e:80:8f:a5:b7:8d:4d:6e:c0:83:00:
                    b9:67:a9:ca:26:69:b7:48:89:b2:21:19:29:6a:90:
                    9f:73:cb:c7:fc:0e:c7:88:40:3f:d0:32:1f:d9:46:
                    44:64:da:c5:4b:d7:e7:6e:0d:f5:f7:ab:1b:9d:8d:
                    78:d1:b9:15:7c:ec:03:a2:7f:36:fe:e3:14:2e:76:
                    00:17:83:d0:36:c5:32:81:e7:d1:02:f3:b6:38:12:
                    d7:ed:c6:f9:b7:54:32:92:7e:29:90:dc:0b:e9:80:
                    e2:44:e8:67:2f:f3:0b:68:e5:2c:a9:5d:21:51:8c:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:29:42:EA:1E:0B:B0:B6:99:BC:12:9B:C7:55:2A:FC:DC:C3:6C
            X509v3 Authority Key Identifier:
                keyid:FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:db:56:8f:2a:99:50:77:23:e7:63:78:cc:66:20:f8:19:48:
         04:8e:47:10:16:a1:0c:3a:8c:8b:69:a4:f7:3d:f7:40:fd:ef:
         7a:56:14:51:7f:21:32:1c:94:e6:37:8f:76:67:a3:7d:36:ef:
         93:5e:c2:ee:03:8b:2d:85:b6:fe:67:99:d1:b8:84:3f:77:4c:
         10:ae:a9:60:ea:4c:6c:7d:4b:8c:a9:2f:03:4d:41:6d:e2:1b:
         18:68:f3:8a:ea:17:0f:8d:b1:55:5c:0a:17:93:36:04:d9:79:
         e8:46:bf:5c:42:65:61:6b:ad:1c:f6:b6:bb:39:60:0f:55:f2:
         66:33:f8:a8:c2:db:b1:a4:a9:91:dc:2f:bd:c6:3e:12:27:1a:
         6c:e4:ec:cf:24:1a:2e:a0:01:c9:b7:1c:9e:7d:2a:9c:47:78:
         02:96:e7:54:37:5a:b8:43:85:a2:52:4b:f8:0b:02:70:c7:10:
         42:22:61:3d:47:d1:9c:16:02:bd:70:98:20:69:46:f8:30:a2:
         df:1c:bf:b0:18:2d:e2:7c:9c:1a:0a:dd:cb:8a:8b:7d:03:40:
         54:e6:3f:dd:22:45:68:d2:be:f7:5d:d3:87:d0:25:85:7d:cd:
         04:51:b1:ce:6c:26:15:b3:60:4e:ad:92:2e:2d:a9:23:0b:db:
         77:17:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:53:16 2025 by rpki-client