Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File:                     p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier:          oNp2qRSAfUby53VqfRfjvXB66iVwpID3jldcOTb+p80=
Subject key identifier:   03:7E:F3:CC:CB:15:9B:36:86:07:BC:8E:C8:42:78:11:66:C8:D3:1B
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer:       /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial:       0198530E624D7A3DC05447845A24F36AC7C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number:          0748
Signing time:             Mon 28 Jul 2025 22:01:48 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:48 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:48 +0000
Files and hashes:         1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: /jWmyo92KA9q2wxoPajqYW/vnerJfUx8Fe+EcWVWZIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:62:4d:7a:3d:c0:54:47:84:5a:24:f3:6a:c7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
        Validity
            Not Before: Jul 28 22:01:48 2025 GMT
            Not After : Jul 29 22:01:48 2025 GMT
        Subject: CN=037ef3cccb159b368607bc8ec842781166c8d31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:3a:81:4c:b6:a4:82:7d:c8:33:5d:f1:26:
                    c6:0c:b9:38:82:a3:7b:5c:b2:0d:6b:46:68:7c:34:
                    de:28:2d:69:c9:37:9b:0f:48:c1:39:c7:75:e6:f1:
                    1b:0a:86:91:fe:77:d5:5f:ab:21:f8:b4:1c:04:8f:
                    a6:f2:cc:48:0f:10:4f:3c:48:60:75:43:7d:f3:8c:
                    a1:71:32:72:0f:17:3c:c3:00:2b:cb:ad:6a:6d:a2:
                    c4:f0:a8:65:96:24:d2:1d:d3:92:0f:c7:ae:03:f6:
                    3e:4b:fd:c2:90:6e:b5:02:46:2a:41:e3:d2:39:2c:
                    ef:d7:75:f1:c5:b2:a2:70:91:76:09:91:15:1a:2c:
                    f6:3c:0c:66:39:8c:d9:d4:9c:40:e0:3d:8c:50:26:
                    89:76:03:2a:d0:7d:86:50:0e:8b:0e:01:87:2f:3d:
                    d8:51:3e:3d:64:90:35:a8:c2:65:62:68:b3:25:4a:
                    b8:12:0f:bd:35:3d:b3:54:e8:0f:35:5d:0d:a6:14:
                    3c:f7:cb:f3:5c:ec:49:15:0a:34:1c:57:eb:fe:aa:
                    c3:00:36:a8:d7:48:3e:b6:09:27:04:a2:12:04:3b:
                    80:1f:28:d5:af:03:c3:72:7a:71:b9:b7:b2:f9:02:
                    30:68:a3:94:fb:9d:1e:28:b1:0d:27:90:94:23:04:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:F3:CC:CB:15:9B:36:86:07:BC:8E:C8:42:78:11:66:C8:D3:1B
            X509v3 Authority Key Identifier:
                keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3f:e4:29:f5:4c:e2:e7:33:6f:59:75:eb:1f:0f:8e:88:b2:
         e5:ac:50:23:5e:be:0e:61:11:9e:62:00:48:27:e4:2e:54:19:
         81:3a:d0:cd:42:49:17:74:92:6d:15:52:f4:52:7d:ec:97:6c:
         da:71:a7:88:a1:d1:5b:4f:13:a7:d4:9e:22:d1:05:6a:51:d7:
         ac:b8:ad:67:eb:57:47:63:68:1a:5c:57:00:16:30:6c:4b:c0:
         d6:d6:58:0f:a9:c7:fe:cd:d1:3b:10:64:11:f1:f7:89:ad:86:
         78:2f:3c:86:f8:08:1c:1d:7d:1b:5c:b3:62:3b:07:86:3b:c2:
         91:13:4d:60:88:22:5c:b8:2a:af:b2:0b:95:75:5d:a6:e7:41:
         81:1b:10:11:83:62:c4:94:81:69:e1:03:2a:22:78:30:88:3b:
         f3:4a:e2:80:7b:79:97:26:0b:12:6b:2d:d2:63:60:42:63:6f:
         7d:d6:06:33:b0:40:16:ca:ef:e0:b4:03:bf:47:76:21:79:90:
         39:46:a9:94:3e:de:f4:4b:31:a1:a5:a8:4f:9c:be:2c:69:83:
         95:1c:49:a9:48:b0:c4:12:a7:28:6b:83:06:ab:a9:1e:a9:1d:
         38:d8:8f:59:7c:54:a4:6a:45:53:49:69:34:9a:69:6f:44:e3:
         0e:0a:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:52 2025 by rpki-client