Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File:                     24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier:          P75/UripVfCYSgRNAvztM4gus9UPyx/gsUnqradVmXU=
Subject key identifier:   3E:51:A7:6F:BF:4F:8C:C4:5E:A0:36:88:16:02:0F:A1:A0:2C:88:DA
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer:       /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial:       019849D36436FE822EF444A219D569128D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number:          15FD
Signing time:             Sun 27 Jul 2025 03:00:47 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:47 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:47 +0000
Files and hashes:         1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: 28XCegbn1KvAJXsNqLZdOYrqM5TIVsUlM6MKCszr0yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:64:36:fe:82:2e:f4:44:a2:19:d5:69:12:8d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
        Validity
            Not Before: Jul 27 03:00:47 2025 GMT
            Not After : Jul 28 03:00:47 2025 GMT
        Subject: CN=3e51a76fbf4f8cc45ea0368816020fa1a02c88da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:11:5f:c0:e1:15:c1:39:94:12:69:4d:15:
                    6d:fd:c3:9c:3a:59:3a:d2:81:f1:b6:d8:8f:87:17:
                    bc:81:3f:26:43:2a:65:e4:ac:e3:14:55:de:b8:d6:
                    f7:70:2f:33:1e:43:5e:eb:c9:dd:a8:24:dc:28:05:
                    0d:c7:e2:f8:2f:28:50:57:68:17:f5:7e:01:44:4f:
                    b9:81:09:7f:53:b8:be:6a:1c:cd:d9:3f:7a:17:1e:
                    f0:3f:a5:e7:0e:da:8c:0b:95:b5:8e:a2:71:b5:64:
                    8c:de:68:5f:75:c9:fe:62:7b:26:66:55:53:cf:8d:
                    04:fb:73:4c:70:13:9c:12:cb:36:80:d8:35:b6:97:
                    bb:ef:b0:4f:70:7a:68:b1:12:74:a7:a0:c6:ce:00:
                    76:a6:69:7a:e7:7c:68:07:2e:98:24:22:3e:99:1f:
                    a2:26:3a:45:04:c3:93:b2:0c:c4:66:a4:09:3f:8e:
                    20:e1:89:d4:0b:d5:5a:28:5c:35:01:fd:71:d8:56:
                    53:bc:d8:54:76:c0:1b:5e:78:6a:48:c5:e2:2c:33:
                    16:c3:70:19:5d:93:5b:74:68:52:11:03:55:8b:ca:
                    d8:4c:07:ff:13:dc:25:5a:a7:5d:04:d3:e4:72:8d:
                    01:e3:6a:02:16:16:a1:6f:83:53:51:a8:10:a8:49:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:A7:6F:BF:4F:8C:C4:5E:A0:36:88:16:02:0F:A1:A0:2C:88:DA
            X509v3 Authority Key Identifier:
                keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:52:0e:2a:b2:83:9a:03:1c:5b:84:9c:23:cb:25:0e:d9:
         a0:28:33:91:9a:cd:57:d3:bf:8f:2d:43:93:d3:91:b1:b7:32:
         95:e0:1e:d7:6a:4b:59:7c:93:b4:cc:98:c2:a3:ad:3c:af:f6:
         70:5e:0c:ee:6b:db:81:81:ee:7f:6c:4c:79:fd:a5:e8:2b:2d:
         8d:62:ee:17:02:38:bf:cb:7e:67:6e:8c:99:dc:56:d9:19:eb:
         d6:0e:25:cb:7d:70:3a:ed:cb:74:87:81:5d:88:df:be:02:d2:
         9a:3c:74:4e:df:00:0e:94:3e:16:aa:ad:43:03:78:e5:45:d7:
         c0:7b:27:1a:a6:6d:61:e6:8a:21:e7:82:d8:7d:46:ea:af:66:
         a6:54:92:54:3d:72:d4:a1:f0:fb:cb:25:28:8e:a6:2d:cd:a7:
         95:ee:dd:f4:46:89:2e:a2:09:93:6c:fd:e3:f5:8b:52:5b:6d:
         8f:d9:d4:21:ff:ef:04:f3:1d:df:ed:54:27:0a:4f:9a:8f:14:
         77:86:81:6d:3a:3a:45:ae:38:21:35:5a:f5:35:ae:3d:3b:85:
         39:a6:4f:0d:0a:97:30:9f:6b:f8:a7:e3:a0:66:34:0d:44:ac:
         5f:d9:29:b6:48:57:1d:12:63:3d:3c:3a:95:42:e5:4f:b2:7e:
         60:4b:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:03:18 2025 by rpki-client