Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
File:                     6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft (raw, json)
Hash identifier:          yjSWux8KhchzZidwFHMnm5X738TBuvHMTa95KPU4+/w=
Subject key identifier:   59:E1:07:77:B3:EC:7A:21:38:AE:E8:D3:23:66:7F:2A:26:DF:AA:E3
Authority key identifier: E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44
Certificate issuer:       /CN=e9fd01e250b4230276b31e0b8328d87e6974e644
Certificate serial:       019848534494401FBB1FCB84F7429E4E28BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 20:01:13 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:13 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:13 +0000
Files and hashes:         1: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl (hash: 8FIlERc1QHr23oI4vUQsPujctBcQAFs2HaaCl056Ze4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:44:94:40:1f:bb:1f:cb:84:f7:42:9e:4e:28:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fd01e250b4230276b31e0b8328d87e6974e644
        Validity
            Not Before: Jul 26 20:01:13 2025 GMT
            Not After : Jul 27 20:01:13 2025 GMT
        Subject: CN=59e10777b3ec7a2138aee8d323667f2a26dfaae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:16:e5:c3:7a:cb:06:32:3a:2a:4d:69:c1:
                    c5:95:f0:2f:67:d8:12:18:7d:99:27:b9:6f:24:3f:
                    ea:ac:6d:40:92:e1:14:9f:37:97:5b:41:77:88:c4:
                    73:9e:1e:eb:7d:a9:15:49:20:86:4b:1a:02:9e:8f:
                    3a:01:48:8c:2e:56:af:35:fd:9e:a1:e0:68:5b:a0:
                    f5:d5:cf:8a:08:4f:a6:05:2f:15:fa:17:e4:9c:6c:
                    15:2a:c5:f9:2f:f1:cb:b5:89:e6:c7:c4:5c:81:1e:
                    d0:95:bf:81:6c:1f:59:d6:fd:b3:c3:09:1d:d4:e1:
                    fd:54:c4:07:20:c6:3c:6a:9b:1d:1c:76:76:29:4d:
                    a6:f2:8d:d1:48:bd:15:95:31:38:61:62:df:65:ea:
                    7f:69:88:af:e5:cd:7c:1f:73:fd:3d:92:4d:ad:d6:
                    5f:f2:16:b8:18:2a:e8:cd:dc:c9:7c:b2:33:54:26:
                    37:bb:e1:08:a0:9f:ab:d5:98:98:fd:ff:3a:94:dc:
                    b0:7f:dc:5e:ea:81:20:30:60:76:25:10:2f:40:c4:
                    1e:10:d3:59:13:de:51:f9:c3:fc:bc:4a:ed:5d:9e:
                    45:5c:56:7c:da:8a:bb:bb:ce:34:5b:00:60:43:9b:
                    f6:47:b1:91:09:fa:55:96:2c:7d:f7:3c:0d:72:2e:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:07:77:B3:EC:7A:21:38:AE:E8:D3:23:66:7F:2A:26:DF:AA:E3
            X509v3 Authority Key Identifier:
                keyid:E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:60:c1:be:9c:04:2b:40:56:53:6f:9e:44:f2:be:f4:28:b2:
         42:2c:cc:6c:17:0b:43:3a:07:54:b0:43:e8:1d:5d:93:fe:26:
         69:48:b8:3d:31:ca:20:97:5e:45:b4:64:6c:7c:ca:46:82:2a:
         a0:3a:0c:6b:1c:d2:ec:fa:8c:af:63:87:40:08:d4:56:4d:42:
         e8:d9:52:38:69:d3:68:15:a5:62:27:a3:6f:ba:c4:1f:9d:3d:
         de:73:4f:2b:99:c0:88:80:6a:4b:84:ef:b3:68:02:e8:30:c5:
         79:df:3e:07:b2:c8:f2:9d:d7:5c:a4:43:38:fc:da:89:2c:bf:
         98:2f:9a:42:8b:9e:3e:47:a4:0f:c4:1c:d8:87:d8:1e:b2:bd:
         bd:f2:05:e7:7f:9a:0a:89:58:f9:ba:ea:ba:16:e3:21:87:5e:
         cc:3b:48:20:8c:52:20:8e:41:a6:01:87:ca:bc:6a:f0:9a:d6:
         af:c4:af:b0:1f:2c:3b:17:a3:8b:27:8a:d7:d8:4d:f4:db:1a:
         ec:26:70:47:3f:08:9a:44:75:9f:66:71:f3:da:98:88:f6:43:
         4b:cc:b9:97:69:01:88:34:6a:a1:4b:76:44:95:a6:55:c3:9d:
         56:86:43:d8:6a:29:21:bc:8c:df:be:7e:06:97:1e:a1:7e:a4:
         9a:e2:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:20 2025 by rpki-client