Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File:                     a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier:          3PYJJb9Vhmu6QKQziihi4ALYsayTUnulQeMBJCFC9C4=
Subject key identifier:   CC:69:71:3E:DD:7A:DC:9F:38:2A:7C:E2:C5:AC:99:2F:42:0F:78:85
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer:       /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial:       019847AE07C10E83AAB72DE3401F83B63D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number:          0B88
Signing time:             Sat 26 Jul 2025 17:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:44 +0000
Files and hashes:         1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: Ddlx8bJqehI8kctvgnajhIaQkrV323PszSxfuPFA/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ae:07:c1:0e:83:aa:b7:2d:e3:40:1f:83:b6:3d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
        Validity
            Not Before: Jul 26 17:00:44 2025 GMT
            Not After : Jul 27 17:00:44 2025 GMT
        Subject: CN=cc69713edd7adc9f382a7ce2c5ac992f420f7885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:01:d6:ad:41:92:90:e3:07:8d:92:df:91:
                    16:20:d6:a4:6c:18:b9:09:51:23:7b:5a:8f:8d:46:
                    ab:f3:85:3a:4b:fb:7a:61:f5:62:21:ab:a9:bc:25:
                    d4:34:02:8b:db:48:9f:94:a5:67:22:d8:d3:9f:0e:
                    c0:ea:33:fd:fd:b0:be:a0:91:7c:93:17:a4:0a:64:
                    e2:46:b2:73:05:0c:e1:6e:86:1f:af:78:bb:48:b4:
                    9a:54:c8:b7:9a:3d:db:aa:f1:e8:7f:64:7e:d8:d9:
                    44:c6:ba:5d:b3:c2:49:71:f5:94:ae:a2:e1:97:01:
                    ea:2b:18:7a:37:f8:06:0c:bc:8b:f0:cc:c7:12:74:
                    9f:60:4e:ac:0a:0f:7e:09:5a:9c:db:bc:ae:33:c3:
                    83:d6:98:71:f3:c3:57:36:7b:40:ec:b5:aa:bb:e2:
                    53:ed:0b:bb:a2:39:dd:51:b9:ef:7f:b5:24:a6:a3:
                    9a:06:7b:d5:02:92:c9:04:6e:e5:44:ee:bb:a7:71:
                    3f:50:0b:79:1b:86:ef:00:97:19:a2:77:c3:14:8e:
                    39:8c:02:e3:51:d2:65:b2:a7:9e:94:29:1e:8b:20:
                    bd:ae:28:84:1e:39:a7:a0:d8:23:ea:32:04:4c:ff:
                    82:53:56:fa:e7:de:e1:b3:ac:22:4c:a4:40:b9:d2:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:69:71:3E:DD:7A:DC:9F:38:2A:7C:E2:C5:AC:99:2F:42:0F:78:85
            X509v3 Authority Key Identifier:
                keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:3d:3d:ee:30:2b:bf:a7:bf:ab:d2:0d:30:1a:c8:d7:9b:
         70:0c:82:4f:52:39:61:bb:e5:01:ad:12:d8:f7:88:71:75:bf:
         f5:1e:8a:09:0b:0a:74:8a:81:e2:04:6f:ba:76:eb:05:8e:4b:
         be:1b:2c:a8:c2:29:e7:b7:87:3f:71:6a:3d:62:1f:e9:b4:62:
         a5:aa:56:ec:f4:1a:a4:c6:c1:22:e0:8c:fb:33:7b:e0:aa:68:
         b4:b1:3a:96:99:9d:3b:93:14:bf:bc:4e:06:dd:32:b4:62:6b:
         d0:21:f9:5e:92:bd:10:3e:35:55:25:92:6f:5e:cb:7f:64:b6:
         0c:2e:b9:bc:1b:ef:3e:f6:b3:63:e1:10:ba:19:92:d5:b3:c2:
         1a:1f:48:f9:93:f8:d7:ba:50:17:d1:c4:30:86:22:9c:9b:80:
         55:c7:f3:3c:82:18:5f:e2:0e:b3:27:a5:23:02:d3:b2:cd:e6:
         7f:72:55:11:9d:08:b4:0f:5e:39:6f:da:8b:f0:55:5a:3a:30:
         07:14:85:5f:c9:51:af:8b:d9:9f:64:0f:b1:ac:55:a6:90:59:
         bb:c6:fe:58:2b:45:ea:9f:97:a4:ed:44:43:63:99:ef:18:8a:
         76:f9:22:cd:1a:b5:f1:03:d6:c8:00:da:f0:40:df:93:49:8c:
         6b:c8:d9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:21 2025 by rpki-client