Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File:                     dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier:          FOxNrfh72W4AlUvMSfIvbB/Yx41kM5G+W0DD93lfjhU=
Subject key identifier:   BC:DC:45:12:66:05:A1:E6:2A:AF:4D:15:19:11:57:91:4F:E9:7D:65
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer:       /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial:       0198477863708BA230FA59D6E0E55410486D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number:          1154
Signing time:             Sat 26 Jul 2025 16:02:08 +0000
Manifest this update:     Sat 26 Jul 2025 16:02:08 +0000
Manifest next update:     Sun 27 Jul 2025 16:02:08 +0000
Files and hashes:         1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: Jy92oX5rCSUxjgs93kufHGvBzBjSIYM/zkBeNEwN3A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:63:70:8b:a2:30:fa:59:d6:e0:e5:54:10:48:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
        Validity
            Not Before: Jul 26 16:02:08 2025 GMT
            Not After : Jul 27 16:02:08 2025 GMT
        Subject: CN=bcdc45126605a1e62aaf4d15191157914fe97d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:1f:c8:9d:c1:25:e3:e7:b4:ac:d6:33:88:
                    bd:08:f3:14:a3:06:3f:8f:1c:c7:20:59:0d:c9:05:
                    52:a1:07:ad:fc:1a:1b:2e:26:13:fb:6f:bf:6f:3d:
                    3f:b8:25:d0:0c:0e:82:31:b4:70:fb:a8:96:0a:c2:
                    d5:80:cf:09:e7:02:9b:d1:68:53:cd:f6:46:68:d5:
                    95:40:ab:3a:be:db:55:51:96:0e:eb:e0:7f:0a:5b:
                    38:be:6e:1d:51:2d:53:4d:a5:e2:40:f5:37:3d:5b:
                    ad:55:36:84:15:10:37:88:60:f6:49:e5:da:ef:0c:
                    ec:78:f8:4f:da:95:f1:99:75:c5:58:1f:d6:f1:56:
                    49:8e:eb:f1:8a:9b:1e:5f:7b:ea:6f:d3:4c:d7:d6:
                    b3:b6:a8:b7:22:ae:83:0b:5f:9c:e5:45:64:ac:f1:
                    5b:81:84:01:62:e1:20:f9:7c:eb:32:ad:8c:cf:98:
                    2b:fc:e0:33:b2:c6:d3:a0:7c:c7:26:1e:1a:21:e0:
                    82:15:17:62:f6:cd:00:f6:54:32:ef:62:f5:b6:d1:
                    3c:57:a1:a3:86:27:14:26:1a:4b:af:37:85:72:4c:
                    7a:25:31:a2:b3:65:4a:62:6d:71:33:b3:80:3f:6d:
                    0f:50:e1:00:b2:45:da:e8:77:24:bc:78:bf:e3:e6:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DC:45:12:66:05:A1:E6:2A:AF:4D:15:19:11:57:91:4F:E9:7D:65
            X509v3 Authority Key Identifier:
                keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:89:f1:cb:e6:aa:8d:10:dc:39:0c:8a:4d:fe:7d:9a:95:
         44:48:fe:89:37:1e:e8:93:61:35:d1:d3:1f:f1:29:4c:d8:f1:
         8f:3f:75:77:41:bb:f8:e5:0f:a6:3f:32:1b:e1:0a:20:42:04:
         f2:e7:b2:b2:23:4b:71:47:52:db:50:71:a0:f2:d7:ae:97:be:
         d1:63:e4:b8:11:b7:df:cc:91:7b:30:00:fa:14:25:09:1a:14:
         89:52:53:fc:e5:11:5f:fd:c1:9e:69:b8:0a:e4:89:37:bf:31:
         33:e8:a3:86:20:e5:55:a2:e6:7f:6f:20:90:c0:52:05:f7:2a:
         76:07:a2:2a:09:97:d4:ef:cd:5e:37:33:86:f7:a2:68:4a:b9:
         5e:aa:f3:15:20:0b:40:c8:47:af:f6:6d:a8:a2:c0:86:ef:d5:
         95:a8:8a:f1:27:92:53:27:25:23:28:b4:9e:d4:b3:31:71:20:
         6b:f9:b0:d5:9a:e4:67:ef:e5:19:6d:b2:fd:93:2a:1a:52:ec:
         dd:42:c3:3c:09:79:4f:d5:fc:5a:e2:be:f3:04:3e:48:a8:01:
         0a:0f:e2:03:c5:2d:e7:2d:96:89:3c:7d:d8:01:a3:77:56:e7:
         06:ad:81:df:81:cc:84:df:48:22:77:d4:26:1c:83:cb:4f:ce:
         d4:1b:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:42 2025 by rpki-client