Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          SFSC+mkOt/B7f0fedpo6a1OpKkwRLo3Y6jKpQGMwVeU=
Subject key identifier:   16:57:5D:C2:9E:8C:32:24:EB:C1:57:F8:EA:CF:E5:41:63:AE:A1:C8
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       019848C03F165D21205B74C6B67999A19519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 22:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:15 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: WwOo2nENrDLQot4cqiDBUxLG8+JNZBUynn0AslkyJgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:3f:16:5d:21:20:5b:74:c6:b6:79:99:a1:95:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: Jul 26 22:00:15 2025 GMT
            Not After : Jul 27 22:00:15 2025 GMT
        Subject: CN=16575dc29e8c3224ebc157f8eacfe54163aea1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:8e:e2:84:f8:9b:85:85:b8:df:c5:5c:8a:
                    e0:08:98:88:92:57:1d:13:ff:8e:0a:05:7f:90:e4:
                    f4:af:ca:1e:94:e2:68:41:e9:4d:c4:05:23:36:35:
                    9d:17:8c:80:d1:db:b7:2c:e7:10:4f:c7:d0:84:a6:
                    e3:47:fa:a1:8b:61:34:3f:98:92:86:b4:b6:ad:7f:
                    6e:b3:11:02:5d:2b:4f:74:07:32:b1:71:62:55:51:
                    14:f9:f0:d8:ca:b0:dd:aa:0a:24:0a:00:f7:9b:24:
                    6f:84:51:e4:7b:28:7f:5a:a4:37:9c:0b:31:e5:2f:
                    df:8a:5c:23:06:e1:82:4f:05:67:28:6d:19:be:6b:
                    17:50:a9:d0:14:fa:83:3f:b4:fb:7a:21:06:40:cc:
                    98:65:e7:1c:e1:ed:cf:54:ab:65:58:21:a6:c2:80:
                    47:98:89:10:f9:3b:d2:ce:c8:ff:0c:5e:12:74:72:
                    33:c1:2e:07:27:8c:ca:68:27:0c:10:6f:d0:c0:d2:
                    88:fc:21:fb:1b:32:c7:68:f6:41:b3:29:31:f5:7d:
                    18:43:6e:dc:9f:42:7f:ec:b9:71:4c:13:71:da:c1:
                    f0:1f:0b:15:02:8d:c1:6b:8d:19:9e:a3:d4:05:be:
                    16:9e:30:ca:12:04:24:d0:96:03:76:60:4c:ef:ab:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:57:5D:C2:9E:8C:32:24:EB:C1:57:F8:EA:CF:E5:41:63:AE:A1:C8
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9d:e7:59:ca:41:cd:53:69:0a:ce:95:07:0f:14:2a:7a:2e:
         98:95:88:05:e7:09:78:25:a5:83:25:a2:cb:46:31:3f:00:b5:
         3f:f0:ec:b0:94:d3:b5:ba:21:e2:40:21:a8:f8:1e:2a:6d:ed:
         64:fa:76:6e:19:19:82:f2:ba:e4:1c:84:5b:eb:15:6a:ec:94:
         ba:6e:01:ff:98:4a:1f:8d:df:0f:97:06:7a:24:af:38:ca:07:
         9c:d7:4e:2f:f1:0a:98:b5:fd:4f:6a:ee:6f:02:8e:de:15:12:
         23:03:b7:0e:36:8a:a3:0b:fe:78:8d:d5:db:21:7f:01:c0:0d:
         a9:bd:6a:55:a1:b8:52:bf:ff:2e:ab:22:e6:56:fa:76:7a:f4:
         cc:41:b6:32:2b:12:81:57:be:e1:25:c1:c2:17:2f:d3:51:33:
         55:f6:88:c3:49:e6:90:27:af:2b:5e:00:64:15:fd:61:75:6c:
         c9:6c:cd:4f:58:2d:60:a3:19:0c:e4:2e:b5:d4:98:2c:9d:d8:
         b5:ba:2e:42:20:54:7e:af:0f:85:73:24:f3:83:2d:0f:21:3e:
         34:68:57:62:43:ab:09:22:a3:d3:e1:f8:aa:c3:3c:2b:24:65:
         90:27:f0:0d:9b:27:c0:06:39:63:2f:6c:d3:62:40:45:4f:3b:
         1a:82:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:08 2025 by rpki-client