Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File:                     mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier:          5sstN68i/LaPnoUYam3x0ZTdl8PNxv/xMb+fwGGWXO0=
Subject key identifier:   9B:49:D2:D0:10:AD:20:7E:F9:28:52:BB:64:09:D4:BC:E9:54:0F:72
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer:       /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial:       0199239F7266F7BA375CC90E21B343F8654A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number:          0C5E
Signing time:             Sun 07 Sep 2025 10:01:16 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:16 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:16 +0000
Files and hashes:         1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: O9qENG1ZeHZstor7UzdhLUUhRPHV1b75QkXoYUXMt4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:72:66:f7:ba:37:5c:c9:0e:21:b3:43:f8:65:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
        Validity
            Not Before: Sep  7 10:01:16 2025 GMT
            Not After : Sep  8 10:01:16 2025 GMT
        Subject: CN=9b49d2d010ad207ef92852bb6409d4bce9540f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:df:4e:de:c8:50:e9:2d:b0:7e:3e:d7:cb:
                    fc:d9:53:f2:df:f7:d9:28:6a:f7:c0:67:1d:cf:d4:
                    4b:ab:b3:01:e1:6d:b1:b4:42:6d:f7:04:9a:a2:10:
                    4f:bc:d7:e4:d0:5c:e5:51:a7:5f:1e:6a:6f:bd:a0:
                    7e:cd:ca:8e:ef:20:ec:76:5c:e8:f0:00:30:1b:a0:
                    95:69:3b:23:12:e1:07:92:d1:c9:01:cb:ea:dc:ae:
                    ae:7b:45:59:d3:d2:31:61:4a:53:e7:84:9f:ad:46:
                    da:a5:dd:20:07:18:ef:9c:4e:f1:13:79:a2:c6:28:
                    64:c1:ef:d1:ca:ea:82:40:c8:4c:9f:e2:30:a5:61:
                    88:1e:67:74:48:a8:95:dc:92:3a:ec:4d:f7:04:42:
                    3f:da:ec:8b:0f:2a:f6:21:56:1e:31:33:20:b1:28:
                    1a:46:ec:2b:e8:e5:1e:69:bc:f0:ae:8c:20:15:fd:
                    fb:fa:39:ca:fb:1c:a7:c5:86:39:9a:32:30:78:99:
                    7c:aa:c5:4c:ec:e1:d0:2b:78:e4:83:fc:54:a1:95:
                    58:df:65:60:07:fd:10:6b:99:8b:4c:ad:43:33:5e:
                    38:34:7d:d8:af:70:77:f4:c5:0b:8f:02:00:25:37:
                    73:86:8d:e9:97:34:15:b1:6c:ef:8e:3e:4f:f1:80:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:D2:D0:10:AD:20:7E:F9:28:52:BB:64:09:D4:BC:E9:54:0F:72
            X509v3 Authority Key Identifier:
                keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:af:6b:ed:c4:23:39:e1:51:dc:21:8f:6e:b9:f9:ce:93:
         70:8d:64:20:e1:57:85:ae:9c:46:ca:6b:1d:06:41:ec:50:56:
         30:e5:ae:e1:0a:36:4e:24:d1:0e:af:8d:0f:a0:a6:4c:d8:07:
         f2:2b:3e:5b:bd:1c:11:8d:2e:2c:60:22:14:6a:bc:3d:57:03:
         9f:6d:4e:de:4f:0a:87:66:7c:a9:03:00:15:5c:b0:71:28:25:
         92:42:0d:49:18:97:ca:31:df:3e:1d:72:eb:d8:2c:c9:31:71:
         f7:b5:d0:cc:f8:50:ed:a9:14:a8:4c:bd:28:e9:4c:c6:ce:b8:
         63:f1:53:5c:2b:63:25:64:17:24:4a:dd:f4:10:8f:9f:49:34:
         5d:b3:97:22:b5:fa:95:92:d5:94:97:60:da:fe:0e:d6:cd:79:
         26:b6:b6:d8:14:9d:e8:fa:56:3d:ee:52:f4:56:99:5b:24:ee:
         8e:79:06:e7:af:0c:b0:9f:aa:fe:01:77:17:1e:0f:35:db:59:
         e5:5a:ea:b2:41:6f:54:4c:e7:98:cc:d6:98:ef:3f:c9:e1:f6:
         d4:8c:60:03:50:48:a7:93:af:25:99:4c:be:c4:93:15:dd:6d:
         70:04:c5:d2:f7:ef:a0:e5:9c:bf:1d:76:c4:89:09:82:39:b5:
         6e:b6:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:15 2025 by rpki-client