Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File:                     AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier:          fqPiyChOgxYAfgfno5Z3jCRn9bHMi/CXTqmYcfYJkgw=
Subject key identifier:   07:5B:19:B8:51:06:B1:65:D5:48:45:73:D6:65:1D:37:D0:DA:92:CD
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer:       /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial:       019922FA8483A65AFDB84A250B6069EF6BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number:          1553
Signing time:             Sun 07 Sep 2025 07:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:07 +0000
Files and hashes:         1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: FHN/DkUhKipCPp1xWNbptuZ3WWcbYtPSEjGCqSENiVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:84:83:a6:5a:fd:b8:4a:25:0b:60:69:ef:6b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
        Validity
            Not Before: Sep  7 07:01:07 2025 GMT
            Not After : Sep  8 07:01:07 2025 GMT
        Subject: CN=075b19b85106b165d5484573d6651d37d0da92cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:27:51:2d:f3:b1:bf:d1:a7:56:17:ed:80:
                    81:7b:d4:3a:5c:48:68:1b:06:4a:db:21:6a:f0:88:
                    3c:6e:27:9c:6d:7a:34:83:35:84:1f:2a:aa:15:c2:
                    d1:9f:9f:5c:a0:8a:80:4a:3c:49:b5:19:4c:74:34:
                    44:4b:1b:e9:89:08:45:4c:98:42:d0:e2:cb:7e:b2:
                    bd:ce:c2:be:0e:b4:21:28:19:bc:d7:b3:58:f9:a8:
                    60:9b:93:43:6f:f8:c3:f2:1b:4b:7d:10:47:d3:99:
                    03:05:cd:9b:ba:14:15:a1:d9:4b:f7:94:67:83:3b:
                    df:b4:24:ae:bb:fa:63:a0:7e:9f:ce:40:b3:2d:9d:
                    39:04:43:cd:79:ff:ee:bc:a3:f4:ac:4b:8d:bb:6f:
                    5e:d4:66:5b:d8:95:ee:e0:d8:ec:d0:b7:6f:0c:81:
                    5e:fd:0d:36:06:c2:ba:ab:5d:30:02:a3:12:de:a8:
                    6c:c2:d9:fe:e3:16:a9:3c:70:9f:b9:b3:15:18:b4:
                    e0:52:82:83:e9:34:fb:95:d6:f3:57:3f:6e:a9:b9:
                    2f:d1:05:4a:25:1a:d1:fd:99:50:bb:6a:05:7a:00:
                    8a:ae:1e:f6:05:21:75:fe:46:fe:4e:47:6e:2f:83:
                    28:d4:3b:e9:02:bc:ee:ec:7f:4f:8d:c6:af:81:44:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5B:19:B8:51:06:B1:65:D5:48:45:73:D6:65:1D:37:D0:DA:92:CD
            X509v3 Authority Key Identifier:
                keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:be:88:c7:61:f6:92:be:cf:5f:1c:aa:ca:9a:db:79:b5:37:
         43:09:88:d8:c8:b3:d9:f1:61:8f:15:f2:f7:0e:bc:a6:47:39:
         0a:8a:ba:35:19:19:e6:b6:75:7e:06:bb:b6:64:8b:ac:cb:d2:
         c2:44:88:4c:99:ab:2c:36:a7:49:06:0d:d9:b9:09:02:02:cf:
         ae:4c:80:e5:0b:30:53:be:0f:d0:85:5b:a3:54:88:67:49:68:
         94:22:d0:3e:b1:6d:fa:f8:51:f5:e9:ae:8f:3e:b0:ca:14:25:
         3f:35:6c:c4:a5:99:9a:8e:38:ae:59:f7:26:84:d3:7a:4d:b6:
         cc:e3:aa:e7:fc:27:e0:18:77:76:ef:7c:89:13:1b:b2:82:05:
         32:57:6d:28:5d:6d:eb:50:34:e2:84:58:7a:7f:fd:18:17:d1:
         79:cf:47:19:ff:78:00:a4:43:d6:41:10:5e:36:8b:4d:1e:62:
         08:cb:bf:94:75:e9:91:77:00:0d:bc:18:ac:40:aa:4d:b5:e7:
         c9:ea:64:09:d8:45:31:6d:a1:6e:12:f8:66:e7:b3:d5:77:67:
         9c:f2:33:32:b9:f9:b4:82:f3:48:ed:36:e6:d2:2b:81:7b:5d:
         cf:65:0e:cc:2e:4b:0c:87:89:d8:f1:65:10:a7:87:69:b7:1f:
         2f:2d:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:52 2025 by rpki-client