Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File:                     ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier:          QQfhBIoNvq+/9Xxi5NlKrRVyUdCRMqVLsxkm4KeN5bQ=
Subject key identifier:   0D:74:6E:27:E2:7D:2A:36:BC:CF:BE:C0:B5:77:9F:BE:08:34:C4:0E
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer:       /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial:       019923A03799B3A8D9FB02237354CB7DFF01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number:          0DFF
Signing time:             Sun 07 Sep 2025 10:02:06 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:06 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:06 +0000
Files and hashes:         1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: 2K57OwZW0aP95oy++Ah5R+EWZRu4zDP+2uU05qG4h1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:37:99:b3:a8:d9:fb:02:23:73:54:cb:7d:ff:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
        Validity
            Not Before: Sep  7 10:02:06 2025 GMT
            Not After : Sep  8 10:02:06 2025 GMT
        Subject: CN=0d746e27e27d2a36bccfbec0b5779fbe0834c40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:d0:1a:f2:5c:f0:4e:84:d6:4b:e2:b6:51:
                    0e:25:c2:9b:4e:67:da:15:44:36:de:38:37:d4:9b:
                    95:c7:f6:3c:e3:4e:26:b8:f9:3b:9b:70:94:74:3e:
                    1b:81:60:61:cc:6b:94:bb:f9:9c:2e:f7:47:d6:ac:
                    3f:be:a7:44:7d:25:9d:5f:e8:c5:83:c8:59:10:0f:
                    e1:e7:be:27:9f:4a:91:27:ad:bf:24:11:f8:2d:da:
                    b9:a0:94:f3:c2:a0:4a:62:f6:9a:94:56:84:c6:45:
                    2a:db:8b:81:62:2f:31:a1:99:ae:05:fb:3a:4d:a0:
                    17:ee:22:67:b5:4e:f6:b2:30:91:f7:27:b7:80:f7:
                    b9:a0:93:e0:bd:52:4d:26:b0:50:56:61:e4:af:cb:
                    b6:cf:7a:18:c4:b8:ec:c8:e7:a9:4e:4b:75:04:47:
                    28:bf:33:85:72:f1:fe:41:ab:f6:d4:4b:6a:0e:2e:
                    dc:ae:8b:8d:21:8e:0a:b9:19:7f:5a:b3:86:5b:91:
                    63:2c:33:54:44:34:d6:a5:a9:7d:f1:68:e3:75:ee:
                    01:eb:48:a6:84:9c:c6:2e:3c:57:eb:c6:f1:4a:39:
                    a9:1a:e4:a9:d8:00:1d:ec:50:03:a9:51:3a:1c:f8:
                    6c:2e:65:4f:69:f2:8f:7a:3b:21:c4:6f:06:08:ac:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:74:6E:27:E2:7D:2A:36:BC:CF:BE:C0:B5:77:9F:BE:08:34:C4:0E
            X509v3 Authority Key Identifier:
                keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:05:8a:d6:19:dc:fc:ec:94:4b:c3:a8:8a:44:19:c0:b7:
         a0:c5:9b:74:c8:67:67:9f:d7:e9:dc:a6:3a:94:ee:b0:c8:36:
         bc:ac:9c:b2:f9:08:af:73:44:d1:3f:f6:c6:e1:85:3c:2f:b3:
         be:3a:4f:e0:1f:2d:05:ce:af:94:7a:78:a2:e2:79:c7:95:3d:
         02:1c:38:c0:63:0d:39:69:4d:99:9f:3e:fc:3b:26:24:c2:da:
         f0:15:17:16:58:23:00:fc:05:38:10:e0:1d:73:6f:0d:37:2e:
         fd:da:bb:74:ed:d7:bd:71:71:22:c2:6e:a9:7b:6f:4f:68:6a:
         34:49:8f:90:69:f9:6e:fc:d4:c1:df:89:21:ff:6a:ae:01:65:
         24:37:f9:2f:21:91:93:39:49:db:53:69:3b:51:99:13:55:f6:
         98:89:69:0f:5e:06:ab:5d:88:39:ab:c2:f3:ce:f5:6f:1a:a2:
         96:d4:2b:79:1b:bb:98:16:e9:68:41:b8:74:f3:ab:9d:c8:63:
         50:39:8c:77:83:a0:f0:3c:dd:31:e5:85:7e:ed:36:d5:47:c8:
         e5:0c:3d:d9:76:e9:3a:46:18:48:85:04:5d:c5:e8:14:6e:d8:
         c5:05:ee:09:2a:66:29:88:5f:bb:7f:91:f0:ed:de:92:9c:05:
         ee:bc:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:49 2025 by rpki-client