Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File:                     d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier:          MmDICR4E6RurYtdZep4gQ/Qtga+pCo/usIyOf+igFRo=
Subject key identifier:   CC:11:D8:0D:FB:5B:08:86:79:1D:C8:6A:B9:8A:1E:78:4F:C9:C1:6B
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer:       /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial:       0199228D223A26E8B4B194328C27A420B4FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number:          1316
Signing time:             Sun 07 Sep 2025 05:01:38 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:38 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:38 +0000
Files and hashes:         1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: StPeLaSt+T4gM/G0REK+J1K6syrQBPDUm95MBrEaeoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:22:3a:26:e8:b4:b1:94:32:8c:27:a4:20:b4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
        Validity
            Not Before: Sep  7 05:01:38 2025 GMT
            Not After : Sep  8 05:01:38 2025 GMT
        Subject: CN=cc11d80dfb5b0886791dc86ab98a1e784fc9c16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:4b:15:51:72:db:a8:97:29:93:73:32:9c:
                    fd:f4:a5:e4:9d:36:1b:a5:fa:a5:81:5f:d7:07:34:
                    51:3c:68:79:ed:76:c8:f5:ab:af:a7:da:b5:6d:0c:
                    e7:87:00:7f:62:4f:fe:a0:57:2a:0b:37:39:e0:6d:
                    85:d5:50:fd:5b:5d:e0:db:6c:e7:a9:74:f8:40:6f:
                    fb:2c:cf:ba:4d:a9:59:f1:6d:83:70:5b:8d:5f:cd:
                    4d:c4:62:2d:ac:1a:53:a4:cb:ca:18:38:fd:b7:56:
                    8e:e7:30:a8:7d:e4:6a:fe:93:e9:8a:86:b4:53:e8:
                    31:88:2c:58:fe:3c:47:d4:2c:49:2c:23:e8:58:cc:
                    ff:91:bb:da:00:40:9f:b7:22:21:31:89:6a:39:02:
                    f8:1d:84:38:f3:33:27:c4:59:bf:24:01:69:0c:2e:
                    ef:31:9a:b1:8e:22:78:6d:be:6e:79:6e:18:0d:e6:
                    72:83:e2:37:d1:bf:73:c4:5b:29:f0:7a:af:88:a4:
                    63:97:ae:c0:ba:b0:a7:b6:cf:08:8b:36:ec:ca:d3:
                    29:7f:47:0f:58:b4:d7:ca:97:1e:37:83:c4:6d:3c:
                    fb:33:1e:d2:e2:c5:d0:16:96:b7:99:b7:76:0d:3b:
                    c2:87:06:c1:96:24:58:12:5a:9e:c5:22:3b:5c:a6:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:11:D8:0D:FB:5B:08:86:79:1D:C8:6A:B9:8A:1E:78:4F:C9:C1:6B
            X509v3 Authority Key Identifier:
                keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:4d:48:ba:d0:2d:fc:a9:ce:35:55:14:74:39:df:f5:d7:
         79:0a:e9:89:ed:46:32:38:1d:b3:85:b0:0f:45:ba:90:23:26:
         a3:de:09:1a:9c:eb:29:44:48:a0:d2:4c:6e:57:a4:79:59:ce:
         34:c8:16:4b:d5:66:b8:44:22:e4:c6:27:f2:0f:b4:7c:66:98:
         ea:e9:2f:47:76:c1:45:8d:84:99:ec:05:45:d1:72:86:f0:b4:
         f6:ca:45:5a:4c:50:17:83:6a:88:29:a2:dc:94:b3:ab:e4:42:
         02:13:e2:fe:0f:93:15:b6:b0:08:a1:5f:0f:7d:fe:bb:2d:51:
         ec:bc:f7:c0:c2:66:a9:69:4c:09:24:df:51:b8:cc:8d:f2:1b:
         b6:9c:bf:4c:9e:a3:2b:23:7c:79:86:1b:90:0b:02:19:10:27:
         f0:9b:bd:40:ea:dd:59:ac:0f:84:ef:04:8f:a8:fc:c9:10:3f:
         74:50:dd:fd:c6:0d:e7:57:ee:7c:27:f4:cd:f2:6a:00:96:2b:
         69:4d:96:e4:19:93:20:50:a4:58:4d:35:00:7e:9b:75:2e:d4:
         c6:dd:70:22:91:04:d7:10:df:db:86:9d:49:69:46:06:3b:6e:
         d3:88:4f:d5:2c:7e:a0:d3:6f:e1:8a:46:2e:b7:99:13:6e:b2:
         3e:6e:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:27 2025 by rpki-client