Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
File:                     T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json)
Hash identifier:          n66maEBpzDufdDul7AU5cwumViB6rrjESMgtu9aTHGQ=
Subject key identifier:   C3:79:6B:CE:FA:7B:25:34:60:3A:09:E8:66:76:66:B0:3E:A6:09:30
Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Certificate issuer:       /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Certificate serial:       0199228CE46F8602CCB758305E1B9117E1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
Manifest number:          0756
Signing time:             Sun 07 Sep 2025 05:01:22 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:22 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:22 +0000
Files and hashes:         1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: gxMprhH+ln6S/lITZNhp3CKL+QXFLMJNqvfvIZdyMfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:e4:6f:86:02:cc:b7:58:30:5e:1b:91:17:e1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
        Validity
            Not Before: Sep  7 05:01:22 2025 GMT
            Not After : Sep  8 05:01:22 2025 GMT
        Subject: CN=c3796bcefa7b2534603a09e8667666b03ea60930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:04:57:1a:3a:ac:4c:9c:d4:e1:53:27:56:
                    11:68:01:1b:38:71:34:9e:99:5b:7a:c6:0a:c9:7f:
                    3f:a2:66:14:6c:94:c0:a6:00:df:c1:43:0e:ee:81:
                    cb:52:c0:1f:af:1f:4e:4e:14:ec:f1:dc:3f:58:6b:
                    87:25:98:59:5a:e0:00:6b:4e:97:83:2a:f8:ae:eb:
                    fe:ce:26:5d:ee:7f:8c:e9:67:4b:1d:ed:f6:92:c2:
                    4d:16:a7:28:ac:3e:19:c6:fa:c4:b8:8c:63:c5:cb:
                    b7:48:03:90:13:8e:a6:09:ca:35:26:75:ff:0a:bb:
                    1c:85:18:a3:58:31:5f:09:4f:94:a6:75:b7:89:3c:
                    3f:1a:17:dd:b8:38:e9:46:6e:34:d0:5b:8d:c6:62:
                    26:b8:4a:fc:3c:a0:be:82:ed:ec:da:df:e3:d7:7a:
                    f7:c4:2e:d3:47:1b:00:52:30:1a:50:7f:a9:5b:db:
                    8e:4a:ab:ea:07:62:d2:15:1e:46:86:b5:19:4c:5a:
                    b6:17:57:c7:a1:07:ce:42:37:86:2e:5b:0f:c8:86:
                    e6:c9:e6:b4:a6:70:c7:6c:7a:dd:2d:df:cc:2e:18:
                    3b:2c:37:c3:e3:4a:b3:a8:fb:1d:b0:26:10:42:8e:
                    16:9e:e9:66:38:08:72:f1:7c:df:5b:41:cf:c3:f1:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:79:6B:CE:FA:7B:25:34:60:3A:09:E8:66:76:66:B0:3E:A6:09:30
            X509v3 Authority Key Identifier:
                keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a1:05:4a:83:42:ca:90:43:a5:58:6e:6c:7b:75:fa:30:cb:
         1d:e6:5e:52:06:9c:24:16:31:ab:1a:e9:5f:44:14:d5:2a:56:
         11:cb:85:5f:b1:35:39:c2:4e:6f:48:0b:63:21:8b:da:bc:b6:
         e3:98:aa:91:36:88:ff:79:ed:91:b1:22:31:61:04:71:eb:41:
         07:9b:53:9a:01:6a:19:b1:22:33:73:f8:5f:8d:57:ee:08:0f:
         e2:ac:94:66:e8:b0:b0:6a:cd:f5:17:aa:17:2d:aa:d7:ab:11:
         d0:6a:0f:5f:6d:ca:1c:9a:97:86:33:80:ab:2e:da:a3:dd:70:
         bf:53:66:b7:ca:36:b9:d5:74:40:cb:f7:7e:4a:36:5c:63:57:
         80:d2:4f:34:1c:91:a8:1c:1a:9f:61:a0:3e:e4:4f:4b:2a:fb:
         e8:c9:e3:ce:6b:28:56:1e:1e:7d:20:d1:58:d0:da:7a:f4:da:
         6f:e9:3b:71:01:f3:4a:ea:d1:0e:91:ce:bb:e7:a4:f9:f5:66:
         e9:94:da:1c:77:e9:b3:19:52:42:39:1c:cb:5c:68:53:38:ec:
         b9:4b:c1:dd:76:87:59:89:98:69:d8:83:51:44:54:37:ad:e1:
         f6:ea:14:68:20:72:c2:87:92:cd:9b:f3:41:4e:3b:25:ef:93:
         ca:d8:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:21 2025 by rpki-client