Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File:                     DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier:          yv01gDrLeUczfX0HVw4Xx7QPQzgRBInuve1pkvok2kY=
Subject key identifier:   35:65:9C:0B:AD:A6:76:82:EA:26:40:49:D3:92:0F:04:BD:93:71:96
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer:       /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial:       019921B1EB70F7C46BF946DFE481B484E1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 01:02:12 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:12 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:12 +0000
Files and hashes:         1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: Q9pkjna703QlpEt8y3yCv+f+IZu/8gZ1S49Hk5yCPb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:eb:70:f7:c4:6b:f9:46:df:e4:81:b4:84:e1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
        Validity
            Not Before: Sep  7 01:02:12 2025 GMT
            Not After : Sep  8 01:02:12 2025 GMT
        Subject: CN=35659c0bada67682ea264049d3920f04bd937196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:e7:41:c0:34:68:4a:60:07:4d:d2:a6:9f:
                    6c:f7:72:d6:6f:87:b5:a2:13:58:03:97:9a:f3:42:
                    54:0d:96:74:78:c9:4b:e9:f6:4a:b0:87:8e:c6:98:
                    b6:a9:be:55:95:2e:9b:8e:39:bc:23:72:69:f9:bf:
                    e6:95:13:36:66:c6:db:93:25:1a:8a:f1:e2:06:cd:
                    66:bb:09:94:36:0d:67:23:60:dc:00:f8:a4:7b:80:
                    de:4d:96:31:b4:51:dd:53:e3:3d:23:b7:21:de:79:
                    e0:64:48:3c:5a:cd:99:54:3e:e2:83:2f:72:95:60:
                    f2:e7:99:da:f1:fa:fa:bb:22:a6:cb:c7:56:db:a5:
                    80:47:ef:20:27:ea:1e:e0:bc:4b:fa:50:4f:80:ed:
                    9e:32:22:44:07:3d:11:86:26:1e:78:01:4d:ca:f5:
                    eb:d9:e0:84:54:d2:77:47:90:35:87:90:9d:6c:23:
                    96:b3:7f:3c:aa:6c:81:9c:e4:3b:f2:7f:06:14:07:
                    25:2f:5c:78:9b:ec:50:12:35:4f:84:94:40:26:fd:
                    ac:6e:1d:c1:08:dc:f8:cb:53:3a:7f:9c:91:28:2f:
                    8d:76:3d:26:33:30:73:b4:0f:47:dc:08:0e:e7:5d:
                    61:c2:f2:b9:4a:c4:94:88:d4:17:f7:61:02:18:39:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:65:9C:0B:AD:A6:76:82:EA:26:40:49:D3:92:0F:04:BD:93:71:96
            X509v3 Authority Key Identifier:
                keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:29:1e:de:a5:7e:63:3c:8f:4c:ab:c0:71:44:51:32:34:1f:
         07:a7:03:e2:b5:c7:24:ac:db:91:5b:45:51:81:da:4f:f2:45:
         ca:c2:92:d7:2d:fa:fc:f3:96:53:6f:76:a2:6a:0e:39:44:83:
         0a:2d:10:fd:01:e6:67:b9:84:de:12:c3:08:d4:b6:4f:92:af:
         7e:9f:ad:d5:89:df:38:4a:0f:98:2d:75:c0:a1:c1:ed:8e:4c:
         0a:c2:75:1d:e6:b3:e6:39:4d:e5:ed:38:35:82:16:e4:f8:ea:
         c7:32:ef:05:af:8b:d4:2d:2a:ad:09:79:d6:8b:f5:4b:1c:e0:
         d9:6c:cd:35:47:48:95:9a:fc:11:a3:4e:7e:ad:dd:e1:b1:4e:
         5f:3d:3f:db:c4:ec:93:d6:fb:21:33:25:17:2b:93:92:d3:de:
         f5:95:c5:32:b6:05:93:82:90:25:89:f9:67:8c:d4:a5:95:57:
         00:65:79:64:1c:84:ea:af:9e:d5:83:e9:fc:d2:f5:33:5f:9f:
         e5:83:3b:5a:a5:8c:b2:16:84:75:0e:92:d5:6c:4b:58:b6:af:
         c8:97:e2:f8:34:d5:7d:c7:7c:b6:0d:44:9a:41:85:44:9b:52:
         a4:21:60:29:03:dc:82:10:57:c3:cb:47:34:08:52:5c:95:ec:
         a9:47:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:27 2025 by rpki-client