Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File:                     t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier:          03lWt4/LgfXJAJGkugYzLE//uNdrH/HA94ZuJJX6OZk=
Subject key identifier:   55:98:5C:35:F8:1B:6D:AD:A8:00:0B:7C:99:3E:8C:30:03:E2:11:38
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer:       /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial:       019921E76F9FF2CDD24BDB07C521978D649B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number:          0626
Signing time:             Sun 07 Sep 2025 02:00:39 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:39 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:39 +0000
Files and hashes:         1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: QebZlG/SCgPoT9rbZUsdpaG7hW7yYJjNZJSLuPySYcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:6f:9f:f2:cd:d2:4b:db:07:c5:21:97:8d:64:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
        Validity
            Not Before: Sep  7 02:00:39 2025 GMT
            Not After : Sep  8 02:00:39 2025 GMT
        Subject: CN=55985c35f81b6dada8000b7c993e8c3003e21138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:9f:b7:3b:7b:38:c7:be:df:d7:d8:48:f1:
                    62:3c:9b:0e:49:be:0b:b0:8e:7c:9e:70:24:f1:8a:
                    1b:0e:0e:66:33:90:33:aa:38:78:08:cc:53:7f:82:
                    6d:41:0f:d8:94:99:c6:d6:89:de:50:69:74:8f:ff:
                    dd:80:98:41:54:1e:ae:39:88:22:27:17:e1:10:3f:
                    0d:37:d1:c3:77:e1:83:35:34:98:a1:18:6c:d0:b2:
                    33:65:08:99:6b:a4:24:9b:79:67:66:cc:96:1a:12:
                    2a:e1:a6:a8:ce:80:25:12:ed:7b:09:4a:ed:b1:e8:
                    d1:4b:ef:1e:79:6b:69:c8:8e:f2:66:ce:77:b6:55:
                    70:ff:2b:be:c5:56:6c:58:3d:50:d5:a5:ac:00:ac:
                    a9:9f:05:c1:3a:bb:c2:be:d7:0a:65:e1:88:39:1e:
                    37:a6:a7:2f:d6:7e:6c:c4:1f:0a:38:88:1c:ed:26:
                    8c:19:31:5f:1c:45:50:1f:48:e6:49:24:42:cc:b8:
                    09:20:d2:09:1b:5a:d3:a8:59:c7:cb:04:b0:f6:81:
                    ed:bd:9e:3d:af:15:c1:ab:0e:1c:91:14:62:aa:a1:
                    d5:10:b0:89:2d:e8:18:64:f7:05:1e:46:a9:59:5a:
                    88:9a:43:44:1e:02:85:cc:57:64:56:96:db:d7:bb:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:98:5C:35:F8:1B:6D:AD:A8:00:0B:7C:99:3E:8C:30:03:E2:11:38
            X509v3 Authority Key Identifier:
                keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:31:1b:15:e7:74:60:7c:b2:13:4a:cb:39:75:61:80:39:1f:
         ec:13:e8:4b:1d:e9:2d:08:22:d8:9e:3a:e6:f6:ed:8d:d8:77:
         2d:1b:9d:1a:65:04:77:83:08:5b:49:09:f9:c0:d1:c0:f2:5e:
         55:a0:74:bc:a8:a9:6e:d4:30:b2:f6:8a:ed:e6:c5:cc:e5:8b:
         bb:0f:4b:06:bf:75:ba:8c:c4:96:c2:c5:2f:b5:b1:74:9b:05:
         8d:2c:ee:06:5d:89:d0:59:b5:b1:ff:6d:ce:57:b3:61:99:67:
         db:be:f6:26:72:7b:49:16:17:fb:2d:a4:d0:98:b3:5f:0f:8a:
         99:0f:20:d7:39:b4:83:37:af:7f:9d:bb:b8:2d:0b:30:1b:72:
         34:f1:8d:78:c3:fd:37:29:56:fa:9f:a2:75:d0:5a:6c:fa:a3:
         76:1f:c2:27:64:b7:79:d7:1f:be:8c:e0:16:d9:c6:32:76:83:
         a1:16:ee:16:e9:77:09:de:19:bf:f1:1e:62:54:9e:93:74:2b:
         97:b9:c7:f1:35:ee:ab:35:1f:e2:98:34:a5:a7:80:cb:4b:72:
         0c:27:3b:f5:91:fd:01:7e:9e:5e:39:99:bc:fd:aa:1f:45:c4:
         a1:1d:f6:56:1f:79:e9:cc:d9:7c:0b:f4:c3:87:86:37:72:4e:
         2d:8f:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:33 2025 by rpki-client