Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File:                     cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier:          j6w4EgIpuAlZqW/oH42TdOSOq8Ptl8UC8Kt9NeyduuY=
Subject key identifier:   7B:6C:15:99:BB:AD:60:5C:BA:B5:55:D1:93:86:64:3E:C4:02:88:B4
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer:       /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial:       019922FA875047A326A87B16D7F54409F250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number:          17
Signing time:             Sun 07 Sep 2025 07:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:07 +0000
Files and hashes:         1: cteauEKpTJvypSwgz21pussxOKs.crl (hash: h2Y4hcs8t4SotT6g5Gxjnb2IuBaNan+AYYSIdHPA7aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:87:50:47:a3:26:a8:7b:16:d7:f5:44:09:f2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
        Validity
            Not Before: Sep  7 07:01:07 2025 GMT
            Not After : Sep  8 07:01:07 2025 GMT
        Subject: CN=7b6c1599bbad605cbab555d19386643ec40288b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6a:b5:28:5b:74:c4:9b:e6:d0:3f:b9:57:ab:
                    1f:25:5a:4d:45:1b:01:56:ee:ec:73:26:f5:86:5e:
                    cf:23:2f:ce:eb:6e:14:16:b2:b4:22:8b:cd:d7:74:
                    2b:82:78:e4:da:a0:a3:33:7c:7c:94:ed:0d:40:58:
                    8c:6b:f7:27:28:9c:3c:07:38:77:30:9d:27:17:ab:
                    03:99:ac:b4:b3:a0:37:90:38:a9:72:29:6a:20:f7:
                    11:6b:d8:38:ee:ef:58:d5:ab:fa:68:c1:84:ab:02:
                    32:f7:b4:0f:0c:d5:63:c0:98:f9:f2:27:2e:e6:73:
                    d1:f8:ac:57:2b:78:8f:84:19:86:75:f7:39:b8:82:
                    7f:5c:b3:22:2a:8d:c9:3e:e3:a8:08:d9:28:e0:d4:
                    ae:e9:96:c5:49:88:6f:ad:af:9b:fa:bd:81:b4:2c:
                    dd:ab:5e:d2:d1:7a:4d:ab:98:9c:48:03:f5:64:e8:
                    9e:4d:9c:a8:e6:6c:37:13:6d:a8:9c:a5:ef:a3:bb:
                    cc:fe:20:11:01:5b:38:72:e0:c9:d9:ec:9c:8b:38:
                    9d:11:84:9c:26:f0:34:df:ff:b2:a8:dd:7b:0f:db:
                    ee:4d:67:e0:33:51:59:0d:5d:30:6c:1c:b0:95:83:
                    e5:53:0f:be:47:8b:59:56:47:7d:84:54:8e:28:77:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6C:15:99:BB:AD:60:5C:BA:B5:55:D1:93:86:64:3E:C4:02:88:B4
            X509v3 Authority Key Identifier:
                keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:41:27:da:27:bd:a5:b7:47:81:74:10:30:e8:40:6b:08:d8:
         e7:84:7b:ab:cf:ed:ff:49:8f:04:67:ee:86:91:16:6a:61:e6:
         62:7c:76:a1:24:42:f4:3b:a7:06:01:dd:99:7c:75:6d:a7:13:
         91:fc:5d:8d:c9:29:4d:5a:ec:93:cf:c7:20:4c:30:23:86:9b:
         cf:96:d6:71:2c:c0:f6:38:40:36:7f:b2:a5:fb:ce:57:a1:60:
         ae:46:c1:47:1f:87:fa:ca:97:86:57:d6:31:73:a4:d1:ec:ab:
         8d:e2:40:63:3e:97:3b:8a:30:5e:78:60:00:94:a5:f5:e0:48:
         3c:f5:4c:a8:60:b4:60:95:f9:59:dc:fb:11:46:9e:9d:81:19:
         d0:ea:51:d4:c2:ae:e3:67:cc:4b:f5:69:f6:62:bf:42:b7:83:
         a1:0f:14:43:6b:74:7f:ca:54:6a:d1:a4:e1:81:9d:ab:b1:0f:
         f3:65:36:90:b4:fd:37:ba:04:af:29:e4:c5:3c:3b:4e:fb:f4:
         05:79:82:5b:2e:d1:72:8e:ed:47:9c:6e:c1:3d:50:4d:3c:4f:
         ae:78:02:a2:db:e4:ac:04:f1:08:09:55:47:95:bd:4e:ea:01:
         b0:c8:a7:8e:c0:8b:0b:28:05:62:0a:13:83:93:18:b6:62:0a:
         43:6c:8d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:22 2025 by rpki-client