Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File:                     V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier:          Z2DKSXnou4pQ1xLdzgi8Rqma4PyLAHh6v2Y5NqsVer4=
Subject key identifier:   31:63:1F:17:9A:6C:CF:34:64:54:26:20:32:BA:04:42:56:00:C0:C9
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer:       /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial:       019921B22A076A30DDAD0B118B34774ED40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 01:02:28 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:28 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:28 +0000
Files and hashes:         1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: FwX+/WLOI1J0asQ03DjtdetT5/J3bQQK5P5qtU0A+3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:2a:07:6a:30:dd:ad:0b:11:8b:34:77:4e:d4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
        Validity
            Not Before: Sep  7 01:02:28 2025 GMT
            Not After : Sep  8 01:02:28 2025 GMT
        Subject: CN=31631f179a6ccf346454262032ba04425600c0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:28:43:92:0d:42:2a:10:68:1b:10:40:c6:43:
                    51:9f:06:58:66:ff:33:7c:eb:2d:ad:54:cb:71:9f:
                    61:3f:47:60:74:ad:e0:bd:4f:10:b5:14:7d:e5:00:
                    93:a6:13:aa:30:db:e6:a9:d8:6e:44:fb:30:86:64:
                    30:b6:17:35:d8:9d:91:4d:55:41:47:1d:89:25:8e:
                    3c:96:68:bd:fc:45:3d:f6:3b:35:2e:d9:c5:dc:eb:
                    c0:e9:39:e3:33:af:e5:98:ab:51:07:59:6d:12:72:
                    26:46:92:17:20:d6:e8:ee:f1:7f:2d:98:fa:c8:2b:
                    05:d8:f9:c1:d0:ff:fc:c7:48:57:22:4a:8d:be:67:
                    98:f3:22:69:1a:6a:ca:ab:bb:31:37:15:28:b9:36:
                    a8:28:dd:6c:21:5e:bf:f5:76:00:cd:f0:25:59:c7:
                    32:3a:3e:5c:56:d1:91:38:a9:be:40:85:36:dd:b7:
                    a7:61:20:4f:f9:b4:03:a5:12:01:a0:22:1e:19:ce:
                    aa:c5:26:29:48:71:fe:cc:58:c5:59:13:59:20:61:
                    42:55:c0:97:70:c1:58:eb:9f:9c:40:b6:ae:f4:df:
                    30:4c:e3:4a:75:7f:2d:7b:25:ff:0f:f8:5e:60:6f:
                    5b:26:a0:cb:fa:21:63:dd:e0:02:33:04:e4:d2:08:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:63:1F:17:9A:6C:CF:34:64:54:26:20:32:BA:04:42:56:00:C0:C9
            X509v3 Authority Key Identifier:
                keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:59:ac:cf:be:3c:38:bf:f8:94:3b:0f:14:3c:0a:78:56:59:
         aa:d7:f3:dc:9e:32:ee:25:23:d7:3c:9b:b8:c4:8a:b5:81:a3:
         77:d2:08:f8:68:f3:78:a5:a7:5b:30:42:5b:40:95:05:93:2e:
         3c:1b:a2:9a:ee:ba:b8:22:61:f8:25:93:38:cb:92:a5:15:2e:
         15:2c:82:34:97:32:87:a1:c9:02:9f:11:87:ef:da:64:aa:89:
         bf:83:38:f9:91:f6:d6:d1:2c:59:9f:f8:21:05:8d:60:44:9d:
         7c:ef:9e:a1:21:df:f7:45:f4:10:22:2d:f2:be:a4:87:94:bf:
         3c:bd:c4:21:5b:17:6e:30:67:80:79:09:d2:d7:75:45:a4:c0:
         72:c5:02:6f:2c:c1:02:fb:00:4b:45:9d:32:16:d8:a4:b7:0b:
         26:eb:ea:33:17:17:42:5d:d0:28:4f:1b:e7:f5:1c:91:5f:9f:
         49:88:b0:dc:fa:69:e3:fd:08:3e:7e:17:20:2d:5e:7a:6b:af:
         c1:b7:e8:46:f2:ec:81:f6:fb:b9:29:f8:b6:3f:ad:09:28:71:
         6c:b8:0b:c6:b8:18:8d:56:8e:92:74:e7:d1:d7:fd:7b:a3:fb:
         ea:8d:87:df:1a:83:f7:17:0c:56:7b:b0:a9:39:2d:d3:14:a1:
         d7:48:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:39 2025 by rpki-client