Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File:                     cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier:          /CGl4X6Qddv1wRDeu48vXUc/Vq/wyGnpdxLTux6TyWQ=
Subject key identifier:   22:8D:FF:34:3A:37:42:57:6B:58:06:3F:BC:57:59:78:0E:84:DD:28
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer:       /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial:       019922FA152C089F55469057B62216BFCB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number:          12F7
Signing time:             Sun 07 Sep 2025 07:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:38 +0000
Files and hashes:         1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: XotFuMDtT2gl2cIM4dTVkx0fSujeJnM6qbMSQMFFthA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:15:2c:08:9f:55:46:90:57:b6:22:16:bf:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
        Validity
            Not Before: Sep  7 07:00:38 2025 GMT
            Not After : Sep  8 07:00:38 2025 GMT
        Subject: CN=228dff343a3742576b58063fbc5759780e84dd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:52:da:53:71:17:20:29:7c:f7:d7:c2:61:
                    2d:67:82:74:80:ca:f2:e1:ea:27:6b:0b:6b:09:9e:
                    ba:44:ab:ea:3d:cf:b6:7f:d9:37:ad:e1:d4:ff:6a:
                    a4:ba:0f:c4:82:d6:f3:ff:a7:71:a2:5d:92:93:9f:
                    82:e5:d6:13:a0:37:ab:90:81:55:a9:9e:2f:16:f1:
                    f3:4f:79:a0:4f:d6:d6:df:3b:fa:be:5c:f6:df:1e:
                    ec:10:f3:36:88:b7:44:85:3a:a7:3f:27:02:a0:ab:
                    e4:3e:b2:26:9e:5c:c4:b8:47:4f:c4:1b:d0:82:84:
                    93:55:18:ef:1a:39:9a:b3:36:70:44:09:4d:95:da:
                    2d:b5:90:9d:f4:eb:59:11:5b:0f:9d:72:cb:cb:f9:
                    a8:0b:de:11:72:ca:b8:7e:77:8c:81:30:78:9e:9a:
                    3b:c4:23:3f:22:fc:22:06:d7:35:64:80:d4:e0:8b:
                    71:e8:47:7c:7f:32:b7:20:42:ab:4c:fe:b6:05:4b:
                    42:09:cc:fe:67:9e:fc:f1:ac:35:7c:b9:b9:bb:79:
                    02:5d:2d:19:ea:e9:45:c2:99:55:da:6d:6a:e4:43:
                    66:d5:7b:f0:55:94:8d:48:73:85:d5:aa:42:d9:5c:
                    e2:56:a1:10:f0:75:b3:75:a8:36:12:73:51:ed:ad:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8D:FF:34:3A:37:42:57:6B:58:06:3F:BC:57:59:78:0E:84:DD:28
            X509v3 Authority Key Identifier:
                keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4a:62:f0:b6:93:30:5e:6c:26:99:fa:ba:7d:1d:b6:cb:32:
         d0:3f:b6:8c:4c:f1:80:5f:09:a8:63:e3:56:85:80:27:5b:c4:
         d8:e1:8a:a1:ca:3b:f8:08:1d:9f:16:c0:f2:77:fb:a9:f7:03:
         f9:e9:85:e5:29:49:7b:72:7d:14:80:8e:78:21:9f:bd:0d:ad:
         6d:32:14:3f:79:9c:82:97:ba:13:db:24:b3:46:33:fb:6d:b7:
         cb:65:0c:f3:a5:02:7b:60:54:75:d7:63:a6:0c:d1:46:a7:56:
         df:2a:b9:8d:a1:0e:7b:8f:5b:61:a6:d9:ea:05:9b:72:9c:6f:
         36:32:2a:6f:24:02:93:77:65:8b:7b:db:48:d5:58:00:44:97:
         e1:81:13:b6:2d:45:f2:c6:87:07:70:9d:9e:67:21:62:1c:c7:
         af:5b:1e:83:a7:66:60:39:d6:bb:35:e9:9b:ee:48:3c:6d:32:
         c6:04:84:5e:f0:8a:d8:22:8b:b9:48:ae:bc:28:3f:96:49:b3:
         db:b0:c5:f2:09:82:62:12:05:e9:79:af:e4:61:d2:38:65:f7:
         d5:69:af:7a:e2:c0:9f:9b:96:e7:45:7d:cc:4e:71:7d:00:fe:
         bb:ab:af:91:7f:f5:b4:ab:18:db:83:a1:66:dd:2d:e7:00:08:
         ab:98:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:12 2025 by rpki-client