Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File:                     MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier:          xneUwJiydUV+bzYBMPMjOYrdMHtafUR80XFq7v5AGGo=
Subject key identifier:   7E:A8:47:09:AE:26:5C:93:30:93:32:5C:ED:97:6B:63:B8:99:6B:D3
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer:       /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial:       019921B0C1AAC168B044BC191FA2C29AD494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number:          15D1
Signing time:             Sun 07 Sep 2025 01:00:55 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:55 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:55 +0000
Files and hashes:         1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: iRwcRhtMC6hQATj3cLILn+af8QyXZwoJjKkomiesVRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:c1:aa:c1:68:b0:44:bc:19:1f:a2:c2:9a:d4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
        Validity
            Not Before: Sep  7 01:00:55 2025 GMT
            Not After : Sep  8 01:00:55 2025 GMT
        Subject: CN=7ea84709ae265c933093325ced976b63b8996bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:37:88:94:7d:38:f5:b5:91:94:2e:82:1d:
                    19:0f:b1:5f:e1:1c:b1:c8:d8:9f:bf:49:70:9d:38:
                    a9:ec:09:17:5d:36:42:d7:e1:f5:f2:03:37:44:b9:
                    5a:d1:c8:33:c0:2c:cd:6d:4b:30:c3:69:ca:18:14:
                    ee:e5:b5:5d:fa:a1:e5:0d:c8:10:30:d9:bb:8f:7e:
                    0b:14:f0:f0:67:19:87:4f:f3:f5:96:0e:92:d7:75:
                    d6:d6:f3:19:2a:76:ee:13:5e:ee:5d:9e:0c:58:26:
                    66:59:c8:cc:e3:ec:7e:0d:f7:ba:a6:83:4f:0e:fa:
                    d0:31:d3:cb:c5:86:74:15:e6:c4:85:cf:84:59:39:
                    8d:1b:9c:88:2c:9c:73:9f:0f:b3:7a:e3:12:80:9d:
                    8e:69:e5:0a:a4:75:c3:22:16:f8:b0:2c:8d:47:6e:
                    c5:bb:9a:3b:79:c4:da:3e:15:bf:69:d6:92:9a:c2:
                    18:dd:48:5b:68:26:34:53:66:37:98:bd:6e:38:2a:
                    9a:38:79:02:99:a3:d4:71:33:ed:e7:2b:60:9f:e2:
                    cf:3e:fc:a0:c3:60:d5:13:76:0d:6e:0e:ba:4f:3d:
                    cf:22:ea:bb:a2:98:3f:ee:df:1d:ca:df:e6:de:6a:
                    bb:fc:a2:dc:23:2f:98:c7:78:8c:5c:92:19:00:2a:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:47:09:AE:26:5C:93:30:93:32:5C:ED:97:6B:63:B8:99:6B:D3
            X509v3 Authority Key Identifier:
                keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:36:b6:99:e4:5f:63:c9:4f:89:27:35:7d:d8:91:96:58:
         70:20:89:d5:b3:e2:34:54:fe:a0:a3:74:7f:dc:12:0c:6e:b6:
         13:0b:3e:48:4a:1a:12:0a:15:bc:8b:13:70:63:ed:1f:57:f4:
         ec:d2:ae:30:01:c9:85:8b:39:f3:b4:53:24:d0:0f:6c:54:d9:
         79:99:f4:7e:af:86:0a:f8:bf:af:a5:d3:77:b0:27:6b:15:33:
         8b:15:03:4c:9c:76:f2:99:07:05:db:cd:5d:67:d1:a5:ff:0f:
         ae:b2:ed:d2:1e:51:0d:8f:d6:1e:3c:d7:c2:3f:25:fb:26:0e:
         b6:0b:bd:00:01:a3:a5:3f:67:a0:d1:35:b8:64:40:32:23:42:
         af:6f:b4:e5:5f:42:35:d2:f7:06:31:85:a4:c6:e2:22:8e:0e:
         f8:ef:6b:0c:98:fc:b4:6f:b3:2b:58:7d:c9:7b:ab:0e:63:1b:
         dc:2d:0f:f9:8d:42:1a:8a:59:b2:53:69:2e:1e:49:fa:a4:e1:
         a3:e6:95:e0:9f:fb:96:a4:eb:18:28:86:cd:14:40:21:d4:ca:
         41:da:ac:2a:ad:eb:92:f6:58:6a:9f:ee:1b:f3:e7:c6:0a:65:
         2d:61:72:2f:73:4d:ee:3c:da:95:0d:81:f7:67:21:c5:30:94:
         68:95:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:39 2025 by rpki-client