Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
File:                     iuSaSeoGdwqH11pcg1b0Vk4asew.mft (raw, json)
Hash identifier:          CnWyMfwhSodwlYse8Mz1hWww+G1L5bDHeHckeeOKKVY=
Subject key identifier:   DB:90:D6:17:35:92:D7:45:7B:31:A1:DD:BD:88:D2:E0:90:0A:A3:BD
Authority key identifier: 8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
Certificate issuer:       /CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Certificate serial:       019922FA7B9F312F7E53B059BF1AF83F7FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
Manifest number:          0408
Signing time:             Sun 07 Sep 2025 07:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:04 +0000
Files and hashes:         1: iuSaSeoGdwqH11pcg1b0Vk4asew.crl (hash: bT/ZqYGAbKH/zTyeHon28CH1f5lGT8MCwH+Mf96v4MY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:7b:9f:31:2f:7e:53:b0:59:bf:1a:f8:3f:7f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
        Validity
            Not Before: Sep  7 07:01:04 2025 GMT
            Not After : Sep  8 07:01:04 2025 GMT
        Subject: CN=db90d6173592d7457b31a1ddbd88d2e0900aa3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:34:03:ac:af:a7:a7:55:bc:f3:a2:89:5d:
                    42:30:99:a1:4c:29:bb:26:85:73:da:53:8d:5d:9f:
                    f0:ca:45:07:05:76:51:55:13:0e:f3:94:dd:37:b0:
                    7b:0c:e6:93:35:72:76:89:89:43:d0:67:7f:01:82:
                    a1:8c:be:70:f2:e4:63:42:4d:4b:8f:46:53:f5:93:
                    cd:af:45:23:b5:71:29:2a:f5:3c:d0:9b:f1:69:f4:
                    f0:b3:ed:6f:3a:60:f8:77:a5:0b:34:18:b8:6c:d3:
                    6d:22:20:2d:39:cb:eb:13:97:ce:b7:59:b3:8c:6a:
                    79:93:4f:e7:01:60:1a:ea:de:9a:cb:a9:b1:05:99:
                    ba:a7:54:f3:c6:a0:cc:02:80:84:45:9e:3e:1f:bd:
                    c5:a6:55:7d:8f:90:15:53:d3:0f:f6:cc:07:bf:16:
                    a6:e4:0f:ae:7c:05:52:53:ff:f3:62:fb:6c:80:d9:
                    db:4e:e8:c5:cd:cc:e0:bc:b1:73:eb:21:34:28:00:
                    36:99:4a:d1:7a:f9:e0:21:eb:d8:ae:ec:72:a2:fe:
                    73:91:ef:9e:9a:3c:6d:50:6f:7a:7b:fe:a1:16:98:
                    56:73:62:98:20:74:1c:99:b0:80:23:d0:90:56:5f:
                    db:77:f1:cf:b7:6b:19:e9:04:6d:0f:14:5f:8f:d3:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:90:D6:17:35:92:D7:45:7B:31:A1:DD:BD:88:D2:E0:90:0A:A3:BD
            X509v3 Authority Key Identifier:
                keyid:8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cb:8c:84:de:bc:22:8a:5b:6e:97:75:ab:6e:11:50:cb:3c:
         f0:26:85:7c:8e:e9:7f:45:f1:4f:6b:48:9a:9c:be:ff:bd:e1:
         f2:8b:b4:8c:a6:0a:4e:a3:fb:59:24:fd:5e:e4:3c:ce:42:53:
         13:fe:39:7d:96:1b:80:ca:62:20:88:17:5f:a8:f4:9c:77:82:
         32:51:92:c6:c1:4a:a4:0d:7f:20:6a:9e:d7:92:b1:1d:c0:dc:
         0b:8c:2c:37:73:d4:3a:1f:03:df:a4:35:19:5b:b3:30:9c:a9:
         51:6b:35:68:cb:0b:f3:1a:cd:5f:6a:62:9c:de:0e:a0:4d:fa:
         8e:78:2e:c5:0b:8d:56:92:5f:df:ef:95:68:59:e5:60:e2:6d:
         48:da:f5:75:5c:5c:9f:f4:10:70:5b:71:0a:b1:ae:4a:3e:84:
         b9:2f:df:28:6d:08:7b:4d:1c:69:ec:f4:2b:30:10:37:b1:a1:
         87:83:df:ca:d8:12:fd:58:3d:dc:77:d2:ab:10:4a:83:c3:ce:
         3b:0a:01:8d:88:66:97:e7:9a:70:58:80:0f:1e:30:84:ca:c2:
         1c:0e:89:e0:a1:da:ee:d0:e5:39:d3:4d:2d:b6:2a:5c:68:1b:
         20:9b:eb:d5:c7:61:65:e7:55:46:f6:68:76:33:c4:09:e0:04:
         50:22:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:11:16 2025 by rpki-client