Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File:                     skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier:          fwhZNcDI0JFcmC3glaeMzKbVi1jw+07lbGs58RCgg0I=
Subject key identifier:   8B:D7:BE:CF:49:03:08:1F:AA:B1:40:4C:1E:D0:4B:00:6E:47:02:0C
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer:       /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial:       019921B1BA4F8E14DC5A94ACCC24167F10A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number:          0A7D
Signing time:             Sun 07 Sep 2025 01:01:59 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:59 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:59 +0000
Files and hashes:         1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: fvMSjnsBFNAVNo01GRJRyzOAfI8EnSCgdlyOc5sbycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:ba:4f:8e:14:dc:5a:94:ac:cc:24:16:7f:10:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
        Validity
            Not Before: Sep  7 01:01:59 2025 GMT
            Not After : Sep  8 01:01:59 2025 GMT
        Subject: CN=8bd7becf4903081faab1404c1ed04b006e47020c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:bf:cf:d7:b8:85:9b:c7:57:66:9c:93:fb:
                    a4:26:49:de:06:29:22:f1:73:40:17:70:f0:88:2b:
                    ed:d0:60:bd:06:f3:60:93:78:cc:8b:40:d1:b4:7f:
                    40:8c:f0:b0:74:42:9d:57:3a:c4:f5:27:43:97:10:
                    fc:61:40:36:ea:24:70:c6:15:d8:eb:63:58:ec:4c:
                    28:80:73:5b:25:de:43:ed:d8:0c:3c:1f:fb:86:bc:
                    f7:7e:e8:dd:1d:48:d0:66:54:d0:fc:53:47:55:b7:
                    8d:ac:ba:11:db:31:c4:4a:5e:c0:cd:02:23:2d:a8:
                    17:7a:b3:e2:64:19:e5:2c:76:11:11:aa:8b:63:21:
                    af:28:fe:03:9c:b8:24:11:4c:b2:84:86:69:80:0b:
                    97:a5:2a:cc:79:a5:12:23:f5:26:de:df:b1:fd:e7:
                    87:73:4a:07:06:c6:87:9e:68:f1:30:b7:2a:e6:0a:
                    0d:8a:f4:89:09:e2:c7:0f:82:0a:cb:af:b8:ca:54:
                    1f:9c:c6:a0:83:32:42:1d:b2:2b:cf:41:11:c9:ee:
                    8a:67:69:86:62:71:f9:6d:42:07:d1:91:d2:b6:84:
                    a1:e8:eb:a7:38:70:71:63:8d:cc:d2:eb:b8:1c:39:
                    e3:d9:fc:08:a1:0f:4b:60:53:a8:b3:45:1e:23:01:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D7:BE:CF:49:03:08:1F:AA:B1:40:4C:1E:D0:4B:00:6E:47:02:0C
            X509v3 Authority Key Identifier:
                keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cc:27:a3:47:cb:83:ee:03:e9:e7:cd:b5:ae:5d:a3:cc:17:
         e6:a4:91:8a:18:61:24:af:8b:22:f0:a0:b9:ca:19:f3:31:1b:
         53:37:be:f5:c4:c4:50:98:b2:ed:49:2f:11:e5:e7:61:4d:ac:
         18:59:45:1a:f4:0a:ae:7c:6e:bf:89:91:b9:d8:42:9d:a5:c3:
         67:54:34:a4:6b:29:86:a2:07:81:c9:41:35:c3:a5:8e:89:df:
         a2:bc:ee:81:dc:56:89:b9:9d:45:2f:d2:60:7a:26:21:20:3b:
         35:0d:a7:71:c8:f1:de:97:45:61:83:40:3f:0e:9f:56:37:8d:
         26:cb:d3:36:38:ff:c4:99:9d:ad:e7:85:58:e0:30:fd:7a:49:
         36:a5:42:78:67:1f:d4:8c:b2:37:84:e0:78:fc:5c:31:47:06:
         75:0d:f6:6c:5d:d6:c7:be:f9:b2:76:a6:6c:3b:85:90:6e:ef:
         71:55:50:8c:95:8b:0a:18:18:22:7b:42:0d:66:7c:63:6e:da:
         e7:f5:fd:50:fe:d5:46:18:ff:17:13:e8:11:b3:b7:a2:1e:ad:
         02:76:23:00:f4:7d:4b:81:bd:e9:8a:06:41:59:01:c4:cc:8b:
         17:21:de:a8:a8:9a:0f:f1:c2:0c:be:7f:f0:37:95:51:ed:79:
         0e:01:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:14 2025 by rpki-client