Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
File:                     b0hdoepm0fZhammw0CuaK8Gk_9M.mft (raw, json)
Hash identifier:          DiZ5llzsrmIxdHYH10Y2YX/ujcmlzvdlYVpn/57B62M=
Subject key identifier:   47:80:5F:C1:E2:05:51:B0:72:80:78:C0:36:3E:05:F6:FD:34:B0:9B
Authority key identifier: 6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3
Certificate issuer:       /CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
Certificate serial:       0199172CE30D64CECDC61879AEF8D5058A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
Manifest number:          A0
Signing time:             Fri 05 Sep 2025 00:00:41 +0000
Manifest this update:     Fri 05 Sep 2025 00:00:41 +0000
Manifest next update:     Sat 06 Sep 2025 00:00:41 +0000
Files and hashes:         1: b0hdoepm0fZhammw0CuaK8Gk_9M.crl (hash: QPYh+2YMt6k0O1CPBRFgKNtOMGk3IgOHFiTTaIM6nrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2c:e3:0d:64:ce:cd:c6:18:79:ae:f8:d5:05:8a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
        Validity
            Not Before: Sep  5 00:00:41 2025 GMT
            Not After : Sep  6 00:00:41 2025 GMT
        Subject: CN=47805fc1e20551b0728078c0363e05f6fd34b09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:8a:62:8e:92:ea:88:e5:5f:ce:fc:b5:5d:
                    31:e3:70:82:12:d6:b0:f4:a8:e7:62:3f:ef:8f:3e:
                    a5:c6:a4:ce:62:cc:75:93:7a:98:14:65:4a:c0:e2:
                    a0:ee:c4:89:3e:6c:3a:0b:9f:7b:a2:91:5b:d4:e2:
                    1c:ec:ca:0f:27:9a:d6:86:f3:17:fb:f2:d7:a1:3e:
                    b2:a7:c4:3e:cc:38:3c:80:4d:18:4b:f4:b7:04:4b:
                    a9:b5:3d:96:0d:b8:fc:21:9d:1c:35:64:1a:77:30:
                    77:8e:42:0c:b0:6f:d5:e7:ba:78:b5:cf:1d:e0:45:
                    3f:54:b0:3d:b8:bc:02:5e:06:73:20:e7:82:6e:32:
                    77:77:6d:45:d3:28:bc:fb:07:a3:d5:ff:64:99:72:
                    cd:eb:42:39:f6:ce:f8:15:6b:00:e0:6e:40:58:58:
                    27:3d:77:e8:42:33:fd:06:44:35:1d:1c:b4:19:f0:
                    c4:65:f0:6d:f3:6f:94:4e:da:15:51:36:4b:e8:6d:
                    e1:f4:ce:80:d6:fd:bf:1d:5e:de:8c:aa:c5:28:89:
                    a7:c7:d8:ea:33:ba:7c:63:2c:9b:e7:49:a4:92:47:
                    09:d3:b4:92:01:ac:a8:bd:05:2b:bd:0a:c8:e2:15:
                    0d:2f:a6:2d:9e:99:a2:92:d0:95:e6:65:1e:ff:93:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:5F:C1:E2:05:51:B0:72:80:78:C0:36:3E:05:F6:FD:34:B0:9B
            X509v3 Authority Key Identifier:
                keyid:6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:04:8a:33:02:7d:8f:db:d9:24:4a:6f:55:0e:0a:27:89:
         4f:15:ee:97:c2:18:98:d3:ff:38:12:40:d2:12:bc:e4:c3:e5:
         fa:33:57:74:4e:53:51:6a:ac:5b:16:11:ae:a1:19:c6:5f:ce:
         1d:7f:79:1d:6f:16:2f:5e:26:8a:17:03:e9:f2:9c:c3:57:bb:
         ed:e0:96:46:a4:4b:48:85:f7:37:b4:8f:bd:fd:ee:c5:5b:74:
         21:9f:35:4d:f3:5a:db:12:f0:00:38:62:97:4b:44:76:60:46:
         ac:3f:a3:5d:35:bd:a9:d7:dd:1f:f3:2c:1b:70:1a:cd:42:3b:
         7c:ab:80:f6:30:80:24:89:71:14:ac:c8:b6:2b:52:60:a6:19:
         e1:ae:3c:21:50:bd:c8:e9:ca:7b:7e:d1:4c:61:09:1a:ba:e7:
         da:62:3c:19:27:a7:3c:ea:ba:e1:86:00:ac:5c:fb:b8:51:36:
         c8:3f:d1:4f:4e:18:b5:85:f9:45:c0:da:1d:92:ea:03:03:aa:
         ef:25:c0:2a:62:c4:1b:3d:ce:18:9a:5d:c0:1b:e3:08:91:7a:
         54:44:ea:3a:e3:4f:ec:17:89:b1:5f:dc:10:08:a0:4e:4b:e0:
         c2:56:9d:4f:04:16:02:23:5e:e0:77:bc:b2:01:e5:6e:33:2c:
         98:41:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:06 2025 by rpki-client