Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
File:                     rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json)
Hash identifier:          o7lh7TbXaeLtuFeJaiI7DOasuaUClPtKTCJQVchnizg=
Subject key identifier:   6A:96:45:0F:F4:61:83:EB:90:E7:28:C5:56:B2:A0:69:8E:A4:5D:01
Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55
Certificate issuer:       /CN=aef97a95e2170275e8c82ee878b6d08deb821e55
Certificate serial:       019923A0A45E14C70F2F54E7AB6F680D0F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
Manifest number:          0F98
Signing time:             Sun 07 Sep 2025 10:02:34 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:34 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:34 +0000
Files and hashes:         1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: gWkyeYOjXvvSTruhQsejEDQD3kryLu1DWfpirmTP7xE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:a4:5e:14:c7:0f:2f:54:e7:ab:6f:68:0d:0f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55
        Validity
            Not Before: Sep  7 10:02:34 2025 GMT
            Not After : Sep  8 10:02:34 2025 GMT
        Subject: CN=6a96450ff46183eb90e728c556b2a0698ea45d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:e4:29:b1:bf:73:be:f4:c9:7d:de:69:55:
                    cc:d3:68:d0:4c:15:8f:6d:6c:07:56:3f:70:a3:e6:
                    fb:c5:2c:38:41:92:a2:47:3c:9a:35:fa:b3:f5:4c:
                    c9:17:31:25:15:7a:3f:d5:d5:b7:41:02:e9:36:21:
                    e7:b9:bc:26:58:a1:2c:be:62:76:81:6f:d7:22:db:
                    88:a7:58:4e:72:5f:cb:30:1e:c2:27:d0:64:8b:c9:
                    34:42:a7:20:f4:f9:cd:b3:cc:a7:97:25:15:b2:0a:
                    29:ca:b1:47:81:ad:fc:e2:0e:b1:d2:76:71:ed:18:
                    95:d1:75:4a:67:b7:84:d9:51:e4:50:05:28:5c:aa:
                    be:39:d0:35:a8:2f:72:1a:13:a2:60:13:f2:25:77:
                    77:0a:e0:d6:a3:08:2c:1d:90:54:69:31:bc:eb:d0:
                    28:8a:8e:34:25:03:9f:e0:42:19:1d:c5:79:27:65:
                    38:57:09:a3:e2:77:2f:95:d0:ad:b8:37:b8:19:e4:
                    b7:5b:ee:90:0d:65:dd:d2:41:30:00:bd:b9:91:f5:
                    fb:b9:12:51:33:12:f6:bd:84:9c:c0:bb:a2:e5:2d:
                    4a:0b:51:7c:0e:dc:5d:bb:39:cc:91:16:cd:a8:10:
                    87:26:82:9d:e0:26:d4:5d:f3:eb:6f:7a:7e:85:b4:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:96:45:0F:F4:61:83:EB:90:E7:28:C5:56:B2:A0:69:8E:A4:5D:01
            X509v3 Authority Key Identifier:
                keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:37:30:ab:84:f8:49:81:19:0a:c8:8e:79:2c:f4:0f:59:f7:
         3e:40:79:f7:05:02:66:d7:e6:4c:7d:8e:14:7d:61:96:47:46:
         a4:27:c2:b3:01:48:ad:7c:07:fe:3e:86:07:be:68:24:c0:7f:
         f5:20:90:99:5a:8f:c8:15:49:96:1b:ed:b1:3c:08:7e:96:6b:
         4d:ae:d3:20:f6:b8:7f:1f:ef:1e:e3:dd:5c:7b:39:ae:9b:13:
         ee:63:6a:02:ab:29:2c:eb:0f:34:d5:44:fd:de:c6:c9:81:66:
         67:34:d4:00:87:16:15:61:8d:39:59:76:03:e2:cc:c7:2b:82:
         d3:f1:fe:95:4d:49:a3:4f:5e:cd:e9:bd:3b:3b:08:1d:2e:c1:
         f1:b9:8d:69:67:4d:22:ff:2a:2c:a9:8e:b3:65:1d:60:a0:2c:
         0b:62:4e:15:4f:a1:2e:cc:03:fb:b9:9d:ae:da:f7:88:a6:ed:
         c7:76:8c:2a:2d:4b:6a:28:80:83:a3:ec:bb:2d:8a:57:50:cd:
         de:4c:6c:8e:4f:a5:63:63:db:16:52:6b:dd:c1:59:49:7f:5b:
         1b:59:d2:8b:fc:03:43:fa:6d:7e:a1:95:45:f6:ef:29:a0:b0:
         45:17:ec:73:ee:15:19:09:eb:1a:79:de:3a:13:ac:8f:da:60:
         0f:3d:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:59 2025 by rpki-client