Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File:                     v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier:          wVklyEUKGIumqYvshxJauhs4DsSlGnfmgcfHNoUR7c4=
Subject key identifier:   47:AD:33:C6:EE:AC:81:CA:C5:01:26:18:C6:5C:1F:3D:4C:09:51:85
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer:       /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial:       0199228CFE55E547F51D862E5B786B33F1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number:          147C
Signing time:             Sun 07 Sep 2025 05:01:29 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:29 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:29 +0000
Files and hashes:         1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: aqYWQWYjjjFDyqP698AaQXvlM2gYrWy1NnIlMPgQK0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:fe:55:e5:47:f5:1d:86:2e:5b:78:6b:33:f1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
        Validity
            Not Before: Sep  7 05:01:29 2025 GMT
            Not After : Sep  8 05:01:29 2025 GMT
        Subject: CN=47ad33c6eeac81cac5012618c65c1f3d4c095185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:e3:0d:b2:7d:e4:22:5a:fb:0e:38:ae:d9:
                    b0:11:c4:9c:9e:9b:77:b1:11:36:49:85:52:f6:1f:
                    b8:0f:51:17:93:ff:4a:ad:40:64:38:d9:1b:d1:11:
                    84:d2:ae:85:dc:0b:71:7a:ec:7c:52:26:88:d9:15:
                    e2:54:f6:54:56:c3:9f:1c:ad:68:e1:df:a6:15:31:
                    fe:6d:a0:81:5b:92:1d:e4:03:a2:8a:49:9e:7e:f6:
                    12:2b:2f:f9:79:42:3f:85:ea:7a:85:69:12:57:09:
                    94:dc:1c:7c:f0:c4:b3:16:66:2d:5c:39:f5:e7:8e:
                    f5:7c:8d:e2:6e:d9:57:50:5d:c5:7c:07:ee:09:74:
                    58:14:7a:c3:d0:82:23:4a:29:80:1a:1b:b0:0a:0f:
                    d8:46:47:d8:df:af:4b:ad:3d:0c:55:d6:2b:60:ad:
                    22:19:bb:fa:26:ff:0c:be:e8:0b:ce:3e:f8:38:89:
                    25:b0:09:c1:da:e8:43:a4:a4:13:73:54:f9:77:db:
                    38:bd:1d:31:34:fd:c1:75:b9:04:11:0d:ce:19:be:
                    ea:d0:98:64:a1:e3:6e:f5:ae:2b:9e:ea:14:19:c6:
                    ff:1a:6e:7a:6a:98:5f:c2:70:ee:6c:d1:5e:8b:4e:
                    14:35:5f:1e:12:3d:4f:42:63:ac:54:97:cd:80:8c:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:33:C6:EE:AC:81:CA:C5:01:26:18:C6:5C:1F:3D:4C:09:51:85
            X509v3 Authority Key Identifier:
                keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:c6:26:71:98:d6:f4:a8:a1:3b:ff:d5:0d:78:17:89:50:
         9e:5e:71:6f:c4:6c:6e:9c:2e:a5:3d:32:00:e5:b9:b9:88:a6:
         9c:0c:4e:97:cb:1c:1d:27:ba:1f:72:f7:b6:86:c8:7c:d6:e1:
         ab:a4:4d:7b:7b:18:8d:ba:b5:4f:78:50:d8:a3:d0:00:58:cb:
         ea:1a:d3:ff:98:8a:30:63:2b:f9:7c:0d:f7:f8:89:eb:23:ba:
         2e:a2:99:93:d7:78:06:87:f1:6b:6c:08:b1:26:83:84:f9:c6:
         85:db:80:f6:8a:4c:fa:14:65:1d:d2:70:7a:14:dc:1d:f8:e8:
         69:7e:9c:79:00:7b:00:b6:3c:be:57:a3:e2:ea:59:44:93:03:
         d8:dd:86:e0:1f:91:7f:fe:81:14:df:ed:53:de:e3:07:84:2d:
         81:c8:b2:49:96:99:ef:59:eb:44:60:f6:16:96:3d:fe:8b:fb:
         64:df:f6:96:a8:74:a8:00:21:9b:2e:ae:dc:e3:bb:06:05:d2:
         49:5b:69:5f:d8:bb:a9:2f:9f:61:54:56:2b:32:b7:f9:43:16:
         ce:76:f4:b0:be:2d:c1:32:70:13:92:7e:c9:87:ce:79:51:bf:
         cd:17:e3:ec:16:56:af:d6:29:b0:7a:bd:c8:7b:96:a6:42:0c:
         34:68:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:50 2025 by rpki-client