Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File:                     1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier:          5/YBepwzD8PteN4fxyNPwsvEWmxA0hDTpGkkWitHsC8=
Subject key identifier:   C3:2E:6D:ED:07:D3:4A:E5:69:99:CD:1B:D1:C4:3B:6A:FD:6F:D0:2E
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer:       /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial:       01991764A84ACA1CC58D21A06EE417F7758B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number:          25
Signing time:             Fri 05 Sep 2025 01:01:36 +0000
Manifest this update:     Fri 05 Sep 2025 01:01:36 +0000
Manifest next update:     Sat 06 Sep 2025 01:01:36 +0000
Files and hashes:         1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: 7+jv3d5mIKxMxCwn///ncx7c0kVxzFZjr/xs3OHv1pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:a8:4a:ca:1c:c5:8d:21:a0:6e:e4:17:f7:75:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
        Validity
            Not Before: Sep  5 01:01:36 2025 GMT
            Not After : Sep  6 01:01:36 2025 GMT
        Subject: CN=c32e6ded07d34ae56999cd1bd1c43b6afd6fd02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:e6:51:d3:1e:eb:b2:69:51:09:bd:f5:ce:
                    85:d2:23:eb:40:e3:d9:a1:b4:f1:67:87:c2:22:41:
                    4b:56:46:13:e4:f8:2a:1d:e2:fb:57:1f:a6:f1:f3:
                    3f:47:03:60:67:f1:3b:36:a0:eb:a1:37:cf:b6:30:
                    92:d4:1a:06:88:44:e7:9f:63:de:05:45:f2:f4:57:
                    b0:43:d0:1f:42:21:c1:ad:8f:7b:5c:45:09:d8:56:
                    b8:bf:e8:26:4c:e9:82:42:c1:06:49:94:7d:5e:c1:
                    40:4b:b3:1c:26:d9:2b:83:8b:01:96:7d:d2:b1:de:
                    ab:cf:51:4a:9f:10:82:16:c7:be:1a:cb:db:45:81:
                    b8:7d:45:cb:5a:53:72:b1:96:9f:81:9e:b8:71:0b:
                    fd:49:02:0e:f4:8a:40:3d:9e:ac:ad:65:5b:2a:af:
                    15:e6:04:0c:d3:b8:09:c1:5f:35:49:00:e5:87:14:
                    1f:c3:d3:37:30:60:b7:33:ea:be:1b:ab:95:ce:95:
                    5c:91:0d:5e:56:99:9a:ec:c8:a9:5f:1f:7a:2a:50:
                    d6:2b:bb:6f:17:47:cc:34:3c:ab:53:46:bb:6c:99:
                    41:97:30:24:a1:d5:fe:1e:1d:1b:29:4d:e3:ad:b0:
                    21:ec:dc:1a:dd:2d:95:77:3f:f4:12:b1:79:2c:1f:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2E:6D:ED:07:D3:4A:E5:69:99:CD:1B:D1:C4:3B:6A:FD:6F:D0:2E
            X509v3 Authority Key Identifier:
                keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:3a:8e:37:74:81:6e:05:97:04:eb:d9:78:d5:63:f4:ce:
         e6:a2:1d:ef:05:38:f3:b4:df:9d:6b:76:47:3e:65:b1:65:84:
         91:fc:ef:12:a6:93:33:c0:06:da:aa:cb:a0:b4:be:7d:d5:a3:
         75:49:8c:3f:49:fa:6f:bb:5d:c3:46:57:dc:03:35:a3:09:1c:
         b4:d1:76:88:d6:9c:b8:96:42:0d:18:c0:02:ae:5d:ce:aa:f6:
         99:1c:e2:5b:0a:1d:2e:b5:d9:35:c5:33:ef:c4:20:a2:7f:53:
         3d:56:4a:a2:31:bd:2f:b7:28:5c:a7:14:2e:eb:28:62:d5:68:
         e4:10:ce:ac:5b:de:7a:88:e1:ae:4d:a3:a8:db:25:5d:b7:b9:
         dd:81:5a:4a:b6:71:b0:d8:91:be:38:87:da:0f:f6:d5:2c:0c:
         c6:e8:90:ad:50:1e:44:42:13:f5:e6:6e:d8:a6:ea:9a:03:51:
         91:07:28:a1:ed:ab:d0:34:6d:86:46:f7:83:96:b3:63:cd:32:
         3f:59:d9:ef:c8:ee:95:dc:03:8c:2d:f0:74:fd:49:55:a3:f6:
         74:bb:08:93:54:4c:0f:1f:19:da:1d:7b:c4:d5:f8:5c:5e:95:
         28:2b:d7:51:e5:20:ad:ad:9d:ab:40:38:22:52:2e:e8:31:e7:
         eb:a8:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:52 2025 by rpki-client