Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File:                     t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier:          zKJ81oeIAkaElDNiwGCT2PTQTBoT/SLTF9iyO6O9Qt0=
Subject key identifier:   B0:86:18:FD:D3:D3:92:94:B1:E8:94:2F:E6:91:D4:A9:5B:7B:81:89
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer:       /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial:       0199221E48C985A293293B4F2579FD42C2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number:          13D0
Signing time:             Sun 07 Sep 2025 03:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:33 +0000
Files and hashes:         1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: tmVRMlVvPRr9tI8/fdJR/EQz7bo0fGSolqDEAP65daA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:48:c9:85:a2:93:29:3b:4f:25:79:fd:42:c2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
        Validity
            Not Before: Sep  7 03:00:33 2025 GMT
            Not After : Sep  8 03:00:33 2025 GMT
        Subject: CN=b08618fdd3d39294b1e8942fe691d4a95b7b8189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:40:7a:29:fd:1a:75:bd:ac:f6:ba:cb:f8:18:
                    99:b8:82:ab:c0:c6:02:9f:a7:22:d2:cc:27:1a:cc:
                    cd:6c:37:da:56:2d:ae:77:82:1c:ac:8d:91:19:90:
                    d9:fc:bf:57:59:08:77:e6:9c:fe:ae:ab:ad:53:fc:
                    5e:e1:72:2b:37:43:28:68:91:60:80:f5:7d:9d:21:
                    e5:6c:d6:cf:69:7d:40:0c:80:48:d1:87:0e:52:46:
                    5f:0b:ec:ad:62:59:9a:0c:c5:24:78:6f:fa:02:84:
                    58:2b:ed:0d:a9:83:2c:34:c6:8d:63:15:c5:5f:6d:
                    2f:37:d9:bb:cf:2a:45:66:f2:92:5d:b8:a2:0c:60:
                    0d:ff:b5:d8:b3:6e:bf:7b:b0:38:33:76:35:16:64:
                    4c:81:fa:d0:09:25:94:2b:8a:9a:b6:4f:1d:6a:31:
                    78:26:63:77:0b:cd:21:73:e3:fb:f7:18:6e:95:08:
                    7c:07:64:57:f6:ce:d5:02:db:98:54:03:fb:e4:1a:
                    92:e6:9c:4a:1f:20:4f:ef:0f:fe:16:9a:6f:05:77:
                    e4:80:b1:57:75:9a:2d:1c:20:cf:e0:59:33:47:2a:
                    d3:cd:29:c4:62:e2:57:67:69:2f:0d:12:27:2a:b7:
                    ac:e5:70:73:f6:31:99:c8:ce:bb:fb:ea:1b:25:db:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:86:18:FD:D3:D3:92:94:B1:E8:94:2F:E6:91:D4:A9:5B:7B:81:89
            X509v3 Authority Key Identifier:
                keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:02:2a:83:c7:8b:85:f4:db:ec:69:df:0a:bd:68:48:1e:14:
         d3:e2:ba:1f:08:1d:27:be:3a:64:f6:a0:bf:3c:2d:47:f8:99:
         cd:fd:56:e4:cd:68:5c:cd:21:b3:d0:fd:15:b6:01:54:bf:9c:
         72:b2:07:de:24:17:c1:02:86:a2:93:7b:e7:0e:05:76:90:99:
         72:db:48:eb:a4:17:79:3f:6f:81:21:9b:9b:77:b2:ba:78:b3:
         57:6f:67:e3:70:f0:47:90:c8:dc:10:54:80:96:2b:06:41:40:
         6a:82:eb:b6:03:c6:ed:32:b6:91:42:57:50:bf:a5:69:08:bb:
         96:82:c5:36:4f:d1:5c:76:e2:80:42:15:5f:bf:b8:fe:60:c7:
         83:9f:9a:79:51:74:dc:c9:c9:ea:4c:d5:e6:80:00:94:e0:38:
         41:60:2c:f0:76:3b:70:95:a5:dc:99:69:10:38:5f:55:e2:63:
         86:4f:ff:a6:3b:bf:39:9d:f5:61:bd:72:49:bf:56:03:2b:b5:
         cb:04:41:0a:31:38:56:0c:64:ca:92:2d:f3:2b:25:ad:6d:cb:
         cc:56:17:09:51:a2:77:99:73:d5:60:00:a2:ba:14:bc:89:39:
         83:4a:c6:f9:12:45:94:1d:c8:ed:71:45:af:fc:21:af:d2:df:
         f6:11:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:11 2025 by rpki-client