Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File:                     rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier:          4EGpRE5wDpjVXFybutm57TdMOMO5Wz6BhZP/PfgvPb8=
Subject key identifier:   C9:2F:93:FB:67:2A:56:B5:54:C1:C1:A1:B3:15:5C:48:54:A0:C8:C7
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer:       /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial:       019922FA04F29B5E1E39EF6FB65B77C5C006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number:          13AF
Signing time:             Sun 07 Sep 2025 07:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:34 +0000
Files and hashes:         1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: xHtUW1JWoybQNAJxDCy6u+lwYpSmrtB307nhYHXUKd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:04:f2:9b:5e:1e:39:ef:6f:b6:5b:77:c5:c0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
        Validity
            Not Before: Sep  7 07:00:34 2025 GMT
            Not After : Sep  8 07:00:34 2025 GMT
        Subject: CN=c92f93fb672a56b554c1c1a1b3155c4854a0c8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:89:33:09:3a:eb:56:a7:ac:00:42:8a:a5:
                    9e:51:f5:0b:70:a9:dc:3c:0b:42:cf:8a:3c:95:6d:
                    5c:13:20:ef:24:3f:63:52:2f:f3:f9:16:f5:75:74:
                    18:77:7a:4f:a2:7f:f5:58:20:82:fb:36:ad:c5:c7:
                    90:e5:5d:83:a5:ec:0c:3c:30:31:1e:6e:1c:d3:f8:
                    34:e5:50:01:5a:50:82:e3:68:49:12:e3:0d:84:1c:
                    05:91:80:3d:c7:da:a1:17:e9:d1:c1:0d:77:b5:1b:
                    45:7e:b1:50:58:c1:15:86:06:5e:1b:1e:cd:61:1a:
                    cf:a3:de:0a:de:db:fd:e3:6f:3d:63:ae:f0:09:09:
                    4d:d6:4d:f3:cd:2a:75:03:63:78:79:e8:24:13:90:
                    2e:78:df:ce:0a:95:78:a8:04:1c:1c:50:63:58:3b:
                    5b:8f:bd:21:1e:e2:94:8d:fe:26:57:96:f7:4f:04:
                    e3:3a:de:a4:d1:57:34:89:2b:94:79:fe:10:6d:15:
                    55:0d:8a:b4:f2:e1:60:4d:f7:6b:34:01:1c:79:a7:
                    6c:2d:42:df:30:bb:99:86:b4:a0:94:46:c7:99:98:
                    41:34:0f:df:06:df:e9:5e:de:f7:6e:7d:e7:db:ea:
                    66:48:60:18:3e:cc:df:37:cd:86:3e:27:7c:6a:62:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2F:93:FB:67:2A:56:B5:54:C1:C1:A1:B3:15:5C:48:54:A0:C8:C7
            X509v3 Authority Key Identifier:
                keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0c:ec:35:e0:7a:9c:07:57:b8:01:88:9d:d1:e7:c2:71:a5:
         9d:77:2c:2a:8d:74:fb:c4:fa:d3:ac:96:36:04:4c:7a:5d:b1:
         a6:96:ee:18:cf:5d:e1:44:78:44:0d:5e:e9:9a:b6:f8:2e:db:
         32:20:7a:fb:e1:6c:38:c5:17:58:5f:44:06:31:60:bb:37:68:
         ed:8b:8e:f3:b1:de:82:10:91:59:43:4a:b8:d9:97:4a:88:a8:
         08:31:cc:7f:71:78:24:31:7c:21:be:e6:2c:e2:13:82:5d:09:
         7b:16:64:4a:12:ab:16:e0:63:18:a8:80:d8:50:5e:41:93:c0:
         7b:a2:a8:69:26:04:aa:1f:ee:a4:c3:fb:72:44:84:40:73:c0:
         58:a4:95:01:7f:97:04:72:08:e3:82:ed:0f:f1:6c:93:91:5c:
         6c:15:1e:76:de:8d:21:2a:39:5b:26:2e:7e:66:7a:77:48:e8:
         7c:20:31:80:b7:5d:76:70:9a:2f:82:c9:fb:ec:f8:1d:65:c9:
         22:65:98:65:44:75:9a:31:cc:32:6a:02:79:a7:7b:27:2f:ab:
         f1:14:aa:ac:13:7b:a2:3b:60:0b:a9:ca:73:bb:74:f8:61:bb:
         f9:80:6a:48:38:f4:88:1b:0f:11:2f:a9:dd:9c:0e:c4:ce:4b:
         26:68:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:19 2025 by rpki-client