Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File:                     i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier:          aNPAsFLxwXCpui94ErRPBJt+jHEzTjlTUuy3NTWCfys=
Subject key identifier:   16:BC:EA:FB:76:FE:F9:87:3B:90:81:A6:83:54:59:CC:43:53:65:CF
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer:       /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial:       019921E7E8033DC213C7200D26F01BAB9034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number:          0A98
Signing time:             Sun 07 Sep 2025 02:01:09 +0000
Manifest this update:     Sun 07 Sep 2025 02:01:09 +0000
Manifest next update:     Mon 08 Sep 2025 02:01:09 +0000
Files and hashes:         1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: rvis+4h/FCWdsc8Q7iJPlTeEKQlvmUjm3JtrPhaNbKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:e8:03:3d:c2:13:c7:20:0d:26:f0:1b:ab:90:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
        Validity
            Not Before: Sep  7 02:01:09 2025 GMT
            Not After : Sep  8 02:01:09 2025 GMT
        Subject: CN=16bceafb76fef9873b9081a6835459cc435365cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:30:02:50:dd:7b:30:da:11:5b:d6:0a:47:
                    f4:bd:d1:1d:43:3e:9c:8f:a4:17:9f:1a:74:1d:d7:
                    af:03:c1:1b:1d:bd:2e:8e:d3:3a:b8:5d:2c:9f:b6:
                    2a:a8:fd:cf:82:af:c0:bb:50:16:57:a2:e3:51:35:
                    48:3b:fe:c6:69:94:01:af:b8:bc:c1:7c:20:05:43:
                    68:5a:0f:4e:34:92:51:0a:ec:91:cb:13:44:16:58:
                    c5:07:65:5a:bd:37:79:e1:be:ec:7c:a0:8b:40:65:
                    fc:a8:d0:9a:ed:55:80:0e:17:52:7c:33:92:16:8a:
                    ad:3a:82:cf:93:39:10:c8:d7:da:4f:be:4e:f4:df:
                    d2:41:e4:72:82:31:8e:f0:02:d9:75:d2:3a:34:10:
                    53:78:7d:65:61:66:b5:e1:51:ad:51:4b:53:18:48:
                    4c:a8:a7:81:c5:e5:93:85:6b:99:aa:ed:fe:2d:59:
                    75:a1:38:22:cc:06:1f:3d:51:e6:f3:f2:bc:d1:26:
                    46:1d:89:63:9f:5a:09:88:88:7a:75:63:e2:3e:fd:
                    2d:13:47:1c:69:cb:d8:59:51:51:c3:31:c2:ce:6c:
                    63:25:26:21:4c:c7:b0:15:68:c6:72:0c:47:f0:fe:
                    9e:a7:5f:21:7c:74:6a:c1:e9:7d:9f:e5:75:96:65:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BC:EA:FB:76:FE:F9:87:3B:90:81:A6:83:54:59:CC:43:53:65:CF
            X509v3 Authority Key Identifier:
                keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fe:32:de:05:22:13:62:09:a3:23:36:cf:5f:ea:4a:fe:d0:
         a2:ed:ea:0b:5a:2c:be:6e:d4:5c:4e:ae:8b:b4:d6:ce:4e:92:
         56:33:0a:9c:6e:27:84:e1:9b:fe:64:98:d4:32:73:df:41:64:
         a6:4f:c7:c6:4e:a8:94:58:21:7e:d6:b0:82:9f:20:f8:c0:86:
         22:6b:5c:9e:ca:62:a1:07:24:5f:56:0b:a8:80:0b:3f:f5:33:
         ff:13:d6:d1:fe:f7:ce:a7:8d:e8:79:f6:da:20:fb:f6:d5:68:
         00:41:74:7c:24:01:c5:6e:84:e3:d8:63:99:80:6a:1a:44:e5:
         de:80:0a:29:3e:11:26:b8:0f:c6:58:c3:46:d0:02:3a:ea:8e:
         69:61:4d:e8:65:97:a7:55:0c:7d:10:35:e0:a0:4c:d9:f0:de:
         f3:e2:e1:0f:85:1a:80:93:da:29:2c:69:b3:4a:60:31:92:60:
         28:ea:a8:52:18:b9:40:d2:6e:09:f5:c7:eb:f9:73:ea:98:9d:
         2d:3c:1f:09:21:f9:55:a0:4e:e5:dc:53:cf:17:27:16:eb:d9:
         10:6f:03:9e:44:4c:38:a4:d8:8d:2c:22:8e:05:72:f5:63:88:
         f2:52:bd:35:1a:40:ea:85:46:8b:5f:65:8a:2e:54:b2:26:d4:
         90:a2:70:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:11 2025 by rpki-client