Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File:                     1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier:          Ta8JEbLHyeO+ioKdqJKIY+F7uVXzqs5eT0/h/NgyL2E=
Subject key identifier:   3B:A8:02:51:15:35:86:77:75:95:D5:4B:33:3E:C0:0B:21:32:60:E8
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer:       /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial:       019A71B940798E403714BD988D15C7B05657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number:          171D
Signing time:             Tue 11 Nov 2025 07:02:37 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:37 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:37 +0000
Files and hashes:         1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: SMUfvUMRQGuieYA6iNTIj71HtnT8HocxVu8chm7beR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b9:40:79:8e:40:37:14:bd:98:8d:15:c7:b0:56:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
        Validity
            Not Before: Nov 11 07:02:37 2025 GMT
            Not After : Nov 12 07:02:37 2025 GMT
        Subject: CN=3ba80251153586777595d54b333ec00b213260e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:0b:18:f6:1f:c5:b8:ce:2d:b3:2c:a4:6e:
                    54:46:e2:31:65:33:78:6b:99:e8:5b:c1:37:6f:c2:
                    c8:f2:02:26:87:6f:41:98:16:04:68:1c:87:86:67:
                    cf:1e:9d:db:35:7b:07:d8:dc:cb:04:0d:88:34:f9:
                    9e:bc:e9:3f:a2:71:b8:fd:ba:a6:eb:c7:1a:1f:45:
                    a7:f1:7e:fe:39:fb:31:f2:43:af:80:97:59:f6:02:
                    48:a8:d0:a1:9d:26:6b:c3:47:07:0f:d0:80:e0:e5:
                    c9:51:39:02:12:75:bb:ac:ce:e9:70:aa:f6:c2:f1:
                    c2:5f:0c:f9:38:99:f5:d7:0a:de:a6:23:a1:a2:35:
                    51:8a:f3:1b:27:32:18:65:27:5d:8f:91:09:86:2a:
                    92:07:3f:1f:03:05:16:01:a4:3c:d9:41:1f:59:72:
                    90:a1:36:36:d2:dc:f1:b0:f0:e3:75:f8:06:8b:81:
                    18:d4:7c:09:fd:c1:12:af:c7:46:67:0a:57:92:c1:
                    1b:b9:1d:e4:cc:d6:e6:dc:b5:0e:36:87:2d:9e:58:
                    a2:6e:12:2b:a2:c0:b1:30:c4:96:bd:b4:65:da:9a:
                    88:ba:a0:f8:89:25:69:65:e2:94:c2:f3:ee:dd:3e:
                    cd:84:38:46:16:77:c0:e5:1b:b6:e8:0b:54:ef:ce:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A8:02:51:15:35:86:77:75:95:D5:4B:33:3E:C0:0B:21:32:60:E8
            X509v3 Authority Key Identifier:
                keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:a6:81:3f:f1:cb:ec:b4:cc:54:fb:56:ff:87:26:22:2d:
         f3:b4:e9:15:82:e5:49:17:2a:46:11:b3:99:d4:62:fc:a1:84:
         53:23:00:47:4c:09:de:a5:25:f7:9f:23:1c:f3:13:9f:21:58:
         ca:94:37:b0:c5:58:54:66:fe:a6:38:fa:34:49:79:7b:d5:fd:
         5f:cd:6e:2b:51:9e:15:c7:33:d8:87:c8:a7:ea:2a:18:62:65:
         07:47:6a:e6:a3:29:41:6a:36:b3:73:fb:6a:05:c3:ee:a9:76:
         78:15:68:33:0d:c1:c1:5a:23:2f:13:9a:b5:eb:10:53:2b:ea:
         98:84:82:82:61:41:75:79:79:26:d3:e5:aa:44:59:88:a7:ad:
         f3:ca:81:e9:02:44:77:26:44:a4:fe:80:26:9d:26:54:87:e5:
         11:6d:fc:4c:76:7b:38:73:ad:13:dd:41:a3:d9:41:8f:b7:a7:
         e2:2a:7c:e0:4d:12:40:c5:7e:2a:16:34:4a:93:02:ab:38:f7:
         2a:cf:62:a5:98:d7:fa:ac:46:e1:c8:9b:7b:36:66:53:91:d6:
         1e:6b:7a:50:66:35:43:cf:97:ae:a6:37:3b:ff:3c:97:e3:37:
         d5:b9:45:a9:24:07:ea:04:66:24:be:76:64:b4:1e:e3:96:84:
         f1:86:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:43 2025 by rpki-client