Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File:                     rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier:          j3QNRS3elpQU0lNcwCgsV04duTknvSn4RxvgOl1OZP0=
Subject key identifier:   6C:D4:03:55:6A:64:4B:33:60:30:57:DB:04:6E:22:03:68:27:32:82
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer:       /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial:       0199239F7FF50EB96C6AC51F627BC606ED9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number:          1279
Signing time:             Sun 07 Sep 2025 10:01:19 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:19 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:19 +0000
Files and hashes:         1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: iqfyERzAhUJcF2LCNDNoswpcPznN7gFDoYyI8gBHFOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:7f:f5:0e:b9:6c:6a:c5:1f:62:7b:c6:06:ed:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
        Validity
            Not Before: Sep  7 10:01:19 2025 GMT
            Not After : Sep  8 10:01:19 2025 GMT
        Subject: CN=6cd403556a644b33603057db046e220368273282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:0c:fb:d5:dd:36:81:25:79:4c:f3:6d:64:
                    49:0a:54:92:00:db:f6:0f:a6:2e:61:6e:bd:b4:63:
                    72:4f:09:8b:bc:c2:00:61:c4:3e:2d:50:f0:69:dd:
                    b5:de:22:2f:3b:f8:49:67:83:58:dd:42:2c:05:19:
                    c4:c4:39:43:2d:e6:76:97:56:56:0d:bf:16:0a:a3:
                    f3:70:9b:43:c3:7f:20:f2:1a:a9:d2:69:58:6e:20:
                    fa:a6:36:11:06:cb:00:b4:84:55:48:cb:44:ec:3b:
                    bb:0d:12:12:c1:95:61:20:92:5b:10:9f:a4:ef:76:
                    d0:0e:49:89:60:70:7e:08:1d:16:dd:ca:27:44:e5:
                    04:ca:03:57:21:e3:59:ba:1f:98:8f:39:5a:b7:2a:
                    92:50:f3:30:8c:c2:54:b0:4b:67:ef:91:9b:43:ae:
                    3d:06:e7:f2:56:84:eb:f4:ab:f0:6b:30:fa:44:bc:
                    20:cf:bd:de:24:d3:15:9d:fe:01:59:97:de:88:6b:
                    20:ff:16:4b:e2:03:33:3a:7d:4d:bc:5a:0d:0d:15:
                    56:07:66:f8:e2:cd:72:7c:a1:96:48:54:a5:85:b2:
                    29:f9:a8:a5:35:bc:2a:81:85:58:e5:88:fa:d5:b5:
                    21:d7:ea:2a:49:23:67:df:1e:5b:23:61:41:7b:4c:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:03:55:6A:64:4B:33:60:30:57:DB:04:6E:22:03:68:27:32:82
            X509v3 Authority Key Identifier:
                keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:d9:dc:1d:17:0b:15:f9:86:e2:5d:fa:8e:e0:77:d3:38:
         09:9c:d0:eb:96:a5:46:6b:4d:cb:45:b8:b4:f4:88:05:ae:cc:
         61:0a:48:bd:00:2a:df:e2:d5:1d:c5:8a:44:c4:15:c0:f4:ac:
         29:24:2f:a0:91:8c:39:93:2d:b2:24:a0:c4:68:12:33:f8:a8:
         aa:01:e9:1e:86:8c:f9:11:d5:a5:3e:b3:77:5a:9d:fb:c1:69:
         56:7a:9e:a8:2e:e6:9c:fe:30:3e:5d:46:68:60:9f:e4:24:1d:
         8b:62:58:41:94:05:63:ab:ef:d4:c2:42:3b:7c:b8:fb:b5:d5:
         fb:36:33:37:d8:17:38:df:35:db:b9:2c:4c:bc:b8:a4:7b:f1:
         c6:68:0d:0e:3e:3b:64:8d:06:c9:1e:96:bd:b2:fe:13:f1:74:
         f3:5f:4b:a1:87:81:00:e0:34:2e:be:3a:e1:f6:eb:19:6e:23:
         2b:02:41:11:3a:19:68:7e:88:92:7e:c7:9d:6e:9d:cc:81:0a:
         35:8e:db:3c:45:7b:04:99:4f:74:68:5d:c8:20:75:2c:dd:db:
         f7:cf:68:ad:19:f8:17:aa:34:d7:74:49:18:05:8c:48:bb:a1:
         da:48:a7:32:6a:27:37:12:cb:a0:1a:c9:3a:97:34:66:05:20:
         04:69:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:40 2025 by rpki-client