Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File:                     aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier:          wxCwA+BahZPIP1tg9H28kuye3GqwHvewwipNGYlJDlA=
Subject key identifier:   78:46:10:FD:A1:35:A9:B6:94:27:D2:DF:8D:21:D6:DC:C7:60:07:BE
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer:       /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial:       0198D73B254EB8056B9700C188842FDFB0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number:          0D64
Signing time:             Sat 23 Aug 2025 14:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:34 +0000
Files and hashes:         1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: OoyxZB2ClQLdsg2TnASaDCjLgGR8ukQ7IQ9PQxbEGxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:25:4e:b8:05:6b:97:00:c1:88:84:2f:df:b0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
        Validity
            Not Before: Aug 23 14:00:34 2025 GMT
            Not After : Aug 24 14:00:34 2025 GMT
        Subject: CN=784610fda135a9b69427d2df8d21d6dcc76007be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:40:fb:cc:c4:98:3b:01:e8:d5:74:b7:b6:
                    a2:b9:5e:0b:87:88:00:ed:c6:33:43:71:96:7c:1e:
                    cc:c1:d4:e2:6a:85:0e:36:0a:2e:8e:67:e0:4f:0a:
                    da:d8:e7:58:8f:f2:70:bd:68:f7:d7:8c:ac:aa:54:
                    7d:c2:a2:05:d0:21:b2:c0:3e:8f:04:38:87:d3:36:
                    09:03:4f:b5:9c:a0:e7:f7:f2:3b:9d:22:ee:dd:8c:
                    d2:d5:63:40:75:7a:56:0d:92:89:de:51:10:a9:2a:
                    90:a5:05:52:b8:f7:ef:56:47:7b:8b:43:a9:f3:42:
                    d8:37:a6:a0:4a:bc:31:b7:49:a5:b8:9d:2a:77:5a:
                    1d:f2:46:0c:59:19:ba:1c:1c:5f:06:2b:1a:7d:2e:
                    99:d3:19:8d:da:51:23:7c:82:42:90:5c:e1:49:63:
                    55:01:71:f4:fc:79:b9:c3:a6:75:0c:86:d1:60:50:
                    d8:b4:1a:69:00:44:dc:75:84:76:8e:d4:77:a8:96:
                    01:5d:6b:30:a4:c4:7d:9f:eb:f9:1f:9f:6e:ab:18:
                    75:09:9f:ad:2c:ef:7d:d0:72:8c:16:02:24:b3:56:
                    b2:87:91:13:80:1e:b2:35:2c:5c:50:2c:63:79:d9:
                    04:47:9b:16:db:37:eb:4b:da:6a:d1:50:b5:5f:50:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:46:10:FD:A1:35:A9:B6:94:27:D2:DF:8D:21:D6:DC:C7:60:07:BE
            X509v3 Authority Key Identifier:
                keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:65:ee:d6:c6:55:d5:ec:8e:8e:2e:5a:35:dd:83:d4:f6:e1:
         0a:c6:7f:c5:36:13:1d:27:7c:8c:c8:d3:1d:98:b0:53:6f:8b:
         6f:db:58:56:83:62:c3:d5:93:b3:eb:63:54:ef:c3:22:e7:37:
         9c:b4:4d:a8:de:22:d1:40:76:a2:be:97:0d:7b:94:28:fd:3f:
         19:14:b0:57:74:9c:80:0c:6f:77:08:f0:dc:c2:8d:11:1f:f2:
         46:9a:3b:12:e9:66:a1:9b:15:5b:c2:db:cf:35:19:cc:51:c8:
         a4:73:d9:12:83:55:0a:75:eb:ac:23:e0:4a:63:b4:74:fe:56:
         ca:89:9e:98:7a:35:ac:72:71:26:f6:19:a7:82:40:d1:4b:74:
         cd:c4:0f:54:75:06:3c:f9:87:78:f3:87:10:c4:7a:8d:2e:7f:
         30:61:d1:ad:d7:2d:0c:bf:45:67:31:7c:65:f4:ee:0d:fc:0c:
         a7:3c:74:fb:95:a7:7b:98:cd:cf:7a:1e:f8:a8:b0:f6:a7:d4:
         9d:a8:56:a8:1d:0c:73:56:36:86:86:fe:27:db:49:7b:63:d9:
         fd:19:2c:c5:74:ba:5e:61:0e:94:80:99:b8:99:fe:d4:4c:ff:
         22:08:96:f1:bc:7c:e1:7f:a6:6a:55:64:62:85:b5:a8:ac:c1:
         49:e6:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:06 2025 by rpki-client