Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
File:                     SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft (raw, json)
Hash identifier:          8K7b87tcPiqh9TwhU3f94rufMbR/7J2w6WUhNKn3t28=
Subject key identifier:   20:5E:B9:59:12:22:C6:65:F3:2E:68:C4:0F:EA:FB:B0:A6:83:00:35
Authority key identifier: 4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
Certificate issuer:       /CN=4b27f327e528689d450c1d4a6346f540e7754093
Certificate serial:       0198D6CD61489C02A5918C7B169F05C73C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
Manifest number:          0F9C
Signing time:             Sat 23 Aug 2025 12:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:40 +0000
Files and hashes:         1: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl (hash: nNID8lPU8KWadQXdfCXS/D6xYP+C8+4xwVusTn82xxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:61:48:9c:02:a5:91:8c:7b:16:9f:05:c7:3c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b27f327e528689d450c1d4a6346f540e7754093
        Validity
            Not Before: Aug 23 12:00:40 2025 GMT
            Not After : Aug 24 12:00:40 2025 GMT
        Subject: CN=205eb9591222c665f32e68c40feafbb0a6830035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:bf:e7:bb:87:27:5d:7d:ad:3d:37:70:d2:
                    f9:2f:28:c6:8b:28:fb:1d:ad:56:8a:6d:8e:15:10:
                    eb:5e:5a:f5:e4:ce:69:b6:d1:b3:0b:31:1a:0a:fa:
                    db:94:44:83:74:98:ff:79:81:db:ee:86:3c:d7:f1:
                    b4:b6:b5:40:f0:13:b7:9c:15:fe:39:33:2c:9c:6e:
                    54:26:2e:1c:ac:8a:02:5a:ae:eb:90:7a:97:29:74:
                    ce:00:8f:58:3a:65:d9:8d:7c:67:b9:70:45:de:90:
                    7a:f2:e9:78:54:4b:3a:5b:f1:90:f1:5a:52:53:15:
                    1b:fe:14:b8:1c:d8:e1:54:0e:4e:db:27:1d:ac:85:
                    f9:f6:fe:86:54:dd:b5:21:ef:c6:88:dd:b7:0b:c1:
                    ee:63:93:0e:a2:7b:85:e6:3c:fd:36:ce:c0:65:68:
                    c3:29:bb:90:67:55:df:1d:de:b2:a7:96:fd:82:ff:
                    38:bd:75:46:40:f9:1f:36:57:48:69:9e:4f:be:e3:
                    36:ba:c5:3f:69:92:a7:d0:18:20:d5:8e:88:8c:b2:
                    1e:11:d4:40:21:76:cc:b7:c9:09:5b:db:8d:ec:f6:
                    a6:d4:1f:08:65:90:a6:d0:75:45:14:58:40:a9:0b:
                    5c:1f:d4:26:aa:d1:c3:88:ec:b5:6f:4b:e8:6f:56:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:B9:59:12:22:C6:65:F3:2E:68:C4:0F:EA:FB:B0:A6:83:00:35
            X509v3 Authority Key Identifier:
                keyid:4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:19:8c:30:6b:00:ef:d6:3f:f8:7b:fe:bd:0b:62:17:32:
         cf:4f:2e:e3:60:56:bc:3c:89:e2:94:72:f7:9f:7d:e4:0f:58:
         3c:52:6b:61:16:76:6b:8c:01:08:86:28:b6:3b:11:05:cc:f2:
         cd:7c:54:b4:36:9b:0c:e9:ee:ca:ff:c1:a5:1f:d1:1a:6c:46:
         89:fc:50:f5:7f:cf:01:64:e0:ad:60:05:80:ae:aa:89:b6:af:
         f3:65:86:24:92:ae:28:9f:6e:f9:5c:09:40:a0:0e:ec:11:c8:
         c3:a9:c5:25:66:33:02:56:99:dd:83:38:f5:88:06:1a:65:5a:
         d5:06:ae:a3:ef:c9:be:31:fe:58:f0:28:a7:38:28:6a:fe:ae:
         d3:c7:1d:c9:3f:79:38:3a:f2:16:17:ea:0c:e0:96:06:0d:bb:
         a6:02:8e:b0:73:28:bd:23:ff:86:4c:0c:eb:30:e7:14:a2:c1:
         5c:4c:de:c1:11:fa:9c:7f:1f:f5:2d:9d:80:ab:eb:ca:0a:4d:
         f8:fe:3b:2a:08:10:f6:2f:fd:21:b7:48:32:6f:b5:a7:a3:f9:
         ad:b4:d7:20:9c:44:f5:9e:b1:bc:a4:64:09:18:59:ac:09:10:
         b5:9d:df:87:9a:fc:6d:24:cb:3e:81:a8:fb:35:e3:e7:81:89:
         7c:d9:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:00 2025 by rpki-client