Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          I8ep2N5vANdtlQJzTXPo5HVUie6XyqyypYmlrXWuGkw=
Subject key identifier:   B0:53:B6:1E:20:B9:B6:FC:C2:A7:0A:15:19:48:D8:44:0E:2C:33:93
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       0198D884CEC26D5D7C57E76CF112B75A609E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 20:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:39 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: skiW/aabSzOmE3UmDpeFAggeLhy3AOD5YQn0iHPxTn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:ce:c2:6d:5d:7c:57:e7:6c:f1:12:b7:5a:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Aug 23 20:00:39 2025 GMT
            Not After : Aug 24 20:00:39 2025 GMT
        Subject: CN=b053b61e20b9b6fcc2a70a151948d8440e2c3393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:7c:f8:94:12:50:b1:ff:20:3f:14:93:2f:
                    7f:18:6b:aa:02:a4:92:8e:de:86:fc:a6:cb:14:99:
                    fa:e3:1c:d3:ab:a4:25:61:a2:7e:00:b0:17:0f:20:
                    7c:b4:39:1d:e7:91:1b:e5:e9:2f:b4:6d:87:2b:2c:
                    00:11:65:38:7d:be:79:9b:b1:41:35:6c:d9:27:5c:
                    82:6a:aa:f3:86:ad:38:d8:0a:2a:a7:a9:ae:50:a5:
                    34:64:a8:04:a6:df:4e:9a:82:66:10:d2:5d:1a:0d:
                    60:89:de:03:f4:4f:ff:3b:77:bd:97:05:40:b8:2f:
                    7e:c8:b5:ed:4d:ac:13:68:4e:c5:15:02:ae:5f:df:
                    b2:c0:33:68:6d:fc:ac:18:00:16:c0:18:a9:61:00:
                    63:13:ec:40:df:37:d4:27:dd:d9:f4:c1:c2:95:67:
                    2d:f4:54:2c:6f:39:e3:82:11:b8:f2:89:57:0c:b6:
                    fe:23:bf:ce:86:67:77:ee:14:a8:8c:73:fa:e8:64:
                    1f:98:e8:b1:a7:fa:8e:5b:f0:2f:ee:a2:ba:3e:de:
                    a4:fe:fc:24:00:d9:fb:c8:0e:91:51:98:1a:c6:f5:
                    db:be:b1:b8:1d:4c:da:19:a2:1a:c1:d2:61:a3:ec:
                    72:57:d1:5a:dc:75:35:40:3f:14:ca:cd:9e:b5:a3:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:B6:1E:20:B9:B6:FC:C2:A7:0A:15:19:48:D8:44:0E:2C:33:93
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2f:d1:93:e0:dd:16:77:3e:88:f5:a0:ec:0f:b9:23:c0:74:
         c0:fd:80:1c:f7:e1:39:65:eb:1a:47:7f:0c:07:87:a1:4b:ce:
         9a:72:57:75:d8:0e:fd:9b:e2:ef:14:67:3e:3d:35:37:85:ff:
         c7:22:9f:79:8d:ea:00:c4:5e:9a:9a:c9:6c:fd:44:bd:54:f4:
         fb:7e:e6:92:e4:6c:66:37:fa:59:cf:36:ab:87:f6:56:18:25:
         77:2c:9a:9d:74:40:6b:a5:86:dc:32:53:75:3f:8f:5f:11:e6:
         ef:ae:cf:da:fa:3f:fd:b6:52:af:32:f3:51:e8:dd:8d:08:fa:
         5e:95:38:ee:28:d8:b4:e2:81:cb:bd:03:5d:65:7e:af:da:97:
         41:2d:58:d4:df:77:7f:90:8c:a5:29:5f:f3:de:86:d7:fd:87:
         33:7c:79:28:9a:4b:21:ed:36:39:ce:12:64:50:2b:42:97:e7:
         e0:aa:bc:39:e5:45:14:a4:96:83:6b:05:9c:83:cf:12:35:46:
         87:7c:c1:0d:d5:7e:4d:1d:dd:8e:2a:89:8f:d2:db:d1:51:36:
         b8:64:ae:87:67:c1:56:87:2c:7c:87:a1:ae:7b:3f:42:5c:4f:
         21:04:f2:a8:8f:24:b0:ee:9e:e1:19:5f:03:f2:5f:c7:bd:7a:
         12:4a:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:33 2025 by rpki-client