Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File:                     M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier:          JqVViWduL6aDeW6xdd19VEoWPLCyx9C5yrQ7idiWhrE=
Subject key identifier:   31:1D:6A:01:89:76:F6:A9:58:8F:E7:BC:89:28:EE:FB:88:54:FF:4C
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer:       /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial:       0198D6CD1A73863099497F6ABB45874A2162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number:          0781
Signing time:             Sat 23 Aug 2025 12:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:22 +0000
Files and hashes:         1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: Ijvv1rePkoFi5dS+MHvvh/Du3ec+AwXH3LAPab2Sl/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:1a:73:86:30:99:49:7f:6a:bb:45:87:4a:21:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
        Validity
            Not Before: Aug 23 12:00:22 2025 GMT
            Not After : Aug 24 12:00:22 2025 GMT
        Subject: CN=311d6a018976f6a9588fe7bc8928eefb8854ff4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:37:3a:19:42:99:92:40:62:d6:53:a0:a9:
                    47:55:cf:8f:da:c3:05:e4:76:94:01:55:c0:80:ad:
                    69:da:48:f5:d0:cf:67:5f:2c:6f:95:e9:90:1d:3b:
                    3c:c5:11:87:7a:7a:a7:08:da:8e:2d:9f:1b:8c:3d:
                    45:fe:8f:21:02:84:d6:33:31:cb:ed:85:2c:e4:7e:
                    27:06:e6:a3:b8:0e:b1:f2:01:23:c1:6f:c1:d1:ab:
                    5a:da:02:6b:72:12:1c:38:0d:8d:af:c0:5e:e7:80:
                    12:50:57:38:a8:88:bb:5e:12:6e:e9:79:2b:a3:65:
                    b0:29:81:61:55:35:d3:25:c0:fd:0a:e2:a9:7f:32:
                    6e:d5:e0:cd:8f:1b:e2:8d:45:bd:29:a9:19:79:27:
                    c4:a1:56:17:b1:f5:8b:1c:1c:c0:bb:5e:e2:9d:9c:
                    57:c5:05:f3:2a:51:39:fb:36:13:d9:79:1c:a1:68:
                    58:1d:8e:02:b1:51:7d:76:a5:ce:a3:8b:ce:13:58:
                    cc:1f:81:60:37:ab:e9:f9:9c:f9:8f:30:0c:df:3d:
                    18:4f:0d:da:a7:c8:19:3c:43:d8:2b:71:ec:eb:42:
                    cd:25:59:57:d4:13:38:12:74:71:e1:56:ad:1c:20:
                    8e:b4:78:f5:f3:ab:29:bd:2e:7d:e2:08:6e:eb:d1:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:6A:01:89:76:F6:A9:58:8F:E7:BC:89:28:EE:FB:88:54:FF:4C
            X509v3 Authority Key Identifier:
                keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e2:c8:29:3f:95:f2:88:ad:3c:49:07:13:46:11:34:05:72:
         f3:38:c0:ee:c8:7a:67:94:f5:5d:48:90:d3:ed:61:ef:08:18:
         73:b8:7b:22:7a:3d:78:21:74:25:41:95:f5:fe:84:5c:2a:ac:
         bb:0e:b8:52:c2:06:85:d4:d0:f8:d4:88:af:b4:4b:7e:b9:20:
         bb:1f:d8:0a:15:31:5a:10:e2:1e:ba:f0:56:fe:f2:9f:a1:52:
         e7:94:f1:ce:a1:b6:a9:e6:a9:b0:05:de:89:57:0c:5f:83:3a:
         48:e1:3b:3c:43:ca:e1:ba:11:d4:ec:46:87:af:c4:44:bd:20:
         58:97:5f:69:a8:09:5c:b7:73:25:cc:aa:29:6a:ba:5d:d6:e2:
         9b:4d:6d:b6:e7:32:a4:fc:18:46:eb:1a:4e:82:5b:87:61:3a:
         62:5d:42:c5:e6:14:23:53:e3:fe:2d:85:64:26:d0:b5:87:6a:
         ba:d1:6a:56:97:d6:31:36:85:84:2b:35:3a:95:99:de:6b:79:
         83:e7:ac:38:e7:e4:83:72:15:fa:94:47:96:b0:27:74:c3:fd:
         95:3a:16:74:69:42:a8:c1:e7:7b:61:66:f4:ec:3f:5e:41:63:
         ff:70:1e:9e:c7:83:77:d9:e5:af:d1:c8:35:c5:51:ea:b1:4c:
         28:df:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:49 2025 by rpki-client