Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File:                     cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier:          t7lDBASVPbjRq73GiqojoHkrpSbL8XbNPNOLojpggNw=
Subject key identifier:   98:BA:6A:E5:7A:8A:BC:CA:28:19:67:87:9F:DC:27:16:3F:EB:62:61
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer:       /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial:       0197C75D826656768884CA75E859D291BBF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number:          1243
Signing time:             Tue 01 Jul 2025 19:01:23 +0000
Manifest this update:     Tue 01 Jul 2025 19:01:23 +0000
Manifest next update:     Wed 02 Jul 2025 19:01:23 +0000
Files and hashes:         1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: XG5yELXnexC/f/+UYT7pc/ooLn2CyWXLBxcSMhGgqmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:5d:82:66:56:76:88:84:ca:75:e8:59:d2:91:bb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
        Validity
            Not Before: Jul  1 19:01:23 2025 GMT
            Not After : Jul  2 19:01:23 2025 GMT
        Subject: CN=98ba6ae57a8abcca281967879fdc27163feb6261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:81:e3:32:4a:3e:22:da:78:d2:05:09:f9:
                    b2:28:a1:d8:94:ac:89:0d:93:21:c3:8f:f5:56:f8:
                    7d:53:8c:fb:57:5d:cf:b3:d0:16:eb:a2:da:42:1e:
                    fa:d7:fe:3d:cf:19:26:80:83:c2:1d:76:4f:83:5e:
                    b4:d0:b2:15:3e:c4:34:f9:30:c0:2f:31:6e:64:09:
                    a9:73:85:dd:09:9b:80:15:a3:1b:f7:6e:2d:c0:dd:
                    35:77:4c:93:9f:f7:e3:50:b7:3c:c9:84:76:52:8e:
                    00:04:7c:84:65:65:19:42:75:ad:c2:07:93:41:bd:
                    9a:e9:31:d9:61:ee:2b:d8:58:b6:fd:03:fb:37:b6:
                    98:2f:18:4f:f5:12:5f:86:dd:66:29:30:36:1d:0c:
                    6e:a2:70:ea:bd:e1:0b:be:51:e5:58:9b:48:de:f7:
                    d9:45:da:79:6e:78:2f:23:83:9f:bf:7b:3d:42:be:
                    20:02:7c:f0:44:35:09:a7:99:e0:22:0e:e3:4b:83:
                    d3:65:99:91:9b:b0:90:5d:14:6b:a2:71:56:4e:13:
                    64:22:d1:be:28:17:d1:3d:4b:c0:f2:7c:b2:60:fd:
                    b4:f8:96:26:6f:d6:4e:49:a4:90:34:04:dd:b7:61:
                    d0:d6:08:08:fb:bb:58:13:d6:83:62:69:59:7d:3a:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BA:6A:E5:7A:8A:BC:CA:28:19:67:87:9F:DC:27:16:3F:EB:62:61
            X509v3 Authority Key Identifier:
                keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:a5:05:86:ba:76:1a:58:e8:c4:e6:4e:bc:5b:8b:ca:2f:
         0b:49:c7:c1:1f:65:40:89:23:25:9f:81:27:01:f0:bd:53:47:
         8d:95:f8:cd:cc:30:dd:a5:b7:1f:b2:2f:b6:0d:3f:ae:cc:05:
         5f:74:35:4e:e3:f2:ac:fa:3f:16:11:cf:6d:1b:76:7d:c6:bb:
         4d:34:3d:7b:ff:b8:cb:f9:68:6e:2e:b9:2b:8e:99:13:9e:af:
         a1:08:82:73:d5:3d:bb:52:95:5f:ee:14:39:e8:ab:aa:a2:49:
         72:35:f0:70:ed:73:81:60:57:5a:18:aa:fa:62:c4:d0:9f:2a:
         4b:e6:c4:a1:5b:c8:7c:3c:4c:60:02:20:8b:7c:33:4c:cd:37:
         88:21:c3:61:ad:44:4a:ea:c8:ee:95:4d:6c:1d:bf:69:55:70:
         1a:37:31:e8:d7:1e:63:31:b0:3c:df:47:0f:69:1f:ce:bd:12:
         df:60:38:84:b2:cf:66:f6:d4:21:27:f4:c4:92:88:57:4a:22:
         f8:c2:0d:52:83:9e:ea:90:34:cf:7b:e8:a1:d5:c1:9d:27:be:
         30:e7:11:8f:ff:ad:8d:13:70:73:72:a0:56:74:44:12:b3:55:
         a4:05:bb:97:69:a1:7f:e9:47:be:c3:9c:1e:99:52:3d:3c:87:
         86:5b:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:05:04 2025 by rpki-client