Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
File:                     AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json)
Hash identifier:          a7/uaiCwGdTV6/UUcNGCIbEbLOTbp3sj4U8oGlAumdg=
Subject key identifier:   44:4C:CC:CF:6B:95:2C:D5:3C:B9:45:1E:B4:2E:5A:63:20:9F:F8:13
Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
Certificate issuer:       /CN=008b280588054ed8c446e27b49cac45588a9e980
Certificate serial:       0197B6A1080FC76F37147CDBDA88FD18DBE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
Manifest number:          1071
Signing time:             Sat 28 Jun 2025 13:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:36 +0000
Files and hashes:         1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: Mkm0fV2uJgGzZXzjEaOpKtI1phVTx8+SGiVFJU/cFyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:08:0f:c7:6f:37:14:7c:db:da:88:fd:18:db:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980
        Validity
            Not Before: Jun 28 13:01:36 2025 GMT
            Not After : Jun 29 13:01:36 2025 GMT
        Subject: CN=444ccccf6b952cd53cb9451eb42e5a63209ff813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:23:50:99:d8:e9:dd:e4:36:5d:86:3b:24:
                    9d:5b:81:22:cb:73:5d:5b:06:a4:c5:56:58:b3:65:
                    9a:53:62:4c:e4:f2:e2:f1:eb:d8:a1:39:82:6a:4b:
                    28:ee:6c:07:f7:a8:a1:72:4f:4f:f0:e8:28:19:3d:
                    9c:8b:e5:ca:99:e3:dc:b4:61:0a:bc:bb:fb:67:05:
                    7a:3a:00:c0:23:3f:94:b0:14:eb:6c:f8:a3:00:80:
                    ee:20:11:06:48:46:01:2f:4c:33:b3:71:3e:54:df:
                    3d:f2:9a:04:cd:bf:72:29:64:14:72:79:e5:ad:50:
                    3f:00:42:d3:be:bf:83:f2:85:5c:6c:ab:72:b3:04:
                    7a:04:b5:f7:ed:40:ed:aa:06:48:56:b5:3f:27:2f:
                    72:20:ff:19:26:13:14:93:f1:72:76:10:92:fd:28:
                    19:c5:7a:fc:ab:1e:c5:c5:b1:71:bc:32:21:d7:c2:
                    2b:44:fd:f3:8c:2d:d0:39:25:4c:b0:47:52:02:57:
                    a7:4d:62:c1:ba:57:27:fd:c2:2b:f7:eb:3b:07:95:
                    6e:8f:c8:3c:11:7b:92:13:ec:b1:11:da:a8:ef:8c:
                    67:e7:96:95:63:eb:14:fa:ce:61:c1:26:03:f0:87:
                    7d:80:e0:5d:24:ee:eb:ff:ba:b1:e3:eb:db:0e:8d:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4C:CC:CF:6B:95:2C:D5:3C:B9:45:1E:B4:2E:5A:63:20:9F:F8:13
            X509v3 Authority Key Identifier:
                keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7d:a3:88:28:93:4a:d9:df:52:64:f4:29:15:b8:48:c6:fc:
         8f:8b:4d:a1:73:d1:ee:81:d7:4b:b4:7d:fb:16:0a:a8:27:5d:
         11:c1:3e:a2:45:d2:a4:25:75:71:27:ef:79:0a:0c:c6:04:41:
         5a:9f:79:ee:20:1a:a9:6b:c3:5f:6a:d1:4f:15:ef:17:73:d2:
         1c:a4:2f:24:4c:bc:ea:27:a8:58:33:ca:fe:37:6e:3c:b9:63:
         30:f4:80:07:fc:8d:c6:ab:50:6c:c4:0c:f9:ad:62:74:c1:7d:
         de:a6:21:37:54:8a:50:47:9b:71:ff:ac:b8:d1:f0:cf:f6:e1:
         e4:9e:e6:82:4f:ce:cc:29:36:28:7c:c7:2e:50:27:8e:0f:63:
         f7:7e:35:78:92:60:f2:5e:4f:ed:11:fe:82:f5:39:22:4b:24:
         3f:22:4f:59:71:64:1d:94:40:cc:07:d7:21:33:37:7e:e8:3d:
         a7:5c:d0:a5:7d:1b:3c:d2:8a:bf:76:e5:0c:51:35:23:f7:bf:
         98:68:25:98:4b:d2:a5:13:1c:bf:ec:8a:64:a9:5e:8f:7c:1a:
         33:7e:cc:2d:f3:6b:21:bc:ff:9e:6b:eb:8b:8c:b4:17:61:a2:
         84:bc:5e:c1:f6:14:c0:17:2b:44:f3:dd:df:d4:39:26:41:21:
         ad:aa:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:45 2025 by rpki-client