Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File:                     xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier:          ebnkb1uadBB2Vf5rtxP+wZq1vyMc8qRQGX16qqRoZ5o=
Subject key identifier:   4D:1E:F7:27:15:43:A3:D5:36:29:8F:E3:00:14:F7:A3:84:34:5F:7E
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer:       /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial:       0198D8BCDDFC5429B9077C78C2EC1EE8ADE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number:          0252
Signing time:             Sat 23 Aug 2025 21:01:52 +0000
Manifest this update:     Sat 23 Aug 2025 21:01:52 +0000
Manifest next update:     Sun 24 Aug 2025 21:01:52 +0000
Files and hashes:         1: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: FoqaRu1Embo3wJO8gQbtRKoVD9jvo2ifJhfz2byXLOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:bc:dd:fc:54:29:b9:07:7c:78:c2:ec:1e:e8:ad:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
        Validity
            Not Before: Aug 23 21:01:52 2025 GMT
            Not After : Aug 24 21:01:52 2025 GMT
        Subject: CN=4d1ef7271543a3d536298fe30014f7a384345f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:a9:48:ce:53:6f:3b:03:82:8c:9d:b8:f0:
                    23:84:46:ca:9e:59:86:a3:49:a3:c4:7a:7c:b8:71:
                    a2:2c:91:8b:47:ac:7b:7b:ff:fd:00:4e:ad:6a:f9:
                    7f:f1:ee:74:5f:89:b2:5e:ab:40:0b:40:84:d2:19:
                    96:b6:fd:95:e6:98:2c:d1:7a:27:6f:d2:c5:8d:7c:
                    1e:05:93:c1:78:b7:b6:4c:40:2c:aa:54:da:20:3c:
                    cd:c5:00:18:00:2c:29:32:d8:ec:a2:7c:55:49:f6:
                    b7:35:83:2a:bb:c7:1b:af:50:cc:86:6e:b3:15:b8:
                    47:f0:f8:ec:f7:ed:78:e0:81:64:6b:2e:6c:82:37:
                    88:d8:02:a0:37:8e:0b:35:a9:a9:2a:22:0b:07:e8:
                    0e:75:e8:ca:f0:43:e1:95:c5:99:8d:7d:a0:d1:42:
                    1e:95:e1:6c:a1:8c:31:ce:e0:5f:95:03:f0:0d:b2:
                    b2:1d:7a:ed:14:be:51:7e:57:2b:6e:e4:eb:c2:a3:
                    fe:a5:b3:f1:c8:d7:49:7f:63:a9:dd:b6:ec:65:44:
                    af:34:f3:9d:30:9b:15:37:8e:f9:a8:6d:ff:62:55:
                    70:d8:21:e5:0f:66:73:09:63:97:ae:75:9a:ef:10:
                    02:1c:b3:b6:79:a1:c3:52:d6:52:91:f7:7e:2d:22:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1E:F7:27:15:43:A3:D5:36:29:8F:E3:00:14:F7:A3:84:34:5F:7E
            X509v3 Authority Key Identifier:
                keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:0f:52:e0:0f:38:3c:10:41:19:8e:04:7f:a1:ff:ef:96:
         d6:55:1d:5e:ab:58:d5:41:6f:b8:90:96:fe:a5:45:9b:25:bb:
         67:57:30:0f:0e:92:b6:48:a5:5d:b6:bc:ef:01:a8:33:55:12:
         d2:30:d0:97:0e:1c:fa:f8:0f:f3:55:88:28:5b:22:a3:f2:46:
         7c:e0:00:42:36:ea:0d:50:2b:e7:9b:96:43:a1:15:f5:8b:3f:
         21:c6:aa:dc:eb:08:da:8b:40:99:a9:5c:55:72:4f:d6:c3:5a:
         22:07:21:0c:3d:3c:3a:1c:6b:ea:e1:0e:32:fc:c4:54:b2:dc:
         6a:e0:52:1f:64:76:96:90:bb:4f:21:16:6c:d1:67:10:aa:4a:
         16:a6:d4:d6:75:24:76:3d:46:fa:83:e4:5a:a6:b2:8f:78:08:
         00:a9:2b:1d:1a:24:a1:a0:07:2a:c7:6b:e0:00:b3:7e:00:73:
         48:30:8a:cd:7a:81:d0:12:05:07:c5:72:a8:e8:d0:88:15:b8:
         9c:b1:57:9c:8d:0f:57:e4:1c:f4:d1:f9:09:87:92:c2:1c:28:
         97:e0:31:a7:22:ad:19:a6:4d:5c:33:a5:86:45:66:ba:f0:41:
         87:61:1c:de:f4:52:4c:54:b7:73:84:e6:73:20:7e:62:66:28:
         1f:69:40:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:34 2025 by rpki-client