Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          iYAT/mjVmZBznAsyByz2jnunl+aQmWZ4Nwdxlmf6oyA=
Subject key identifier:   CE:29:C0:08:D6:0D:3B:58:38:39:EC:90:FD:E6:AD:92:D7:13:F7:50
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       0198D66056A20D3D68D14A7F2916D8481F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          0751
Signing time:             Sat 23 Aug 2025 10:01:34 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:34 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:34 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: kvsLtI90fJza0BeNfnGAcntzqYuvCU6xPPITQLiFvUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:56:a2:0d:3d:68:d1:4a:7f:29:16:d8:48:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: Aug 23 10:01:34 2025 GMT
            Not After : Aug 24 10:01:34 2025 GMT
        Subject: CN=ce29c008d60d3b583839ec90fde6ad92d713f750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:0f:02:bb:32:f8:17:76:a7:9c:0c:97:08:
                    62:ec:42:ab:30:5b:c1:d6:bd:d3:af:ac:00:a4:0e:
                    b4:6b:f3:42:02:c8:75:74:98:fd:7d:b7:86:eb:64:
                    c9:52:32:ec:1c:8e:f5:d8:fb:1e:74:99:8a:04:79:
                    4c:b1:fd:55:4c:37:f5:be:d9:59:0a:6b:a6:a1:31:
                    99:8d:64:d1:32:8b:90:f2:43:7a:45:e8:19:69:bd:
                    98:02:54:98:3d:cc:ae:47:f7:28:6a:f0:1f:f6:4b:
                    7a:c2:e0:3b:c9:aa:26:69:5b:f1:c4:6c:6e:b7:42:
                    df:6a:9e:6f:e0:52:e5:e6:40:61:4c:41:90:7b:ec:
                    5c:9e:b9:0a:1e:a6:84:c6:d7:a6:13:cb:49:34:f1:
                    53:28:0b:d6:89:31:a1:b7:ea:f4:c1:c9:51:d8:f6:
                    52:c2:27:54:d9:27:ec:65:f2:40:bc:65:04:93:0c:
                    45:82:b9:e4:c6:46:7b:27:43:1c:39:73:3f:e1:fb:
                    2a:4a:d3:2b:1e:86:53:ff:8b:a5:e5:10:eb:80:bf:
                    81:15:8e:89:63:05:8e:41:c9:c1:a1:78:d7:24:aa:
                    5b:c7:2b:9d:6d:5d:52:2e:2d:3c:50:6c:bc:a8:ce:
                    b0:ab:4b:77:9c:d1:aa:a1:e0:15:d9:97:1c:7b:2c:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:29:C0:08:D6:0D:3B:58:38:39:EC:90:FD:E6:AD:92:D7:13:F7:50
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:16:4a:7f:d1:e2:0d:99:1a:ad:5d:23:d0:f8:66:64:06:16:
         7c:ad:19:fa:92:d3:a6:81:bd:87:33:b5:34:ad:e5:8a:cd:35:
         52:b5:6b:ff:cd:d9:0b:66:55:e8:00:30:cc:68:1b:07:f4:8b:
         69:4a:e6:42:0a:1a:ec:e3:44:4f:8c:48:f6:62:b5:77:e2:bc:
         7d:bb:82:5c:0f:1b:aa:89:e2:aa:f6:bc:9a:e9:12:b0:19:b5:
         af:ab:48:8a:d4:a8:61:58:b4:73:fc:e7:2d:40:13:8c:d7:05:
         13:e6:7f:38:4f:99:55:17:a7:a1:a1:fd:46:31:9c:47:91:03:
         ff:fe:64:f8:77:86:d0:80:c5:6e:d2:72:8c:38:b0:69:e8:0f:
         0b:65:c3:35:93:e1:8a:db:69:c1:3f:ad:ed:d4:51:2d:72:97:
         45:3d:3e:1c:4a:3c:d9:13:94:a4:33:56:1d:34:df:86:15:4e:
         42:9c:1f:a4:7e:ef:df:80:76:b9:9a:3f:29:de:fc:b6:b9:58:
         43:7e:7e:bb:95:c6:5d:65:c5:a7:3a:93:58:51:ec:70:61:ed:
         95:1c:36:1b:2d:61:71:f6:15:ce:13:5c:4a:0d:a6:b5:d8:d7:
         96:02:84:93:1d:09:35:ee:43:0f:c9:f0:45:ec:38:3b:fb:d8:
         ba:27:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:19 2025 by rpki-client