Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File:                     fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier:          jiUYasQSFjBYKfSAs7S8QHBoVtrdQz0qdWyL2ypv/fM=
Subject key identifier:   D6:0C:E8:3C:AB:0B:88:F0:68:FC:88:7C:81:A5:FA:AA:FF:55:81:CA
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer:       /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial:       0198D4E0753E8E72813B6FEEA40568459BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number:          0D46
Signing time:             Sat 23 Aug 2025 03:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:16 +0000
Files and hashes:         1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: i6YtNxFQ66NPfo1HtnWH3DmT0+HuGP80TycYkWSNICc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:75:3e:8e:72:81:3b:6f:ee:a4:05:68:45:9b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
        Validity
            Not Before: Aug 23 03:02:16 2025 GMT
            Not After : Aug 24 03:02:16 2025 GMT
        Subject: CN=d60ce83cab0b88f068fc887c81a5faaaff5581ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:2f:a2:b2:5b:6c:0a:61:6f:f7:ad:19:45:
                    a1:e2:a2:ea:f6:10:8b:0a:e8:f5:bf:31:db:a0:67:
                    c8:e8:14:92:3c:6e:1a:ca:67:9b:9f:fa:4e:4e:8b:
                    3a:4e:49:32:82:c4:55:3c:63:74:2d:f5:2f:8c:7e:
                    92:1b:02:cd:2d:87:78:82:a5:ec:49:10:1a:a8:97:
                    c3:3c:a7:81:c3:f1:d9:3e:d9:ad:a8:1e:95:bd:71:
                    2c:ea:72:4a:9b:a9:e9:18:79:8d:ad:1a:69:85:80:
                    0b:f6:b3:c0:59:44:27:f9:2a:c0:69:c3:02:66:f7:
                    54:32:ab:0d:c2:b9:dc:3f:09:c8:ed:f8:70:bf:e3:
                    d5:90:fc:99:61:2f:87:1a:c1:b7:83:d4:78:4f:ad:
                    68:88:b8:49:6b:a3:6b:df:f5:ef:56:bc:11:58:42:
                    82:c0:b7:9c:9e:f6:2b:d4:ea:b3:3a:7a:7c:a0:93:
                    96:b3:c4:50:09:2d:4f:5b:2c:10:0b:14:0c:d8:5c:
                    75:0f:84:9b:15:d8:04:c1:0b:8e:9e:e8:0b:f3:c2:
                    af:76:ef:a4:9f:21:80:76:ee:ee:e9:3b:a9:9a:c4:
                    28:1e:a7:31:04:cd:a8:a4:84:ba:ab:de:df:d6:55:
                    46:9a:47:68:26:71:87:fc:7b:86:53:3f:94:f7:42:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:E8:3C:AB:0B:88:F0:68:FC:88:7C:81:A5:FA:AA:FF:55:81:CA
            X509v3 Authority Key Identifier:
                keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:52:cb:da:5c:83:56:35:ef:1e:f1:64:46:5d:9c:86:3c:f6:
         49:3e:ea:eb:7f:22:c2:4e:a7:35:7e:36:7e:e4:4a:cd:d0:b5:
         a5:17:e4:3f:eb:92:0c:c3:e9:af:7d:71:94:c5:64:55:ba:4c:
         47:dd:2f:1c:84:7c:96:41:49:f2:e4:99:28:64:fb:a7:20:2d:
         57:80:78:23:86:d1:3e:c7:cb:53:c9:2e:0c:14:6d:ed:8d:26:
         60:d0:2d:2f:a2:b7:7a:7e:38:87:a5:08:d3:12:e9:b4:fe:92:
         d7:5c:e5:9e:b7:af:79:75:7a:81:09:37:48:a3:8d:7a:5e:0f:
         ad:2c:cf:b5:b4:67:1e:27:83:b4:5d:4c:8c:f5:b2:f8:9b:46:
         e1:81:0c:6f:b7:7f:8b:34:de:9b:7a:61:a4:93:d3:45:7f:f5:
         86:9b:c2:d6:04:b5:c5:2e:3e:93:ec:fc:0f:b7:4f:09:e2:f2:
         fe:3f:7e:71:44:60:83:70:af:c6:8b:40:51:97:bc:f5:89:54:
         87:4c:2b:ec:4b:fa:9c:94:8a:c6:d0:d0:0f:5d:e4:46:6e:7e:
         4e:f6:99:6b:80:4c:e8:14:8f:00:c1:50:d5:17:39:11:f8:a9:
         46:a6:ad:fa:2b:2a:b5:60:3d:9b:af:db:af:c3:ad:ee:36:c0:
         98:ac:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:38 2025 by rpki-client