Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File:                     AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier:          f0Z2OVENQhltF7xNF7OQjQm74xN2Ns3+1hR49+/2zOE=
Subject key identifier:   99:62:21:2B:8E:33:BC:3E:86:FA:28:AF:26:03:0C:FE:5C:31:D8:F3
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer:       /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial:       0198D65F5F391FE6136E58F810E64319BF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number:          07C5
Signing time:             Sat 23 Aug 2025 10:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:31 +0000
Files and hashes:         1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: 0QpJaytPpM3DFUZzQOJJX12x1Z3DHYhZyefC/U0E1oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:5f:39:1f:e6:13:6e:58:f8:10:e6:43:19:bf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
        Validity
            Not Before: Aug 23 10:00:31 2025 GMT
            Not After : Aug 24 10:00:31 2025 GMT
        Subject: CN=9962212b8e33bc3e86fa28af26030cfe5c31d8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:5d:31:eb:47:9f:ea:e9:5c:1b:14:fb:3e:
                    97:37:d5:d3:57:0e:28:e8:49:f4:9b:5e:51:68:94:
                    0f:4c:b4:c8:19:ab:30:f4:47:28:fa:ae:4a:8b:78:
                    03:7c:a6:05:1d:fe:49:2f:9b:b3:84:0a:c5:09:d0:
                    ae:7f:a6:f6:90:a2:db:9a:1e:1e:d2:8a:2c:af:41:
                    f9:0c:a9:27:ce:06:b5:4d:51:8d:e9:dd:8d:a3:63:
                    34:b0:4d:9e:67:7b:fb:43:00:e5:22:31:28:61:39:
                    e1:c7:9d:27:7f:c2:ec:ac:04:b7:cd:f2:1a:85:1f:
                    09:aa:5e:7d:56:ae:fd:55:ec:01:03:8d:ff:37:b7:
                    4b:0c:37:38:3c:af:e6:d1:53:8a:67:9d:7a:2d:69:
                    d9:f8:b2:1b:80:ba:8d:f3:a7:92:48:05:89:a8:42:
                    58:2f:c8:dc:24:b1:32:0c:15:37:ed:71:02:c5:88:
                    b7:82:ef:98:83:0c:61:f0:d6:72:b9:aa:0c:3e:7d:
                    be:04:0c:65:b0:b0:c8:f9:1c:f9:55:c9:7e:1d:43:
                    d7:80:ab:d1:f5:75:53:42:f6:bd:cb:32:12:50:9a:
                    c4:53:e4:af:70:94:3e:03:21:6b:13:6a:64:a9:26:
                    a0:8d:e8:54:01:b8:71:c9:cd:84:66:3d:e8:96:9a:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:21:2B:8E:33:BC:3E:86:FA:28:AF:26:03:0C:FE:5C:31:D8:F3
            X509v3 Authority Key Identifier:
                keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:f2:b8:89:98:91:37:f7:82:21:e3:52:eb:37:e1:50:ad:
         71:bc:87:10:15:8a:f4:c7:f6:1c:99:34:f6:cb:32:b7:61:3c:
         d9:d6:5a:e9:74:86:bd:4a:7f:78:07:73:f5:78:44:00:7b:84:
         e6:fd:df:b3:66:c0:0a:dd:5d:bc:96:71:68:5f:d3:1f:8d:a1:
         3b:04:51:a3:64:4d:43:d3:c6:60:16:09:1b:67:88:7e:37:bb:
         da:8f:03:7e:e0:cc:f9:df:9d:2e:dc:0a:fe:99:97:cc:7c:48:
         28:9a:10:30:a5:64:13:ea:13:f7:fe:d1:a4:ca:65:b1:a7:b6:
         17:2a:c3:34:cc:de:ae:1f:fb:5f:1b:a5:b3:7b:4a:cf:f9:17:
         76:83:f7:fe:16:ac:78:a6:32:03:67:85:6b:17:e9:d7:c3:4d:
         06:a3:09:3f:35:83:80:a3:71:80:96:02:2c:4a:90:65:a3:c0:
         bc:6e:88:3e:63:33:6e:e5:6c:5a:43:40:9f:68:40:1f:59:d3:
         d2:2d:be:45:64:a1:c9:b8:55:ee:8f:9d:e8:fa:fc:3b:23:be:
         0e:fe:92:a8:92:c6:d4:73:4a:08:52:a1:7c:9c:60:23:f6:5e:
         ce:d6:69:0c:6c:af:3f:1c:85:f3:b6:12:13:8c:7c:b4:df:56:
         7c:00:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:10 2025 by rpki-client