Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File:                     kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier:          oW0YrMTXN8wV6xj0X0eeKzY2pEW9Djedu7If0ZrIwFE=
Subject key identifier:   75:0D:98:53:65:AA:5C:B5:FC:B0:28:9C:93:D3:84:61:89:77:F8:2F
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer:       /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial:       0197C425AF4FA1B7CF4A2509463AF343803B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number:          1167
Signing time:             Tue 01 Jul 2025 04:01:33 +0000
Manifest this update:     Tue 01 Jul 2025 04:01:33 +0000
Manifest next update:     Wed 02 Jul 2025 04:01:33 +0000
Files and hashes:         1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: nHkMU645guYldTM2tHDmzuOQH+UoP4czrsHqklIqT+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:25:af:4f:a1:b7:cf:4a:25:09:46:3a:f3:43:80:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
        Validity
            Not Before: Jul  1 04:01:33 2025 GMT
            Not After : Jul  2 04:01:33 2025 GMT
        Subject: CN=750d985365aa5cb5fcb0289c93d384618977f82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:6e:2a:15:46:05:e7:27:8d:26:a8:4e:1c:
                    5a:42:ca:80:95:98:53:0a:fd:39:8b:9d:ae:6a:fe:
                    a3:be:68:5a:c9:30:96:40:27:98:be:91:ae:65:b0:
                    21:99:8d:29:20:c3:af:b8:8a:bd:ff:44:1c:4c:44:
                    6b:b2:8f:c6:31:b4:c3:ea:ff:38:17:4f:a3:e5:ca:
                    80:af:12:95:2f:fc:05:12:1e:bb:71:e9:a1:22:ae:
                    e2:f5:09:9a:cf:b7:51:d8:1a:94:73:85:d8:b6:49:
                    2f:31:3c:cd:34:01:29:05:2c:9b:17:2a:0e:a3:26:
                    f6:d7:d4:4b:8e:48:9e:4e:4f:c3:d5:4a:99:79:1d:
                    87:5d:c0:cd:0a:d2:3f:28:84:6d:70:85:51:1a:c8:
                    dc:92:6e:f8:81:80:56:6a:e6:f7:16:43:a3:a7:8a:
                    a1:b6:25:76:04:d3:f8:71:07:3c:ef:ec:36:cc:bb:
                    8d:ca:45:52:c6:80:3d:30:61:d6:9f:34:27:7e:a4:
                    81:84:48:a1:1e:50:5d:94:13:35:86:c5:62:a0:20:
                    fc:26:e8:63:73:b6:9b:e9:1b:0d:11:7b:50:fa:b6:
                    17:d4:08:34:7a:ea:75:3c:c3:75:cc:67:f1:e1:4c:
                    a8:7d:b1:7f:e9:0c:08:cc:5c:47:08:19:66:e9:8a:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0D:98:53:65:AA:5C:B5:FC:B0:28:9C:93:D3:84:61:89:77:F8:2F
            X509v3 Authority Key Identifier:
                keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:f6:a6:bb:9d:b7:fa:6a:84:20:d5:a5:37:ad:e8:cc:1f:47:
         80:37:bd:5f:17:4e:70:9c:d8:f0:85:53:89:73:23:59:6c:8b:
         ea:0d:e2:65:84:b3:17:fa:77:ae:13:b5:e5:06:8a:53:9d:f1:
         b9:f3:0a:75:d7:d3:05:ed:cc:68:89:11:ea:ba:4d:67:8e:a0:
         81:48:c3:a2:fd:97:46:2a:ec:8b:2f:9f:bb:66:6d:85:1a:af:
         26:4e:69:ec:82:ef:38:8c:ef:15:8d:e2:54:bc:97:78:d7:e6:
         12:90:b0:44:c9:cc:a7:91:34:85:94:81:b4:04:56:d4:d3:91:
         4b:83:35:03:17:ff:34:a8:99:1c:00:c0:54:8c:7a:94:f3:f3:
         59:47:cd:0b:ec:5e:bc:b3:32:52:08:25:89:dd:51:2f:76:00:
         cc:4a:8d:2a:6f:07:74:16:f0:b3:e3:94:68:9d:5a:66:3f:b5:
         de:bf:c7:35:9c:c3:85:80:a6:d2:f8:1a:11:58:ff:82:cc:9c:
         84:2d:cf:3a:39:93:76:a5:d1:ba:d6:6d:64:aa:2f:1a:7e:cf:
         f3:4f:ce:b8:73:39:d7:60:c0:d9:23:f2:f5:d1:48:b0:e9:80:
         1e:4e:9f:0b:3b:5a:ef:ca:21:25:83:6d:0e:20:1f:c6:6a:b4:
         df:f0:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:34:42 2025 by rpki-client