Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
File:                     bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json)
Hash identifier:          oufPfvbYz0FQcfHaS0UmCEai3NDni+NndZDUN+Pyg2g=
Subject key identifier:   CB:A5:CF:7F:73:4A:B8:99:72:A8:22:6A:B7:84:68:CD:63:D3:5D:4B
Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
Certificate issuer:       /CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Certificate serial:       0198D472D755BBC7733883522FE500CFD239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
Manifest number:          15DA
Signing time:             Sat 23 Aug 2025 01:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:32 +0000
Files and hashes:         1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: jDcnTdigO0uPMm493LVZrimOxNQG/QJsO3p5QLnLQtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:d7:55:bb:c7:73:38:83:52:2f:e5:00:cf:d2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826
        Validity
            Not Before: Aug 23 01:02:32 2025 GMT
            Not After : Aug 24 01:02:32 2025 GMT
        Subject: CN=cba5cf7f734ab89972a8226ab78468cd63d35d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:01:b4:3b:d1:53:17:dd:e7:13:27:ae:8f:
                    38:80:a0:35:02:33:85:f5:11:c0:2b:1f:7a:06:b1:
                    12:86:04:37:66:10:10:98:f9:1b:65:41:8c:49:16:
                    16:c9:6d:a9:1f:bf:0d:db:9a:5f:2e:c6:c1:44:91:
                    3d:78:1e:9a:88:e8:1a:ea:db:6a:b5:57:14:08:f0:
                    7c:d3:e5:36:28:7a:cc:7e:80:7d:1a:eb:45:3c:5e:
                    50:78:fe:8a:a4:77:5f:ac:d9:4c:04:e5:10:a4:5a:
                    6c:71:59:8b:67:59:da:12:8e:ed:71:7e:d0:28:6b:
                    42:e7:24:e7:0c:95:f8:b6:e9:90:e8:93:4e:7e:85:
                    3c:d2:62:56:3c:f3:a7:c9:3d:27:57:4e:33:b6:7c:
                    b7:48:45:1c:2e:8c:b4:21:f7:63:27:81:bf:58:60:
                    b0:76:99:a5:76:45:18:b9:15:e5:6d:32:86:fd:7e:
                    b5:58:77:5e:e3:72:17:3c:4d:34:f3:b3:77:77:fe:
                    7c:37:18:05:d9:67:e3:c7:a8:e9:b9:6b:42:42:82:
                    53:18:ac:44:04:da:5f:6a:5e:4e:8e:d3:c2:80:1e:
                    3b:a0:32:20:2f:92:62:0b:f5:bb:8c:b0:49:cc:40:
                    ce:f3:90:64:8a:a2:c8:61:bb:ed:da:49:4b:57:e3:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A5:CF:7F:73:4A:B8:99:72:A8:22:6A:B7:84:68:CD:63:D3:5D:4B
            X509v3 Authority Key Identifier:
                keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:54:0b:e1:58:65:de:85:be:ed:6a:a6:30:fc:c1:c0:f3:fc:
         65:bb:dc:da:5d:9b:64:d5:68:e5:84:0b:df:fe:cb:cb:f2:eb:
         cb:14:5e:2f:98:8d:67:3c:46:e8:fc:6a:da:e8:90:9e:ab:c1:
         f7:04:57:95:2f:d9:af:d2:c9:b6:5e:65:0c:0e:15:98:93:0c:
         f5:44:54:16:b9:e9:1d:9d:52:94:c3:de:e8:93:4c:f9:78:60:
         0a:1c:a7:e7:df:7c:5d:86:94:9b:ac:db:ab:84:ce:98:db:8e:
         9e:cf:83:0f:af:73:69:e8:10:b5:e0:d3:bb:95:27:60:2e:d4:
         2b:11:16:d0:bc:3a:92:f4:45:98:9b:37:8f:a0:71:23:38:52:
         f6:ed:49:f3:33:af:ea:17:e1:0d:71:22:79:62:7f:a4:37:33:
         29:b1:f3:d1:ad:d9:61:b7:3f:bc:3d:0d:46:c5:c2:33:2c:6c:
         f3:52:11:87:74:71:ab:de:d3:3e:94:39:de:53:e3:23:49:77:
         91:7a:a5:22:d0:79:ea:24:ed:29:dd:39:30:90:08:c6:86:ef:
         71:9b:fd:49:07:95:16:a7:38:7a:d8:72:55:9e:c9:6b:21:2a:
         4f:1c:4b:da:b2:83:dd:9f:fa:68:fd:24:62:92:75:15:b5:bf:
         b0:05:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:17 2025 by rpki-client