Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File:                     K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier:          kABjy+/vMlDMP2bwy4viRbDok6LyogrQ6465uwfOM98=
Subject key identifier:   B0:B3:3B:96:B0:85:4D:0D:C7:3D:9D:2B:41:24:A8:F9:DC:6F:B7:C9
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer:       /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial:       0198D84FC77AEB67EF3B0BC79955A2A143AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number:          0764
Signing time:             Sat 23 Aug 2025 19:02:43 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:43 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:43 +0000
Files and hashes:         1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: FW7hO3aZvJ0WB0ZhSPUYKbK3UglBGC589aA7HIHILQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:c7:7a:eb:67:ef:3b:0b:c7:99:55:a2:a1:43:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
        Validity
            Not Before: Aug 23 19:02:43 2025 GMT
            Not After : Aug 24 19:02:43 2025 GMT
        Subject: CN=b0b33b96b0854d0dc73d9d2b4124a8f9dc6fb7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:f0:09:0f:49:05:03:5a:ee:f7:59:6f:e4:
                    cb:1f:e4:cb:2b:61:6a:a6:74:a9:7d:82:ef:b7:16:
                    4f:17:a6:8f:67:e1:2c:7b:3b:b9:26:1d:02:d7:c6:
                    63:30:93:31:3b:25:9c:53:86:c3:ee:51:5d:ed:47:
                    8f:12:5f:b1:7a:e2:69:35:52:79:23:b8:5d:76:12:
                    a3:57:73:57:49:29:59:d4:f0:8c:e2:7c:38:13:2b:
                    45:94:e7:97:0d:5f:02:78:87:55:45:5a:8e:a7:e4:
                    cb:ab:40:66:46:b0:fa:40:47:07:dc:21:b1:b1:5e:
                    94:bb:7e:4b:ec:e6:44:f2:7d:d8:eb:89:d8:af:b2:
                    dc:b9:18:fd:dc:7d:ec:fd:d8:31:16:8d:72:81:78:
                    98:8c:4d:d6:e0:89:0b:3b:64:de:c7:51:05:87:08:
                    44:68:89:6b:89:c6:9b:cb:54:ff:2c:68:81:13:f1:
                    62:d9:dd:2b:c3:1a:09:76:6d:32:91:32:1b:54:77:
                    74:4f:1c:61:f4:db:a2:8f:f9:2c:03:0d:7d:0a:71:
                    99:d0:a3:fd:c3:24:bd:ef:4e:a6:8b:49:35:90:66:
                    ae:fd:b7:a6:b5:28:4f:96:b8:82:c5:c2:b8:cc:ca:
                    fb:48:49:34:f2:a3:72:70:cf:ed:49:29:2f:11:7b:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B3:3B:96:B0:85:4D:0D:C7:3D:9D:2B:41:24:A8:F9:DC:6F:B7:C9
            X509v3 Authority Key Identifier:
                keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a0:eb:b8:85:28:60:09:66:8f:d1:a9:1f:b9:17:26:50:64:
         11:65:d3:47:10:a4:6f:cc:5d:c2:4e:88:ca:4c:d0:c0:68:09:
         6e:dd:74:63:b7:bf:bb:83:9a:6d:4d:d6:94:84:b0:9f:12:99:
         0a:bb:b7:13:8d:c2:04:01:f9:77:77:7a:78:00:a4:05:02:3e:
         56:f3:31:5d:08:e0:fc:22:ec:76:a7:e9:ee:2d:d3:20:31:f1:
         99:9d:ba:5b:1f:47:b0:e8:5e:e2:ee:75:3b:44:cd:1c:30:68:
         e4:d0:74:8a:da:0a:12:25:6b:97:7e:2b:ac:3b:71:51:25:59:
         60:91:f0:c3:06:51:0e:70:f3:c7:fd:5e:6a:a8:9d:b3:12:4a:
         46:eb:8e:b9:82:4c:0b:be:e2:a7:7c:81:67:44:f5:a8:e2:83:
         18:72:24:d7:00:27:74:80:ec:56:d5:5a:3e:22:fb:c1:e7:74:
         c3:8c:68:de:a0:4d:12:cc:f8:14:e5:1c:87:a7:cd:b7:96:6c:
         7e:97:27:5c:c5:39:ea:4b:9d:95:bb:30:68:cf:1a:3e:6d:58:
         c5:22:78:a8:6a:71:df:4a:73:d5:e0:22:6b:2e:60:a9:84:82:
         42:21:1c:c6:f6:41:c5:f3:b1:5c:67:48:d9:1c:b0:cd:ad:e2:
         42:c2:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:06 2025 by rpki-client