Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File:                     gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier:          fKFyK+3yrVqsXKOKBL+xeeo1nQoyATYo4/6RP2sX28U=
Subject key identifier:   1D:0C:B5:86:AF:0B:38:97:4C:85:97:F1:64:96:C4:34:2C:33:C3:22
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer:       /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial:       0198D6601D1898A11D822155F8CAB5CE6461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:01:19 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:19 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:19 +0000
Files and hashes:         1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: nJIrrkSXKVZ2WziBiF6Ge8ImukJAvkazIXLh76aYvX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:1d:18:98:a1:1d:82:21:55:f8:ca:b5:ce:64:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81689572b200ba4879381c8574274265592a14ab
        Validity
            Not Before: Aug 23 10:01:19 2025 GMT
            Not After : Aug 24 10:01:19 2025 GMT
        Subject: CN=1d0cb586af0b38974c8597f16496c4342c33c322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:bc:06:43:74:d7:1b:0b:5f:57:e4:ec:74:
                    5f:28:55:49:92:1a:ba:4c:b1:2d:2d:e4:ca:0e:c1:
                    9c:37:da:33:b2:07:ac:a0:51:07:c5:57:90:76:f6:
                    8a:46:43:e1:30:95:4c:e9:c6:72:20:47:db:5d:a6:
                    68:96:33:51:38:ad:61:73:ba:3f:61:03:e8:89:23:
                    37:f7:be:96:e2:2b:84:1f:64:ab:13:6a:47:83:b4:
                    ae:1b:01:18:13:f2:3d:d4:bd:00:6f:43:99:26:00:
                    b3:ff:22:e6:75:4d:7c:a0:2c:87:79:6f:6f:02:c8:
                    00:a2:7e:de:f3:ed:1d:6a:c0:27:80:89:62:7e:f7:
                    23:80:5e:9e:66:62:10:3a:fd:9f:e0:0c:6a:af:2d:
                    32:af:bb:43:3f:f4:b7:2e:65:f8:82:b3:2d:75:44:
                    c7:40:9f:19:ba:43:76:65:5c:ac:62:96:07:26:8b:
                    91:42:7f:c2:41:0d:55:a8:5f:ca:4c:d0:4b:37:01:
                    1c:82:fe:3b:15:66:96:27:5d:5a:7f:c5:5b:65:30:
                    fe:35:93:60:c7:1b:b1:c8:24:8c:d4:5c:48:26:92:
                    cc:b1:1b:83:6f:d3:46:25:12:a9:af:53:44:d3:70:
                    21:a3:83:d0:f0:4b:a9:2d:77:01:62:2e:fd:a0:da:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:B5:86:AF:0B:38:97:4C:85:97:F1:64:96:C4:34:2C:33:C3:22
            X509v3 Authority Key Identifier:
                keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:93:76:f0:33:1f:98:b0:aa:76:49:b2:ff:6a:86:94:18:de:
         7a:41:bf:a9:6a:6e:67:10:28:e6:e3:f3:3e:7c:ca:3c:13:b9:
         41:0d:36:34:f0:f8:6a:c8:92:6d:10:78:70:3e:d0:ff:b5:0f:
         bb:a4:f5:8b:a0:00:ad:d0:ac:93:e8:64:ca:59:92:db:b5:e8:
         b3:c6:51:00:bb:e4:70:6e:04:53:fc:fb:88:d4:0e:ac:32:df:
         4b:b4:3b:16:0d:58:3e:02:bc:f9:56:68:e1:86:7c:14:ab:11:
         e8:6a:c5:cf:d7:2c:f0:09:b7:d7:52:a9:8b:fe:b2:51:23:b3:
         84:13:9d:43:89:4a:da:da:de:62:1a:70:b6:e6:e5:22:49:4e:
         0e:1f:39:4a:57:0a:af:6f:e0:76:4a:15:82:3a:76:8c:0e:d1:
         ad:ee:6c:02:62:1a:20:1d:b6:8a:87:a7:81:38:48:cf:1e:57:
         81:89:29:19:d2:8b:bc:7d:6a:fd:7e:95:f0:29:8f:07:0d:a4:
         bb:3f:04:36:31:06:81:23:7b:24:38:3c:3b:91:9c:3e:d7:ee:
         d4:3b:9e:35:d9:a1:00:f0:da:12:da:d2:02:b7:1a:a1:86:7c:
         53:13:4a:69:78:a4:68:3e:f8:76:f5:d8:01:a3:b0:3c:58:78:
         39:ef:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:24 2025 by rpki-client