Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File:                     dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier:          hO7lWx/Lu5j5gMBltX7cepqhUq7xwVHwqb0fpVBOWYw=
Subject key identifier:   79:43:B8:76:D7:E3:DF:79:44:0B:4D:94:CD:80:0B:A0:E8:F9:D7:89
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer:       /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial:       0198D5BC0159965AC9E072CB91480F513533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number:          13EE
Signing time:             Sat 23 Aug 2025 07:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:04 +0000
Files and hashes:         1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: HLGyaSRuX/CPoj0oFM2fQtJn2FQZlL1xN6C0kdcwC0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:01:59:96:5a:c9:e0:72:cb:91:48:0f:51:35:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
        Validity
            Not Before: Aug 23 07:02:04 2025 GMT
            Not After : Aug 24 07:02:04 2025 GMT
        Subject: CN=7943b876d7e3df79440b4d94cd800ba0e8f9d789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:ff:2d:01:a9:0c:81:fd:de:b2:84:96:6e:
                    0a:16:eb:7c:ba:2f:73:40:e3:25:cb:da:32:27:66:
                    f6:66:1c:29:b4:d0:0e:b9:4e:b0:73:88:45:68:ff:
                    06:21:da:87:b0:b9:16:cd:11:17:7f:54:ca:82:b0:
                    a6:c9:d8:ae:6f:1c:12:87:ae:fb:60:c1:02:d3:d3:
                    15:72:76:8a:36:61:87:6b:33:5a:26:cb:c8:b0:bc:
                    68:57:ea:28:5c:2b:d6:27:25:f5:aa:e3:31:47:dd:
                    26:b9:46:cc:ff:76:0c:88:c0:d5:94:19:52:93:ac:
                    f6:61:3f:50:b0:13:4f:b5:e9:1f:6f:b6:ef:c4:c7:
                    9a:22:84:2f:38:4e:9f:18:ff:48:1c:95:9f:7c:08:
                    74:d5:80:97:83:e5:ac:4c:71:c6:f8:4d:9a:e9:3f:
                    93:f2:96:a6:7c:fa:dd:a3:db:a4:c2:3e:0c:a8:37:
                    49:98:40:b4:82:f5:7f:64:b6:a2:b8:3c:c9:1e:a5:
                    e4:f1:8a:5d:97:d2:57:ea:93:e1:82:75:9e:5f:36:
                    3f:04:c2:53:bf:82:77:fc:e1:c3:22:6b:a7:33:4a:
                    db:89:20:ad:28:bb:d1:94:a3:96:91:b7:47:61:8f:
                    6a:54:97:7a:3c:98:74:94:b6:86:9b:aa:19:fc:b3:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:43:B8:76:D7:E3:DF:79:44:0B:4D:94:CD:80:0B:A0:E8:F9:D7:89
            X509v3 Authority Key Identifier:
                keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:f2:db:9c:dd:ad:c1:75:ff:3d:ea:4b:1a:de:c9:f6:87:
         98:c7:f6:21:38:41:b1:56:80:57:3a:8e:72:4a:b8:79:40:a4:
         35:6b:05:56:c4:c2:d1:99:a1:db:92:f6:ce:10:ad:2b:b3:ff:
         86:a7:2b:64:fe:28:0f:6a:85:e3:6e:be:9d:1a:48:91:3b:35:
         f6:fe:02:99:3d:a6:2a:0d:92:81:91:87:09:aa:1b:8b:41:c1:
         7a:55:ab:c9:f2:37:5e:bb:90:dc:b4:ce:02:7b:e3:57:1b:b7:
         a0:29:a0:d8:c3:d6:66:e9:79:1d:2c:e3:cd:44:41:97:ea:8b:
         be:a3:49:7d:e3:1e:8c:fa:ff:5b:72:c9:02:bd:a2:c6:33:aa:
         4a:fa:e0:de:b2:ae:10:f6:bd:31:27:e6:22:f8:03:e9:9d:49:
         70:33:76:75:78:2c:7d:74:54:12:cc:9a:47:1e:b3:4c:eb:0e:
         93:cc:b7:5f:00:43:fe:2b:ec:5f:3e:91:85:77:ef:d1:2e:97:
         d4:13:4a:66:94:35:b0:99:89:5a:48:a1:1f:95:55:aa:aa:e7:
         0a:30:5a:2e:2d:a6:e2:e1:30:e4:cb:61:2e:50:c9:fc:28:1b:
         19:c7:97:d3:b5:d4:f3:0a:a2:54:3e:de:65:a4:f8:b7:79:3f:
         0d:71:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:37 2025 by rpki-client