Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File:                     dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier:          iFpOJ3n5Bg86ODnHwfeRb4JEYiNC15YejL/KKJ0lbTw=
Subject key identifier:   53:1B:7E:6F:6E:6A:9C:56:1F:66:0C:E4:BC:4E:55:E8:2B:CC:08:05
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer:       /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial:       0198D4E05B3FC5F91ED2E9450973AC91B9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number:          0E20
Signing time:             Sat 23 Aug 2025 03:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:09 +0000
Files and hashes:         1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: OI9nUgQQTJjF4mt4c3eO39rYOJnDyp/Wn1K+e4jN1F4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:5b:3f:c5:f9:1e:d2:e9:45:09:73:ac:91:b9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
        Validity
            Not Before: Aug 23 03:02:09 2025 GMT
            Not After : Aug 24 03:02:09 2025 GMT
        Subject: CN=531b7e6f6e6a9c561f660ce4bc4e55e82bcc0805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:f5:fa:07:1e:4f:9c:09:f2:9e:86:40:19:
                    d5:61:d4:a2:93:8b:9c:ff:47:06:7e:05:fd:d7:70:
                    5b:ce:45:49:4d:6a:c1:28:10:eb:61:89:55:51:42:
                    b1:63:8c:ab:87:0f:53:67:74:be:de:a0:1d:e7:6a:
                    a2:16:dc:b0:7e:b1:7c:0c:1e:9c:58:46:80:7d:bb:
                    53:24:93:aa:b4:cd:9c:a7:c3:17:0d:ab:bf:24:b4:
                    f3:49:e4:de:49:e5:7f:aa:5f:55:41:5e:03:b6:38:
                    d3:29:43:2c:7f:35:89:bd:72:da:f8:28:f7:f5:2c:
                    ab:9d:e5:5d:b1:82:16:ee:d6:33:79:e1:2b:41:29:
                    4a:21:f3:24:83:c3:b8:e2:26:b4:9d:e7:da:2a:ab:
                    71:7b:0c:b2:f8:d7:dd:22:97:ac:bc:5c:cd:f8:02:
                    04:9f:6d:d2:c8:fd:a1:4b:4b:56:8c:ea:59:b2:c9:
                    05:f7:0c:9c:a5:44:e8:3f:e1:4e:17:eb:6e:86:3f:
                    54:17:56:b2:e5:bf:39:48:f8:5b:af:e0:c9:cd:dc:
                    8e:b8:3d:c6:03:5a:a1:76:cc:17:f2:58:a9:1e:b7:
                    e8:88:94:5e:d9:11:ef:44:e5:95:e2:73:e6:52:44:
                    d0:f3:fc:d3:6f:08:8a:27:71:03:8a:9b:0e:1d:93:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1B:7E:6F:6E:6A:9C:56:1F:66:0C:E4:BC:4E:55:E8:2B:CC:08:05
            X509v3 Authority Key Identifier:
                keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:30:31:c7:87:8b:ca:53:29:f2:17:59:8a:e6:3b:fa:81:84:
         bd:8c:fa:2b:d6:01:d7:9c:f0:c7:cb:24:8e:21:28:15:08:b7:
         00:d3:00:67:58:74:5e:d4:40:ed:e0:c6:39:ee:1a:b1:13:56:
         73:35:cd:d2:e1:d9:07:1d:0b:fc:c4:09:32:70:ab:48:f1:ce:
         64:50:ce:80:5d:82:86:36:62:cb:e3:c2:41:ec:0b:da:74:b0:
         55:c6:08:64:64:1f:ac:38:73:b8:31:bd:8c:19:78:ae:0a:f7:
         8b:e2:10:17:89:d6:1e:a2:5e:53:32:7d:01:01:de:a9:53:f1:
         f9:5a:c5:89:7e:25:72:d4:c5:72:44:0d:5d:64:1d:54:17:20:
         93:37:39:9c:35:51:b9:ff:d8:a3:a0:4c:6c:fe:17:7e:fd:e0:
         63:44:20:88:2d:39:5a:f8:f8:e3:27:d2:bc:07:06:dd:90:8f:
         92:1f:53:a4:93:44:c3:4d:51:f4:d9:81:f2:57:22:a2:50:c7:
         d2:73:69:41:cf:33:23:a7:b7:bc:4a:fb:27:3b:9b:b6:97:38:
         d3:3c:2f:88:1d:5a:0a:5e:56:3d:e9:12:9c:71:8d:cf:85:cb:
         89:05:6c:99:05:b6:21:41:9b:1a:9b:e9:d0:ed:1f:d9:e1:f5:
         7e:bd:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:06 2025 by rpki-client