Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          8rJAfbPzn3tR8D2wamdnsRnM0ppWqPXiuRkQzFfYFgc=
Subject key identifier:   6E:80:95:D4:0F:05:9A:7D:0A:4C:BF:2D:AF:F2:63:13:12:E4:F3:2C
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       0198D6CD24DFCACAC74BD5DB4B6BF5431DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          15DA
Signing time:             Sat 23 Aug 2025 12:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:25 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: z3sAQTvSFkFvNBQgWVHiknr3UJzkj9QwCZVfnY31dfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:24:df:ca:ca:c7:4b:d5:db:4b:6b:f5:43:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: Aug 23 12:00:25 2025 GMT
            Not After : Aug 24 12:00:25 2025 GMT
        Subject: CN=6e8095d40f059a7d0a4cbf2daff2631312e4f32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:26:01:0e:72:5c:14:2d:d6:b8:f7:11:7f:e4:
                    b4:30:40:7b:0c:93:cb:3d:20:d3:02:f2:3b:37:f2:
                    f7:df:fa:df:7d:6f:b9:6b:f7:17:62:23:b0:e7:08:
                    43:01:cf:05:b7:d1:ee:d8:90:88:2a:d1:3b:d5:2a:
                    4b:b2:f5:e0:19:e7:17:60:f2:89:50:c4:17:ed:35:
                    be:76:a0:9a:34:91:2c:0b:cd:ee:d3:3e:ce:76:93:
                    ce:4d:16:38:b9:c7:d7:c7:cd:89:a2:09:bb:63:4f:
                    46:b8:b8:97:d4:4b:f9:47:b4:f5:02:93:44:20:76:
                    0d:41:9a:6c:17:31:b3:67:57:23:c8:e3:e4:c2:34:
                    bc:64:e9:fc:b8:34:60:53:ab:f6:a4:44:77:32:b4:
                    b3:91:e0:9f:5a:ce:80:94:c8:6f:d8:60:e0:26:21:
                    00:fe:f8:65:50:72:4b:e9:50:c2:13:04:46:07:68:
                    a6:d0:3d:a5:2a:13:ad:ef:b5:6c:7b:6a:d8:e0:43:
                    00:79:a3:38:4e:52:24:d4:df:c3:56:60:6e:2d:3c:
                    2f:06:d2:d7:78:1e:54:3a:1c:ad:42:16:65:57:27:
                    72:d6:17:55:26:cd:9e:4b:dc:43:6e:13:a2:09:3c:
                    20:39:c2:ac:81:f4:77:2a:a9:fb:90:46:30:8a:57:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:95:D4:0F:05:9A:7D:0A:4C:BF:2D:AF:F2:63:13:12:E4:F3:2C
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fa:59:f8:57:ee:59:cc:5a:7d:68:ad:48:60:29:e1:5d:43:
         78:d1:8a:35:7b:ad:9c:4b:98:0e:0e:64:15:cc:98:ac:81:e0:
         f6:21:82:f6:1e:71:14:53:a6:3c:20:10:a7:51:c6:69:d4:f5:
         a6:ff:4e:66:3e:d4:f7:f8:25:de:86:46:3f:4e:bc:c5:35:2d:
         81:87:b9:0d:5c:fa:35:57:91:c9:6f:4a:b7:c2:7a:4c:28:78:
         64:7d:c4:ae:a7:4a:31:8f:dd:36:3a:14:f6:81:eb:81:55:62:
         00:1b:68:1f:72:97:72:e6:e4:f5:cd:3e:80:11:da:78:db:ee:
         7e:31:09:15:ce:ef:d0:00:34:14:b0:0e:36:fd:cf:9c:83:42:
         43:07:58:23:db:1d:a8:b9:21:08:7d:aa:06:d6:8b:89:36:6b:
         fb:95:38:6c:50:73:59:d6:43:f8:d8:b1:7a:59:5c:5b:4d:27:
         ca:3d:96:0c:f7:f7:5e:a7:eb:45:10:51:f2:68:a7:34:2c:ad:
         63:8e:f2:ac:68:00:f3:66:aa:93:71:d8:57:2a:87:e3:0d:b6:
         d8:a6:56:12:5a:4e:2e:e3:8c:f8:6f:76:da:a4:20:ee:1e:fa:
         be:ef:bf:72:21:53:d3:ab:fc:5f:73:23:ca:0d:26:f3:9b:56:
         19:e7:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:30 2025 by rpki-client