Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File:                     Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier:          iOhak0Dod1UsYqkrGt6NtW1zu8KDei2YAkxt+Flip9k=
Subject key identifier:   57:40:F3:C6:69:0A:62:DD:79:62:9B:AE:44:3B:80:46:58:91:D3:08
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer:       /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial:       019873E31F7AD192CDEF8C974EE40B2B5EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number:          0379
Signing time:             Mon 04 Aug 2025 07:02:01 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:01 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:01 +0000
Files and hashes:         1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: wf+ZBj2uuyQ4Tq7CxmZxJc9fdrW/JxCfU9Jql71isjw=)
                          2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:1f:7a:d1:92:cd:ef:8c:97:4e:e4:0b:2b:5e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
        Validity
            Not Before: Aug  4 07:02:01 2025 GMT
            Not After : Aug  5 07:02:01 2025 GMT
        Subject: CN=5740f3c6690a62dd79629bae443b80465891d308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:0b:7c:ed:55:df:30:f0:7f:6b:35:9e:6a:
                    22:e7:da:b9:f4:c1:2a:97:8c:59:36:9f:48:5f:0f:
                    37:ac:64:1c:90:90:1a:62:99:0e:6e:6d:d0:e3:ee:
                    55:83:5d:a8:5a:41:75:36:0c:ba:05:17:10:1e:d4:
                    ff:a8:f3:86:bd:bf:56:3f:51:93:11:60:a1:28:40:
                    b6:a6:10:97:24:f3:1c:d5:25:10:05:ac:7a:06:ce:
                    85:79:a0:91:f9:08:d5:30:61:14:d7:c5:cc:32:20:
                    bd:c7:8b:5d:55:dc:01:d7:45:06:92:16:a9:0e:38:
                    8d:d3:d4:4e:5d:8f:b7:8b:3f:b3:72:0f:b0:4e:5a:
                    98:81:47:46:36:8b:5f:61:a1:1c:07:b0:66:bd:c4:
                    7b:b5:48:7b:28:60:6f:4b:02:3f:a3:d3:a6:ee:b4:
                    7e:e8:60:0e:82:17:82:47:6c:86:02:bc:82:18:32:
                    c2:a1:b7:b9:d2:fb:22:c8:4c:70:8f:18:39:8a:fb:
                    4c:f4:86:ba:f3:e8:c8:11:1d:03:5e:7a:c8:20:e4:
                    fb:90:10:51:c4:f3:eb:6b:83:e5:39:e5:9f:c1:04:
                    27:a9:9c:ed:ad:4a:92:3c:85:df:50:c4:49:08:a1:
                    90:f7:53:3b:7b:30:fa:76:c8:c1:85:a0:84:24:17:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:40:F3:C6:69:0A:62:DD:79:62:9B:AE:44:3B:80:46:58:91:D3:08
            X509v3 Authority Key Identifier:
                keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:99:fe:2b:e0:b1:07:33:b6:11:a7:8c:c3:96:06:02:2c:
         0e:e8:f4:7b:d7:ac:59:6a:a2:41:70:36:ee:79:5d:85:19:9c:
         56:64:21:c1:0e:c9:02:21:a4:f8:06:9d:99:a3:91:08:f5:c9:
         17:a0:73:eb:3b:1e:8a:fc:86:7c:71:de:69:9b:7d:f4:9d:a0:
         2c:fd:94:0a:60:67:3a:64:21:c0:b2:dc:3a:cc:b5:0a:d9:f4:
         a8:c5:e9:74:d9:58:67:ed:33:02:99:d0:6a:be:2b:09:c3:d0:
         70:77:f1:90:0b:9c:3e:36:6b:79:26:94:19:75:14:80:ee:0d:
         5f:7d:f5:79:e2:a7:e2:2c:ba:cf:37:28:04:a7:63:78:46:b8:
         fa:9c:c4:3e:0d:fc:3c:e9:97:08:72:40:f0:72:0a:42:f3:8e:
         45:37:af:5f:ee:ce:a2:bf:bc:bf:01:84:80:54:b9:5d:e9:42:
         64:2f:1d:87:e6:b8:07:b3:5f:c0:5b:cb:5d:50:7d:60:1d:ba:
         b3:13:5f:2c:fa:32:80:4d:cb:99:59:e3:a5:68:26:dd:85:f8:
         5d:7d:6e:61:67:a4:f0:6e:06:d6:bf:60:ca:0f:f7:e9:1f:e1:
         cf:0f:43:06:9a:22:9c:5d:dc:9f:6d:56:e3:24:5f:97:09:39:
         01:a3:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:52 2025 by rpki-client