Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File:                     AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier:          c2NoNEYTD+T6BVkubbDDDQdtjjhydQcNv+X+fNxZvwA=
Subject key identifier:   94:B3:8D:09:77:00:0E:D1:41:98:26:4F:11:37:E6:91:0D:9D:0E:98
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer:       /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial:       019873E1BC49D942465862C2B18A1257F4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number:          0FCA
Signing time:             Mon 04 Aug 2025 07:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:30 +0000
Files and hashes:         1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: exmnj8b/kl43W93gfOGPcR8vyQJnAD9SknKpmmnDelE=)
                          2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:bc:49:d9:42:46:58:62:c2:b1:8a:12:57:f4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
        Validity
            Not Before: Aug  4 07:00:30 2025 GMT
            Not After : Aug  5 07:00:30 2025 GMT
        Subject: CN=94b38d0977000ed14198264f1137e6910d9d0e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:1d:1b:9e:b5:28:ec:91:28:83:60:c4:1f:
                    ad:92:2a:6e:7d:d1:b3:e1:ce:a9:88:f7:88:b4:5e:
                    8f:85:5a:31:f0:65:39:9f:d0:e7:25:ed:86:6d:54:
                    ae:1b:b8:fc:d9:ca:36:26:dd:2b:cd:bd:51:9c:42:
                    65:dc:ec:d9:ba:78:0b:45:b7:ba:17:9a:b3:f0:21:
                    04:2a:e2:53:8a:45:4e:fb:10:72:40:cb:4e:1e:ee:
                    ae:3a:89:74:75:a6:31:5e:df:0e:bb:4f:8e:e8:20:
                    41:73:49:79:ef:97:57:c0:90:05:68:47:59:50:7b:
                    3a:30:43:9b:29:59:b2:0f:64:98:b9:68:c8:37:3c:
                    0c:ad:39:eb:16:a5:f3:7f:18:99:4e:cd:e9:72:4d:
                    56:00:26:fc:6c:0e:07:5f:e0:1e:41:f9:fe:77:c6:
                    d4:57:de:49:12:cd:8d:58:47:5f:cb:ad:c5:2b:b8:
                    09:ef:97:b2:13:6d:a4:2e:72:fd:90:d9:3f:53:35:
                    19:da:15:77:ca:ac:fb:da:9c:e7:c2:a4:a8:6c:a8:
                    6c:8f:0b:1f:b3:8e:2a:11:36:b6:84:02:ba:8e:81:
                    57:2f:ce:f2:20:7e:cc:81:9a:a2:47:f2:fe:da:98:
                    df:fd:32:6f:01:a0:56:05:8f:31:1a:f6:82:40:e8:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:8D:09:77:00:0E:D1:41:98:26:4F:11:37:E6:91:0D:9D:0E:98
            X509v3 Authority Key Identifier:
                keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f9:67:db:b0:e9:f8:36:61:fd:0c:cd:09:96:f5:f3:c9:9d:
         3f:7a:e1:b5:39:bb:d6:b0:0d:74:7b:db:79:1b:bc:d8:d7:2b:
         be:36:05:5f:66:6c:7c:78:b3:7f:84:da:86:06:81:8b:85:41:
         ec:61:94:0d:a2:67:ab:a2:11:9d:10:f0:65:64:3d:ca:4a:7b:
         53:3e:e8:a6:28:70:c1:c4:26:de:7e:07:a8:96:d8:6a:25:3d:
         25:53:42:51:98:a2:c6:d1:ea:32:b1:57:7b:d6:21:3d:e4:22:
         45:ae:b5:e4:52:94:0a:c3:8f:bd:dc:7d:71:32:5a:5d:fb:40:
         76:53:d5:d5:ce:c8:e1:a6:58:0e:8e:2a:2c:5a:b7:ee:5d:d3:
         ab:46:c5:ab:97:a0:7c:03:00:8f:0e:cf:01:97:48:c8:3e:3a:
         9c:32:63:a8:0e:1e:38:dd:9b:74:30:77:38:59:a4:c9:fe:3b:
         98:02:33:be:e2:ad:07:df:ea:fe:b9:12:5f:8b:29:da:08:1c:
         14:56:e9:5f:5e:f1:6b:49:a7:bd:b6:74:5b:70:12:d9:6e:1e:
         ab:4b:c9:c3:db:cc:96:12:a0:e8:40:81:ef:68:50:05:1f:04:
         ee:c8:6a:52:43:6a:46:22:fd:c7:7d:e8:ad:80:d9:62:fc:a8:
         63:ea:3b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:21 2025 by rpki-client