Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File:                     1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier:          HDzVo3AOMPyPDFYWL8kALdIRWUUDNeXKzrhYuv77zO4=
Subject key identifier:   B2:65:18:1D:BC:49:A4:30:3D:5F:C3:15:AF:66:62:5C:FB:F6:3C:24
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer:       /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial:       01989F03324262C8156044C366F8852271B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number:          1630
Signing time:             Tue 12 Aug 2025 16:00:43 +0000
Manifest this update:     Tue 12 Aug 2025 16:00:43 +0000
Manifest next update:     Wed 13 Aug 2025 16:00:43 +0000
Files and hashes:         1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: AIxQv3T68MWgZX3ieE/wfZYavu1LGMsNyZcx9Ip9HDM=)
                          2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:03:32:42:62:c8:15:60:44:c3:66:f8:85:22:71:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
        Validity
            Not Before: Aug 12 16:00:43 2025 GMT
            Not After : Aug 13 16:00:43 2025 GMT
        Subject: CN=b265181dbc49a4303d5fc315af66625cfbf63c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:20:b6:c8:a1:97:27:a4:a0:9e:c6:21:92:
                    a5:6e:ad:0b:98:28:6d:28:50:26:2f:a6:9a:c5:53:
                    59:46:db:ac:7c:5b:50:98:fd:ca:f5:5b:eb:6b:a9:
                    ab:20:34:d5:ef:c3:1e:b5:1b:b9:2e:97:1c:39:ad:
                    40:d9:b7:1f:ef:f7:d0:d3:71:00:96:bd:ab:3f:ce:
                    11:31:12:dd:81:f2:5e:9d:2c:f7:75:ae:35:f4:c8:
                    e7:0d:68:d0:00:a6:99:65:c7:ca:43:98:3b:18:6c:
                    5c:67:78:83:8f:8d:d7:2d:2f:2e:5e:70:51:9b:d1:
                    61:10:a8:97:eb:eb:09:f2:54:2d:d8:03:01:23:35:
                    1f:35:58:5a:fc:4c:41:07:47:9c:89:72:a3:f4:9d:
                    20:9d:5c:22:65:ff:44:33:7c:ce:86:95:05:b1:70:
                    79:28:d7:f6:01:d9:3b:58:9f:5f:d1:5f:cb:f2:51:
                    e6:ae:28:f5:77:2c:17:81:f9:71:99:d3:c7:fb:bf:
                    be:d9:46:42:98:16:65:67:76:ab:c1:3a:13:72:1f:
                    26:4f:c2:f0:39:7d:b9:b9:eb:bb:12:b2:5a:d3:fa:
                    ee:31:32:fe:c5:af:eb:dd:2d:ae:9a:34:4c:49:20:
                    ae:a6:af:87:3f:87:b0:99:28:f5:8f:ff:64:11:5a:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:18:1D:BC:49:A4:30:3D:5F:C3:15:AF:66:62:5C:FB:F6:3C:24
            X509v3 Authority Key Identifier:
                keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ca:61:73:22:fc:f9:69:a5:3a:6d:7e:13:a8:f0:43:d4:74:
         1f:d5:3f:a4:7c:20:ce:88:1e:93:e1:2c:66:70:aa:73:ea:b1:
         1d:ff:86:fe:00:23:de:b9:9b:48:18:ee:56:f0:50:a0:9c:15:
         4d:c1:d8:6c:3e:f2:52:6e:da:8a:86:f4:75:0e:eb:e3:9b:98:
         9f:3a:93:ed:f8:8f:52:20:70:ce:32:c8:c3:ca:63:ae:57:c6:
         1c:35:91:a2:f3:31:32:48:24:5d:58:65:c5:eb:eb:fa:a8:4a:
         72:8b:53:4d:30:33:ab:e2:0c:18:a1:5a:23:2e:44:6f:21:74:
         ab:f4:28:60:84:d7:9e:87:27:6c:03:7f:78:e5:3d:61:51:5f:
         13:83:93:b8:03:e2:cb:bd:b7:d5:c5:51:11:e3:a3:d0:9c:69:
         05:66:d7:fb:b4:e7:2a:75:77:bc:42:df:83:b6:8b:64:61:a7:
         18:20:77:08:0a:f2:d4:89:43:8e:cf:b7:b0:e5:76:61:3b:a1:
         44:37:1d:a8:5b:60:ad:8c:3a:2f:07:5b:98:b4:a3:01:30:39:
         84:82:a1:b9:47:6d:f6:e1:ee:63:c9:7b:e5:7a:97:03:ff:4f:
         a6:90:01:48:fc:98:4d:4e:e7:69:bc:bf:14:85:5e:40:96:e6:
         5b:a0:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:22 2025 by rpki-client