Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File:                     dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier:          uPiLPB3OdS1pFn4DQKDiynqeZv8/3fP/oge7ZnaH8Sw=
Subject key identifier:   C0:D5:BD:BA:FD:5B:6B:28:9D:B1:C8:2D:47:54:9C:A5:6D:D0:30:A0
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer:       /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial:       019873E2982E932223090A542DC39445A396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 07:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:26 +0000
Files and hashes:         1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
                          2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 06xcjyuscfwzqWwxGU0C2lkJA3R3g+AyT+BEsrGyP30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:98:2e:93:22:23:09:0a:54:2d:c3:94:45:a3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
        Validity
            Not Before: Aug  4 07:01:26 2025 GMT
            Not After : Aug  5 07:01:26 2025 GMT
        Subject: CN=c0d5bdbafd5b6b289db1c82d47549ca56dd030a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:43:19:b8:0b:ca:cd:ba:2c:2c:f0:fb:0a:
                    e0:24:8e:6a:c2:10:c6:3e:83:0d:1d:03:67:f1:71:
                    72:17:8a:81:c0:38:e2:f5:77:d3:96:48:fa:85:0c:
                    b6:b3:9a:84:25:31:22:36:44:16:88:02:99:39:94:
                    3c:96:55:82:d4:2c:18:7e:6b:cd:3d:b2:be:b2:b9:
                    3a:b8:af:3d:f3:61:0d:ea:ac:83:69:fa:16:9c:a4:
                    ec:9e:b2:40:f6:fc:70:44:e9:5f:8a:5a:8a:26:fe:
                    93:27:e7:01:04:fe:9d:91:91:4d:65:a0:61:74:0b:
                    77:dc:48:a9:db:3b:28:6f:09:02:27:35:ce:5f:74:
                    96:b1:3c:17:cf:dc:e7:98:be:fa:8f:cf:ec:b4:78:
                    b1:d2:ed:88:50:81:c6:88:f4:65:05:6f:00:7c:9e:
                    a3:8e:18:5d:cd:dc:08:5f:3b:b9:dd:1d:75:9d:1f:
                    f4:cb:6d:88:94:62:93:c6:ce:a9:7b:51:98:75:27:
                    74:c0:f7:b1:b2:68:ac:2d:72:e5:92:a7:0f:0b:49:
                    22:fc:a1:7f:ab:92:0c:e5:4b:b8:d2:ed:ff:66:4a:
                    a7:33:f2:6a:32:4d:4f:19:8c:6c:f1:7e:2c:cc:61:
                    f7:58:77:3c:96:b1:e8:04:c3:5e:3c:85:22:8c:98:
                    e4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:BD:BA:FD:5B:6B:28:9D:B1:C8:2D:47:54:9C:A5:6D:D0:30:A0
            X509v3 Authority Key Identifier:
                keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:67:6b:14:ab:32:27:bb:50:2c:ec:8e:93:f5:46:0d:72:02:
         41:6b:e1:4d:53:8f:e0:37:f2:20:81:40:62:9f:f9:85:aa:36:
         cf:08:21:4c:9b:50:cc:50:25:bf:d9:99:42:fa:3d:2c:44:a4:
         4c:3a:61:4b:cd:53:4d:65:97:16:97:97:19:04:d1:06:65:14:
         1b:01:3f:f8:e0:da:ad:09:61:df:38:5d:88:0a:41:ea:69:da:
         60:bc:2a:23:d8:77:e9:8c:06:78:16:cd:53:33:11:f5:9a:af:
         75:16:e3:d1:9c:82:6f:c0:1a:81:34:9e:24:b1:8a:99:05:9e:
         31:b5:53:d8:bf:9b:7a:3c:45:1f:7b:1c:04:57:1f:0c:c6:81:
         d1:4e:d1:d2:25:78:44:20:26:fa:8d:6d:f0:de:ea:34:33:a3:
         1c:88:e5:6d:55:91:83:9e:92:fb:bf:5c:83:03:ea:e0:d2:c4:
         0e:e0:92:a1:95:68:2a:48:c8:af:eb:d6:48:6d:28:cc:22:16:
         09:8a:cf:0a:30:ad:09:b2:f4:ec:44:5e:d8:34:2d:f2:3e:fa:
         ef:d9:70:0e:86:e7:99:68:e9:b1:db:53:38:01:00:05:67:60:
         c0:75:fc:7d:78:29:41:c2:b1:86:8f:f1:8d:cd:6e:97:1a:20:
         67:4a:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:27 2025 by rpki-client