Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File:                     dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier:          BDKDhQdohhG1yzEz5ebGiLeI/bx1ru6Gk5oNVfCPugQ=
Subject key identifier:   8B:5A:18:39:C5:49:CE:DA:9B:01:64:13:16:3D:81:7E:F2:0D:27:05
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer:       /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial:       019872CFDC59028BD7180E6917260CA52E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 02:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:21 +0000
Files and hashes:         1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: YzYHxNaLXjwFZGJYwmamxnVEGJgKYT9wrVyyb5Jcr78=)
                          2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:dc:59:02:8b:d7:18:0e:69:17:26:0c:a5:2e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
        Validity
            Not Before: Aug  4 02:01:21 2025 GMT
            Not After : Aug  5 02:01:21 2025 GMT
        Subject: CN=8b5a1839c549ceda9b016413163d817ef20d2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fa:a6:94:ac:23:cd:87:63:f5:df:e8:22:e5:
                    4a:1c:3b:5c:a4:e5:5a:7f:f4:2d:12:03:ef:7f:66:
                    2b:a2:7f:09:c8:19:61:76:01:fb:36:c7:0f:e9:5e:
                    05:75:5e:4c:fe:7b:33:40:02:8e:fc:7a:6c:05:7f:
                    39:bf:77:33:92:b0:b0:90:05:42:ad:40:1a:a5:47:
                    4c:34:b0:d1:3c:73:6e:e3:b6:a3:07:ec:b8:f8:a8:
                    b1:05:ed:ac:25:e3:d6:7f:df:51:18:8e:1c:93:11:
                    d5:f0:ab:e8:c9:e7:09:59:73:42:62:88:4c:76:73:
                    ea:d1:17:5e:63:9e:24:e1:db:b0:d1:58:dd:cc:0d:
                    c5:6f:03:2b:84:48:fb:6c:0e:16:6c:b7:40:b0:dd:
                    1f:ce:0c:92:8d:91:c8:01:de:ee:8d:91:9e:0f:9e:
                    88:c0:d6:cd:d6:8f:f3:35:bf:f5:d2:a1:14:c4:f5:
                    7c:77:c5:0f:f9:49:b4:1f:d7:98:d8:88:97:7e:69:
                    e6:0a:84:28:83:9d:12:f6:42:3f:17:38:4a:fe:be:
                    d8:3f:59:5f:10:ce:c7:71:d2:ac:4d:a6:8f:88:68:
                    d4:72:34:8f:1a:7b:94:98:ec:43:1d:37:c4:47:30:
                    af:0c:6b:bb:9a:79:d0:c8:64:ef:aa:f8:fa:80:c1:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5A:18:39:C5:49:CE:DA:9B:01:64:13:16:3D:81:7E:F2:0D:27:05
            X509v3 Authority Key Identifier:
                keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:15:42:f4:0c:91:78:c4:3b:2f:80:64:21:d5:f7:bd:5b:
         fc:ec:19:5b:7f:f2:2d:1b:9e:a9:08:46:39:5e:20:6f:03:f6:
         f2:dc:26:d3:09:b1:80:e2:fe:1e:04:d8:43:2b:a4:31:25:7a:
         cf:58:a0:bf:a0:71:b2:ee:e3:7b:66:aa:6d:81:d3:b7:46:26:
         d5:a9:1a:cc:f9:00:ef:6a:40:24:28:88:0c:7f:67:5e:36:44:
         7a:6e:50:31:e8:66:4e:84:71:69:a2:54:7b:3d:af:7e:fc:0e:
         37:54:2b:f0:7b:11:06:9a:71:80:eb:83:57:a4:61:68:8b:35:
         28:d7:e0:ef:f2:6c:d0:91:ba:b8:5a:4e:4b:05:8a:a4:3f:33:
         de:1d:86:2a:e9:55:f9:d8:14:85:7f:d5:7c:23:ca:2d:fc:c5:
         59:6b:ad:96:fd:22:69:b1:2f:5e:e3:73:0a:71:8e:d7:e5:ea:
         29:d6:ba:02:28:6a:4f:ae:cb:39:bb:6c:89:cf:46:fb:9c:8e:
         10:bb:f4:0b:b0:40:48:ab:69:35:ca:aa:14:a0:f6:0b:74:7b:
         27:af:8f:60:7d:14:2b:94:e5:34:79:84:53:39:37:65:78:f0:
         33:97:36:f3:68:a7:40:a1:09:7e:e2:ec:48:a4:c5:a0:63:df:
         26:39:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:28 2025 by rpki-client