Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File:                     CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier:          Lo1fDHtVptiywz0H6CGho+D6kKRUN31Z3gTmwygAN3s=
Subject key identifier:   B9:11:CA:65:97:71:38:8F:DE:6F:F4:65:51:73:06:B1:39:BD:E8:2D
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer:       /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial:       019875D15E16770D01C288BE7E0DF7D47C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 16:01:52 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:52 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:52 +0000
Files and hashes:         1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: T0V5C5hU0eRLhFVsX845KQjuzOS2i/mFLC2MJxrFbKw=)
                          2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
                          3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:5e:16:77:0d:01:c2:88:be:7e:0d:f7:d4:7c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
        Validity
            Not Before: Aug  4 16:01:52 2025 GMT
            Not After : Aug  5 16:01:52 2025 GMT
        Subject: CN=b911ca659771388fde6ff465517306b139bde82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:6b:77:e1:dd:b4:f6:ff:89:fd:36:7a:39:
                    42:1e:f3:91:dc:be:84:76:09:7d:14:48:b5:b2:90:
                    b9:1e:65:28:6b:7c:30:f8:9b:b0:76:59:7d:25:e5:
                    05:67:65:03:75:2e:06:dd:8b:22:ae:5c:6a:ee:84:
                    b7:92:41:da:50:71:c4:ed:48:fa:b7:11:67:7e:d1:
                    cf:03:24:10:6d:bb:70:90:a0:f2:b6:52:2f:37:7f:
                    d1:44:70:94:0e:50:97:68:37:07:f5:bd:ee:13:11:
                    30:ed:84:04:04:f4:4e:51:68:d2:1f:52:3c:be:bb:
                    56:d1:1b:05:76:0b:d8:02:7c:df:a2:b5:8e:00:13:
                    52:ae:e1:de:d4:4d:72:ee:d3:1d:e0:92:9a:26:df:
                    8b:1b:bf:ad:d1:2d:db:3a:04:df:c3:76:45:34:a3:
                    96:53:b0:12:d2:da:52:d9:d1:88:ce:04:f9:b1:c6:
                    c7:a8:4d:f5:b6:89:64:ca:e1:21:8e:a5:f7:c5:5f:
                    5d:f9:da:25:4b:c1:e1:0a:df:83:bf:f2:13:d2:8f:
                    f5:88:d2:2f:2f:b2:e4:d1:cf:90:d9:da:c6:93:01:
                    27:94:ea:43:10:6c:b5:a8:fa:dd:93:35:d0:00:72:
                    c9:60:f6:a8:e1:36:cb:da:22:63:6a:42:01:1b:f5:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:11:CA:65:97:71:38:8F:DE:6F:F4:65:51:73:06:B1:39:BD:E8:2D
            X509v3 Authority Key Identifier:
                keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:6e:73:aa:31:7e:e8:a4:21:97:f3:3b:16:89:57:21:dd:
         85:7c:51:a3:7a:a5:bb:af:30:23:e3:b2:50:4e:0b:1d:bf:76:
         5d:8e:9d:9c:06:c5:91:92:5d:56:f4:7a:f6:74:5d:d9:06:02:
         58:c0:54:9e:32:2a:82:84:0b:a2:72:3d:c1:a1:ed:3d:5a:9b:
         34:15:f9:da:a4:39:ac:a3:da:70:a5:05:4d:dd:de:37:bd:fb:
         19:0d:3d:1d:da:3a:c8:91:07:c1:bc:fe:a3:d2:12:f1:de:04:
         7a:8b:ed:37:c8:60:b1:8d:85:d1:5c:c5:c5:c4:b7:49:05:e9:
         43:97:3c:5e:04:49:de:d0:5b:4d:da:2d:87:6c:0b:cc:62:68:
         20:06:76:64:81:f6:42:7b:24:cb:42:1b:48:6d:fa:39:14:be:
         4a:12:2a:f0:9c:45:14:a0:7f:ca:b2:78:1b:71:a9:ab:5f:f9:
         10:db:43:4e:dc:b5:75:37:e0:04:ad:8d:79:93:48:e8:f4:66:
         30:55:e0:c3:d4:6a:26:20:73:a5:03:50:fd:35:74:97:ed:00:
         42:ea:4f:ea:81:a3:fc:34:2f:fa:17:e0:d0:08:1e:09:92:15:
         f6:a8:0b:2f:8c:09:ee:be:9e:12:3f:2d:0e:49:ed:59:25:e0:
         be:21:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:25 2025 by rpki-client