Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          uvmddZSY040NZ/56AeuqlsBPaLf5MB3qxV6nrXw9N98=
Subject key identifier:   66:52:F2:02:7D:BA:2F:B4:15:78:68:EE:10:06:27:45:7E:4F:60:D6
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       01988167F4AF5E5863D3172D87448D343A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          05A1
Signing time:             Wed 06 Aug 2025 22:02:10 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:10 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:10 +0000
Files and hashes:         1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: n/ZJm1ixE5CmaJncZvjwHaSs0AfXlEQwkzN+NGmy5C0=)
                          2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:f4:af:5e:58:63:d3:17:2d:87:44:8d:34:3a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Aug  6 22:02:10 2025 GMT
            Not After : Aug  7 22:02:10 2025 GMT
        Subject: CN=6652f2027dba2fb4157868ee100627457e4f60d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:68:fb:51:70:0e:dd:f8:cb:41:c4:d5:51:
                    8b:9d:f1:4a:6b:a9:f0:9a:d2:e9:ba:46:60:7b:53:
                    27:4c:dd:30:1b:4a:52:6e:8a:e3:d2:c9:a4:e1:32:
                    b9:6d:9b:ba:b7:83:14:18:c7:cc:58:57:c0:64:bf:
                    58:97:7a:98:07:34:25:60:04:45:a8:c5:b5:20:99:
                    25:4f:5a:86:0b:e3:54:1c:3e:f2:c8:fa:08:40:7c:
                    59:3c:f9:b3:af:2f:98:1d:bc:8c:82:e4:1d:cd:87:
                    37:e1:05:91:d8:04:64:e2:36:14:c3:af:60:fd:21:
                    04:0f:d2:a4:a8:c0:ec:ea:41:d8:46:fe:a5:5b:8d:
                    69:f6:ee:9d:be:29:d6:e1:cf:74:79:17:b5:a3:9a:
                    c4:54:4c:bf:02:e9:ba:a6:d3:e0:16:b6:18:98:2b:
                    3d:44:4c:d1:99:e1:6f:c7:8e:35:fc:7d:49:ee:d6:
                    8b:c3:b5:7b:ef:ab:25:9d:77:12:0e:41:61:fd:2c:
                    a9:f0:50:00:fc:86:b0:73:ae:3c:b2:42:27:0b:46:
                    c9:e7:58:fd:4e:20:af:97:25:59:e5:0f:c6:f6:1a:
                    6d:ea:f6:e5:06:36:c9:b1:88:f1:54:c9:c9:e9:53:
                    7d:76:53:b2:45:fc:d1:04:5e:29:31:f0:ba:85:35:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:F2:02:7D:BA:2F:B4:15:78:68:EE:10:06:27:45:7E:4F:60:D6
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:b1:54:c8:14:2d:03:2b:ac:82:92:19:16:d4:0a:e2:4a:
         bd:03:33:ee:39:14:2b:31:91:e7:1d:95:9e:75:ef:c7:17:9e:
         38:6a:50:d7:84:59:29:ba:4b:26:f8:c1:d8:2a:b2:02:fc:c4:
         c5:db:35:41:07:52:f6:8a:b8:b7:ba:a1:0a:c1:06:ac:23:7e:
         33:20:67:af:68:9b:d7:5d:f3:e5:ff:24:16:cb:5d:4e:ad:a1:
         b4:0c:83:8b:92:07:47:21:b5:6a:00:56:f7:f3:00:2e:ea:20:
         9c:4b:32:3a:88:c1:cb:91:8f:1c:94:3a:6e:57:9f:16:11:aa:
         f7:83:3d:98:4b:17:58:42:77:28:f7:36:fe:d2:67:41:d7:87:
         e1:c3:e3:a2:cb:21:2e:86:c3:e5:ff:7f:00:a0:f1:f3:76:c8:
         4e:ae:f3:25:fd:28:52:41:e9:21:40:db:ad:96:0e:23:0e:00:
         d9:53:4d:e6:f5:27:8d:dc:1e:36:1a:d6:44:c5:50:60:8d:c2:
         a1:52:e8:0d:20:1e:c6:f6:ae:59:76:d0:bd:7c:4e:cf:ff:ed:
         69:9f:6b:e0:e5:74:f0:15:0f:5d:6b:0e:5d:99:af:e6:a7:7f:
         f9:d9:45:bb:10:90:0d:95:3e:0f:9f:ba:3e:77:00:1f:ba:5a:
         b0:db:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:26 2025 by rpki-client