Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File:                     CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier:          sLtD3jV0UTbA5k1/lTLnP2afPcmm16yQXLzUGdNKtQ0=
Subject key identifier:   1C:F9:64:6D:16:DA:D6:AF:42:F3:F0:90:EC:E1:0E:28:66:70:FF:B7
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer:       /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial:       019873070211E8A581CB6CF84C726CF84196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number:          05B1
Signing time:             Mon 04 Aug 2025 03:01:35 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:35 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:35 +0000
Files and hashes:         1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
                          2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
                          3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: XaJ/m24WXDUqwTwGHh6WlYTo/WYMRXXJgEvcu8YUu/g=)
                          4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
                          5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:07:02:11:e8:a5:81:cb:6c:f8:4c:72:6c:f8:41:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
        Validity
            Not Before: Aug  4 03:01:35 2025 GMT
            Not After : Aug  5 03:01:35 2025 GMT
        Subject: CN=1cf9646d16dad6af42f3f090ece10e286670ffb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:cf:9e:75:ab:03:d9:9a:9f:85:a3:63:2b:
                    af:29:0b:ad:5f:8d:cc:8e:72:77:53:83:70:24:cb:
                    f2:18:f5:ef:27:9b:b7:29:a7:a0:be:5b:37:fd:50:
                    45:6f:3e:6f:9c:9b:56:00:02:91:df:51:f7:66:a9:
                    b9:79:13:4f:e6:ad:cb:d5:e6:9c:c7:1d:23:2b:68:
                    94:94:89:46:29:24:9b:b6:b8:b4:2d:eb:f8:f8:ee:
                    e9:c5:17:6a:44:c9:e4:23:1d:47:6c:be:d4:1b:49:
                    d8:6b:53:c6:09:3a:5c:59:6a:a4:bd:ac:eb:5c:e5:
                    bb:a4:59:68:fe:e7:a9:37:70:8b:76:cd:1a:81:72:
                    1e:f2:5a:7e:96:fc:ea:8d:c6:2e:71:f7:32:7b:07:
                    d6:06:48:a1:ed:bc:2d:d2:75:d2:d2:08:cb:3e:30:
                    ca:a5:35:ec:b6:79:9d:cc:0c:15:cf:4c:b4:66:04:
                    ce:a4:59:ac:f7:a3:44:35:6c:7d:62:7a:25:14:83:
                    7a:d5:e6:05:4f:c2:3a:17:81:ad:47:ff:3a:69:31:
                    89:1f:8a:5c:2c:38:bb:2c:6b:e2:ba:2e:13:ff:d0:
                    95:ba:0e:81:61:3b:c8:c9:cb:a7:c5:3c:ef:91:79:
                    ef:b1:aa:ca:11:bb:2e:12:12:90:ae:2e:03:83:30:
                    81:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F9:64:6D:16:DA:D6:AF:42:F3:F0:90:EC:E1:0E:28:66:70:FF:B7
            X509v3 Authority Key Identifier:
                keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5f:3d:39:cd:6f:f3:15:b1:56:7c:d0:1b:7a:6d:bf:12:04:
         76:31:70:aa:3d:c3:dd:c8:65:06:1b:48:7b:0f:55:a8:d9:db:
         3d:40:88:50:6b:72:a5:ad:52:f1:42:a9:b1:38:97:6c:be:5f:
         71:b5:80:d2:cf:6c:6d:dd:32:22:58:d5:ab:81:4c:fc:d6:60:
         83:6f:81:10:d3:7a:eb:4d:b4:fa:be:89:0f:77:74:9d:48:d3:
         4c:30:0d:a4:ab:27:3e:34:4a:0b:8c:cb:3e:1a:25:9d:81:a1:
         9d:25:df:58:ff:d7:c3:41:47:b6:b3:c9:6f:d6:9d:24:12:43:
         8c:b0:ed:49:09:a1:53:cb:6f:59:a4:81:6f:64:f7:55:59:9f:
         29:37:80:0a:1a:e2:1c:e5:8b:5a:4c:18:62:8f:16:da:de:74:
         b2:4d:62:b4:d3:0e:1c:4e:e4:34:e9:37:bb:34:06:32:ff:b8:
         df:9f:a5:2f:79:1b:b7:ea:45:89:28:b7:06:10:d6:ab:2e:57:
         79:b6:26:24:f8:3c:ca:c7:c9:96:12:39:fa:fa:73:3d:70:10:
         95:47:3b:71:5d:6a:55:f3:a7:24:c4:36:9e:12:1b:29:34:db:
         6b:03:b3:ce:2b:24:1e:17:65:d8:cd:04:5f:17:a6:b1:00:e7:
         4d:93:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:35 2025 by rpki-client