Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File:                     Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier:          g3nxli9dN2H+hqGZ/tgIJNEVAUBQU4IHmTLOyyq/o/8=
Subject key identifier:   9D:90:05:C9:A3:6F:18:93:01:CF:50:9E:C2:A0:B5:1E:15:56:45:3A
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer:       /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial:       01988B7D48E96762F9656EBDDE2924C9BFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 21:01:40 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:40 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:40 +0000
Files and hashes:         1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: CJ3LmPwM6sO8v18VMQiNU4dc/iYfaTEOKSzmjGWFU+o=)
                          2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:48:e9:67:62:f9:65:6e:bd:de:29:24:c9:bf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
        Validity
            Not Before: Aug  8 21:01:40 2025 GMT
            Not After : Aug  9 21:01:40 2025 GMT
        Subject: CN=9d9005c9a36f189301cf509ec2a0b51e1556453a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:d8:b3:4d:27:3b:75:bd:df:8d:15:c0:14:
                    3a:cd:c2:1e:b5:e1:ea:b6:82:85:0c:a1:ad:6f:33:
                    86:5c:ac:57:88:14:b5:7e:32:ec:92:ad:9a:45:e6:
                    de:a6:6a:60:c2:82:d2:6d:c9:06:3d:cd:9f:f0:f9:
                    a2:53:dd:77:e0:49:79:3a:05:3e:3a:9f:2d:47:68:
                    be:35:15:4e:c3:f5:1f:a8:f6:66:32:9c:1d:f1:a0:
                    59:6f:c8:b1:0e:ed:4b:8a:14:e7:bb:08:88:64:62:
                    a0:40:a5:97:dd:d5:39:ff:0e:6d:c0:5e:a1:2a:f2:
                    66:04:08:73:88:6a:e8:1f:8c:24:9f:bd:31:7f:dc:
                    b6:bc:3b:8b:38:11:19:65:d5:29:b5:3e:51:a3:72:
                    3d:64:a9:91:74:42:ce:21:fd:79:c8:29:74:2b:4b:
                    79:57:1f:34:dd:f9:4b:35:a7:26:e3:56:e8:a8:96:
                    65:d8:07:71:9c:37:49:f9:f1:bd:26:87:0a:29:4c:
                    a4:36:fd:b3:79:b7:a5:7a:6c:9f:c1:d6:8c:d0:61:
                    ad:dc:e8:58:d2:b1:a7:22:3f:54:28:0a:fe:0c:a5:
                    bc:82:49:13:1f:99:c5:5e:4d:c1:1a:c1:c2:38:9f:
                    aa:ff:81:1b:c3:d6:49:db:1c:78:a3:4f:24:cd:73:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:90:05:C9:A3:6F:18:93:01:CF:50:9E:C2:A0:B5:1E:15:56:45:3A
            X509v3 Authority Key Identifier:
                keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d1:c3:04:29:6c:f6:25:9d:a1:60:fa:10:3d:c0:58:e2:7d:
         2d:f9:49:7e:51:b0:4d:56:1a:a1:94:4b:83:6f:fd:b0:0f:b7:
         7a:f4:7d:5f:0a:db:46:7a:24:40:4f:0c:69:3c:94:79:73:09:
         d6:fa:b0:fb:9c:5a:7c:a2:73:17:fd:d5:25:43:e4:95:bc:2f:
         ef:b6:62:fc:4a:06:43:5f:64:64:36:06:60:11:55:44:55:11:
         cc:eb:8b:92:23:2a:a2:ae:ee:aa:5b:af:8c:f7:df:5e:67:12:
         f0:ed:99:2c:72:0a:8a:10:2b:11:b8:33:70:a9:37:6e:92:c9:
         03:da:58:a5:7f:9a:14:6e:07:54:38:46:0c:80:cb:fd:b7:aa:
         2d:b0:2c:e6:57:d6:cd:eb:65:b8:c7:62:5f:eb:47:e9:5f:ea:
         73:93:08:bc:08:92:c8:aa:67:85:34:98:fd:a6:7a:50:ae:67:
         1f:c7:3b:24:7c:e7:2e:d5:87:40:3a:56:59:78:04:ee:ea:47:
         41:03:bf:11:50:ca:37:de:f4:4c:6c:46:45:2c:8a:b0:50:5a:
         6d:d3:eb:52:73:a7:8f:b9:33:6f:0a:ed:92:59:ab:7f:bc:84:
         57:c9:aa:49:f3:85:75:2c:b3:5c:51:0a:52:9e:6c:d3:d2:9e:
         96:70:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:36 2025 by rpki-client