Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File:                     xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier:          djSvatOvMKZ0xSnl75YxUdGopuRNoA7CycmoA/9W14w=
Subject key identifier:   BA:28:1B:59:B4:4F:12:0F:77:01:EA:B3:3B:5A:8C:87:A4:D2:AD:5D
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer:       /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial:       0198906C519C7C344C24A1E16654DBA9E071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 20:01:14 +0000
Manifest this update:     Sat 09 Aug 2025 20:01:14 +0000
Manifest next update:     Sun 10 Aug 2025 20:01:14 +0000
Files and hashes:         1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
                          2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: D16SVPkUSfavtmeLYWSqE4sKYUhdt4hBToYHWSot5LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6c:51:9c:7c:34:4c:24:a1:e1:66:54:db:a9:e0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
        Validity
            Not Before: Aug  9 20:01:14 2025 GMT
            Not After : Aug 10 20:01:14 2025 GMT
        Subject: CN=ba281b59b44f120f7701eab33b5a8c87a4d2ad5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:a1:37:82:5b:a4:d2:ec:a6:3f:c1:ae:e0:
                    bd:ac:2c:dc:cb:3a:f4:00:99:84:9f:8f:55:6e:a8:
                    88:bc:3d:3f:04:01:9a:ff:0a:84:10:bb:1f:ed:7a:
                    61:7c:55:1a:b1:c4:f5:d8:1d:72:dc:c6:f1:bf:5c:
                    f3:09:99:b6:ab:a9:33:e8:58:12:cc:7a:6c:6f:5a:
                    f9:b1:58:4a:04:4b:b8:bb:ff:8d:df:ce:24:78:ad:
                    ba:dc:cd:01:45:a7:66:85:c8:e8:ab:03:e8:5c:25:
                    0c:08:8a:48:98:d8:3b:6e:01:ee:58:66:d6:d4:68:
                    ee:3c:78:d5:b2:df:24:78:ce:7a:9d:45:35:b0:09:
                    b9:24:06:06:8c:d8:19:a0:f6:29:27:11:6d:35:ec:
                    53:37:11:ae:0c:90:5e:76:a4:91:31:bc:11:8c:87:
                    30:2d:3f:a8:83:cf:f4:ff:af:48:58:2f:43:c6:4e:
                    6b:2e:ec:09:6e:4e:b0:fc:63:a7:63:74:e1:2a:26:
                    71:97:e4:5b:a1:53:ac:53:ff:c3:d2:8a:8b:9f:c9:
                    23:fc:3c:09:9e:83:26:3b:e4:d0:d7:fc:ff:f5:5c:
                    45:11:49:fe:a0:df:5f:35:25:61:72:02:2c:ba:9f:
                    b1:d9:43:17:9f:4b:be:b9:60:14:c9:fa:19:c7:62:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:1B:59:B4:4F:12:0F:77:01:EA:B3:3B:5A:8C:87:A4:D2:AD:5D
            X509v3 Authority Key Identifier:
                keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:91:4d:a2:dd:30:b0:0d:b9:12:e5:b3:f2:91:94:d5:e6:e8:
         b6:c4:16:99:25:f2:e7:ff:20:90:8c:98:8d:b6:4c:bc:4c:94:
         dc:07:fb:2d:a3:00:dd:99:a9:8d:53:53:43:c9:28:68:82:9d:
         96:b1:25:40:de:a5:8a:2c:bd:0e:66:19:bf:d6:b8:ff:06:20:
         f0:b1:e3:1a:55:5f:38:24:c1:d5:9e:ff:4d:88:d9:31:09:cf:
         78:23:02:80:c0:12:4b:97:83:12:3a:bf:0b:97:8c:d1:50:b1:
         78:e4:e6:af:d2:91:d9:e6:8a:96:e3:af:3f:62:b9:c2:89:e3:
         2a:2e:57:41:09:4b:d0:80:8d:d0:65:e5:22:03:21:5e:84:24:
         3f:54:f6:90:8e:4e:1c:63:de:45:56:0d:40:f1:6c:35:8d:ab:
         67:a6:00:f4:85:1c:b1:b9:e9:7d:ee:19:3a:8d:68:36:11:9b:
         07:14:20:5e:b6:ec:27:00:dc:bb:a8:d0:d8:82:ed:2d:49:f1:
         24:25:a4:f0:20:86:34:a2:da:49:fc:42:a5:b5:3e:d3:14:c3:
         42:ce:a1:19:94:ad:5c:8c:54:0a:b8:61:9b:aa:09:89:f0:21:
         ef:1f:b1:3d:a5:4e:9e:b1:5d:fa:6a:4b:e7:8d:ed:4d:ab:b4:
         49:71:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:12 2025 by rpki-client