Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File:                     sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier:          fSrybrI1lAmRuhqwnxhOE/z2Tx6TlIDTmJSPGndgVck=
Subject key identifier:   38:D3:B6:72:9A:BF:16:34:28:EE:C5:2C:24:CF:73:7D:E6:EC:52:AB
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer:       /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial:       01989DB9EC35D3CE0E1FF5E40AE9D53C669B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number:          0B46
Signing time:             Tue 12 Aug 2025 10:01:04 +0000
Manifest this update:     Tue 12 Aug 2025 10:01:04 +0000
Manifest next update:     Wed 13 Aug 2025 10:01:04 +0000
Files and hashes:         1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=)
                          2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: MApzdLI69wUZCyTvgBb0KPvWLko6pBfixGJ0kI0q/jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:b9:ec:35:d3:ce:0e:1f:f5:e4:0a:e9:d5:3c:66:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
        Validity
            Not Before: Aug 12 10:01:04 2025 GMT
            Not After : Aug 13 10:01:04 2025 GMT
        Subject: CN=38d3b6729abf163428eec52c24cf737de6ec52ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:52:6c:9d:c0:3a:3d:c3:ba:e2:7a:44:15:
                    9a:38:c0:a2:77:89:fd:f0:e8:f0:e8:80:af:32:e8:
                    14:ac:0f:36:93:13:04:a3:8d:a4:5d:d5:44:bc:77:
                    ac:77:77:20:01:78:13:0f:9e:a6:3f:31:3a:a6:73:
                    44:c9:a3:2a:91:da:15:74:2c:eb:68:46:79:c3:c4:
                    83:3d:11:ea:15:03:75:f5:4d:07:dd:90:b8:e5:8b:
                    07:d7:fe:aa:a7:99:5f:61:be:f3:0a:27:22:53:22:
                    49:36:d9:4a:e2:ac:8e:95:e4:c0:38:8a:4d:0a:1b:
                    71:63:00:12:7f:62:78:db:00:57:e6:c4:60:1e:1c:
                    8e:b0:34:7d:94:97:ab:cc:a6:0e:98:22:06:7d:5b:
                    c4:1d:32:b6:bc:73:03:85:02:33:47:83:e6:8b:86:
                    5c:ed:62:a2:b8:75:3f:13:1d:5d:5e:64:45:8b:35:
                    fc:25:d4:3f:63:6d:57:c7:12:ba:15:26:c5:fa:60:
                    5f:7b:45:9a:17:6f:e6:82:2e:31:89:15:8a:79:49:
                    43:6e:92:0f:5c:56:dd:37:d7:7b:72:11:e4:92:67:
                    71:ac:5a:29:bc:59:40:4a:3e:34:ad:f6:6f:16:69:
                    34:2d:05:f8:af:cc:90:ee:67:e8:0a:16:fb:97:f8:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:B6:72:9A:BF:16:34:28:EE:C5:2C:24:CF:73:7D:E6:EC:52:AB
            X509v3 Authority Key Identifier:
                keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:68:f3:20:ec:74:92:25:21:2c:ed:fa:92:1c:75:28:95:
         47:8e:90:9e:45:40:48:c5:99:1b:1a:36:a4:ca:b0:5f:ed:b4:
         e5:61:92:e1:ec:25:25:66:2a:76:f9:9e:c9:cc:c7:78:68:fc:
         a5:11:25:7e:48:0f:bd:56:9c:d3:1c:17:e6:d6:3a:0e:bc:db:
         4e:5f:06:66:01:ca:d2:f5:99:64:16:67:97:cc:c9:4e:8c:e1:
         9c:f4:58:c1:a2:f8:7f:10:34:58:cf:2c:f0:d4:60:5a:5c:ef:
         1f:31:a3:47:76:c4:0b:fb:d4:67:1b:39:65:83:23:7a:dd:98:
         e4:b1:f5:39:cc:46:f0:67:6e:2c:2b:cd:39:0a:99:24:bd:f8:
         ff:23:1d:7a:16:75:77:e5:ba:d9:37:40:8c:59:8e:c7:27:ff:
         02:50:6c:ac:cf:30:02:43:9e:8f:bd:c8:81:5a:60:89:b0:fc:
         26:2e:ee:45:89:14:5b:d5:f0:23:70:a0:fc:32:77:20:6d:2c:
         e6:96:7a:e8:5c:eb:a9:45:31:6b:9f:a9:90:76:15:76:0c:90:
         ac:98:ee:1e:e0:49:dc:45:61:3c:f1:be:0d:2c:30:02:c2:75:
         81:6e:74:84:2e:5d:91:7d:fa:63:29:c1:19:56:02:b8:c4:d3:
         84:af:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:07 2025 by rpki-client