Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          64IY2DMfEolyriuPKakOX5K2zqG+3wY29rwpam5BOeQ=
Subject key identifier:   AC:9B:D7:60:7D:52:45:1F:3E:32:84:B6:48:9D:30:D4:4E:1B:B7:9D
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       019892C973C86C059DA7C5AB6ADA7A23F509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          162A
Signing time:             Sun 10 Aug 2025 07:02:12 +0000
Manifest this update:     Sun 10 Aug 2025 07:02:12 +0000
Manifest next update:     Mon 11 Aug 2025 07:02:12 +0000
Files and hashes:         1: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: QbU0AOZ4pR/sw/gSvReRBGB9KmBoqTBDB3M2OaEZV9I=)
                          2: ommcgtarI65YI1kcqlSBP2uGJm0.roa (hash: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c9:73:c8:6c:05:9d:a7:c5:ab:6a:da:7a:23:f5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Aug 10 07:02:12 2025 GMT
            Not After : Aug 11 07:02:12 2025 GMT
        Subject: CN=ac9bd7607d52451f3e3284b6489d30d44e1bb79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:1c:64:57:f9:ae:ca:ed:4d:80:7c:6a:c6:
                    b3:29:89:b0:d8:a8:73:75:41:74:1d:09:fb:3e:a2:
                    64:be:06:26:6a:6d:55:7f:98:b1:a3:43:04:5e:b9:
                    3b:88:d4:4d:b3:09:fb:f1:76:12:58:a2:a6:c1:58:
                    a2:72:68:9a:a4:69:ac:f3:e3:85:3e:65:a5:e8:92:
                    84:70:34:e9:76:28:c4:b6:2a:ac:86:49:38:37:7b:
                    f3:7a:ac:a4:e3:e9:9b:40:65:34:e5:69:35:48:0b:
                    05:93:65:6d:22:5b:34:ee:02:07:54:a1:8a:48:20:
                    d3:a9:01:b3:74:40:9f:8c:50:de:0d:d9:6f:73:a9:
                    72:74:f5:1f:fb:bd:ad:87:59:1a:3f:8a:d4:53:5f:
                    79:e8:dc:fa:c2:80:25:7b:46:7b:55:cd:f2:c2:11:
                    6c:0d:98:f1:1a:2d:d7:c3:3c:aa:84:af:2a:6b:02:
                    60:9c:40:80:9e:fe:3c:c5:5e:73:41:84:88:69:b9:
                    f4:f0:37:d9:5a:ae:f2:b8:5c:60:60:e3:d1:a4:2e:
                    a6:8f:c1:ce:8a:f3:e0:cd:55:e7:2c:5d:b5:78:f7:
                    df:bf:2a:ae:52:81:83:c5:5c:5c:88:ae:4e:b7:8c:
                    4a:21:2a:0b:f6:dc:f0:37:f6:87:8b:ee:f7:66:25:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9B:D7:60:7D:52:45:1F:3E:32:84:B6:48:9D:30:D4:4E:1B:B7:9D
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9b:34:91:f4:9b:00:a6:76:7c:b4:0c:53:b1:37:b3:26:d8:
         d8:3e:a4:f0:25:3d:a8:12:7a:3b:bb:d7:41:28:7a:7a:9f:f5:
         7f:60:9f:ff:fa:2d:d4:c9:70:e9:69:be:d8:86:a9:0e:84:f8:
         c8:b2:9e:10:85:eb:a7:76:4b:17:9e:a6:9e:5d:bc:23:7a:c2:
         19:d6:2c:a1:8f:f9:2c:ca:dd:83:84:2b:e4:34:e1:51:6f:f7:
         a7:9f:45:8e:c4:8e:ed:ea:7a:98:59:62:47:59:80:4b:2b:e4:
         80:59:92:17:2a:35:3a:7c:94:1f:7a:0e:73:1a:3f:83:3f:0d:
         ff:98:15:22:9d:20:2f:1c:22:81:a2:d6:90:f6:5c:78:2e:fe:
         d9:67:c0:26:0e:9f:02:bd:0b:05:9f:e4:31:74:35:a7:d7:d8:
         32:32:34:c2:46:c0:3b:81:6c:11:c5:31:65:6a:cb:85:3d:3b:
         82:74:50:3c:fe:d5:49:17:c3:03:be:07:47:8b:e6:8c:46:6f:
         55:8b:1b:a7:9a:fd:cf:3a:d7:1a:14:45:22:10:1e:3e:5f:8f:
         2c:82:12:bd:58:03:2f:38:24:4c:65:96:79:5c:d9:dc:95:ad:
         f6:db:4d:63:c4:0f:7c:be:fb:9a:f3:8f:c1:af:c2:4a:bd:05:
         3e:dc:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:27 2025 by rpki-client