Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File:                     p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier:          cTzdl+qnQg2tKOcEJm9jId1lPy154M/QlOezptW3HzM=
Subject key identifier:   D4:FE:51:04:3D:DB:D6:2F:29:15:D4:FB:73:D7:29:95:39:18:40:D1
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer:       /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial:       01987D1C571390C2111F516B3151E8476A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number:          0C23
Signing time:             Wed 06 Aug 2025 02:01:05 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:05 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:05 +0000
Files and hashes:         1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
                          2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
                          3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
                          4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: TySMG6US6WQBhOsjcNmcRthaVRA8sl5kO3rmNHWSaTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:57:13:90:c2:11:1f:51:6b:31:51:e8:47:6a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
        Validity
            Not Before: Aug  6 02:01:05 2025 GMT
            Not After : Aug  7 02:01:05 2025 GMT
        Subject: CN=d4fe51043ddbd62f2915d4fb73d72995391840d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:06:02:81:09:bd:43:14:e2:18:fd:08:2c:
                    a5:ba:8b:41:16:16:b2:28:83:a3:fd:05:f7:72:23:
                    94:a0:ae:e9:f0:8a:dd:d2:a4:0f:6f:09:7f:cd:47:
                    0e:e7:fe:64:3d:f9:d2:24:71:73:1a:2a:5b:dc:5c:
                    83:02:a4:9a:07:93:aa:85:83:0a:48:e3:33:ae:4f:
                    16:2a:79:0d:8f:6b:e1:55:f2:37:a3:11:19:ee:cf:
                    df:ad:64:1b:9c:c8:46:1d:47:82:e3:c3:bf:6c:ef:
                    2f:bb:7a:f5:c0:18:78:07:36:54:db:ec:c2:3f:81:
                    ef:98:b4:64:fe:38:72:4b:34:fd:5c:9f:35:d4:a5:
                    b2:ef:3f:5d:67:2c:b5:40:32:a2:10:72:bb:a1:e7:
                    e9:f7:73:46:65:92:68:6d:24:75:0f:b0:68:21:e3:
                    43:28:9a:3b:67:ad:75:fa:f8:c6:39:00:bd:eb:61:
                    41:cf:53:52:c0:5c:cd:cb:0c:5e:5c:f7:6e:29:b0:
                    ea:94:7c:d2:18:6f:8e:02:8a:06:bf:5b:6c:dd:40:
                    f0:89:39:ed:b6:4a:0c:62:15:38:75:e7:2a:f1:19:
                    8b:5c:49:79:54:ec:81:e3:ee:a1:19:76:e3:bf:52:
                    5f:2c:84:43:f6:32:0d:db:b8:f8:34:e3:0e:c7:66:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:51:04:3D:DB:D6:2F:29:15:D4:FB:73:D7:29:95:39:18:40:D1
            X509v3 Authority Key Identifier:
                keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:59:37:ba:7b:25:fd:af:43:fb:c6:1c:3d:35:00:64:31:cb:
         99:ce:dc:a6:d5:c4:c6:e7:68:c1:64:36:58:e8:37:f8:a2:a2:
         18:dd:8a:bc:42:26:8e:e5:a1:86:ee:0d:dd:61:ad:c2:8e:fe:
         a5:43:6d:26:2c:d7:d7:61:cf:d6:a0:cd:23:4a:7f:0c:b7:e9:
         fb:f4:3b:1a:c4:df:83:d7:3c:ef:3a:e7:ee:52:1f:36:18:aa:
         a4:80:dc:03:34:51:2e:87:8d:05:71:94:6c:2a:af:6d:6f:0d:
         c4:d5:e4:aa:24:8f:9e:c8:41:eb:2b:f0:57:20:e3:85:83:0b:
         25:f2:36:9d:18:bb:b1:5f:bf:7d:c5:8e:4b:28:58:e6:d3:64:
         ce:f7:5e:34:14:6c:c6:a0:72:8a:1c:09:34:1d:0c:84:f6:a1:
         b5:36:ff:bf:11:28:9a:5a:ee:9d:3c:be:b5:c9:b9:13:0d:4f:
         e7:66:35:b2:8c:9d:6f:73:74:15:49:6b:32:c0:e7:e2:ad:86:
         e4:74:20:df:6a:9f:91:23:9d:35:11:57:a4:7b:22:c3:40:a3:
         1d:ae:ae:be:d3:96:b4:70:23:eb:12:9c:c7:02:34:20:5f:27:
         31:8f:ed:dc:21:52:e1:40:b5:3c:cb:87:60:ca:c2:d5:ed:ef:
         fb:64:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:43 2025 by rpki-client