Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File:                     B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier:          jLQ1BLySTaeg1cgicdIIMu7UXUVbzAmgAXQNdUKy1Cg=
Subject key identifier:   20:58:A1:46:38:82:B1:F4:DD:A7:B6:48:78:A9:94:2B:31:FB:5C:AF
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer:       /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial:       01988B7D675001EBA51A61BD206661265634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number:          0E8B
Signing time:             Fri 08 Aug 2025 21:01:48 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:48 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:48 +0000
Files and hashes:         1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: bUUuim1SopOsrPh0BZdW53AnVcD+99DQ7DOZ2dRlmLY=)
                          2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:67:50:01:eb:a5:1a:61:bd:20:66:61:26:56:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
        Validity
            Not Before: Aug  8 21:01:48 2025 GMT
            Not After : Aug  9 21:01:48 2025 GMT
        Subject: CN=2058a1463882b1f4dda7b64878a9942b31fb5caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:a2:c1:63:ce:9b:ea:88:cd:13:41:5c:21:
                    83:06:b5:4f:65:45:f9:05:17:9e:07:4e:4f:02:5c:
                    86:2a:23:43:97:e2:f1:1e:22:35:81:40:3a:07:17:
                    72:25:76:87:a4:65:f5:27:c4:0b:9e:13:96:2c:b8:
                    17:d8:74:85:e7:ee:da:e0:72:7d:88:19:b1:1b:52:
                    e0:3a:d2:14:98:a8:be:a8:73:33:02:3f:9a:d1:02:
                    d6:9d:4c:69:88:55:17:e7:50:96:e8:d3:57:59:0c:
                    55:6d:9d:a6:48:6b:54:a3:29:19:4c:f8:47:4c:b2:
                    a0:69:39:66:85:3e:3c:77:55:c3:63:35:5c:55:e6:
                    b4:2a:01:a7:93:ae:2d:1c:bb:17:3d:61:ed:27:d4:
                    01:bd:8e:b5:a7:a8:32:a9:97:72:c1:80:6f:d0:49:
                    c0:b6:c9:84:11:1b:0a:3c:58:68:6d:9d:9b:60:45:
                    36:67:ad:e8:0f:5a:bb:88:9f:b6:04:d8:d6:3d:43:
                    bc:83:51:9a:c6:d6:95:37:94:85:33:a2:26:ab:dc:
                    af:cb:e5:98:37:12:15:4e:33:46:1b:ac:26:ad:17:
                    92:9c:20:0a:de:ea:91:04:26:eb:b7:f1:cf:69:bc:
                    80:cd:fa:81:68:f5:44:3b:08:54:4a:e6:c0:23:18:
                    5b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:58:A1:46:38:82:B1:F4:DD:A7:B6:48:78:A9:94:2B:31:FB:5C:AF
            X509v3 Authority Key Identifier:
                keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:26:f2:5a:cd:bf:15:e7:1e:97:28:68:55:35:fd:53:41:
         02:c8:50:a6:7a:8a:fe:4d:99:ff:b3:3c:13:b1:59:ed:ab:c1:
         45:cf:8f:8e:4b:d1:29:9a:4f:ec:b2:e6:82:a0:ec:7b:4d:ec:
         33:8b:02:ab:f7:1e:2c:a1:c2:d3:bb:b4:41:b8:ac:54:04:75:
         31:e7:2e:cb:0f:1b:4a:2b:b8:76:c6:6b:c1:2a:1f:0e:50:1a:
         53:22:c1:d5:ca:12:14:22:ad:c1:27:53:df:1e:13:5b:52:e9:
         89:d5:81:02:bb:74:cf:c2:f0:7d:c1:f6:87:b2:a9:31:63:20:
         97:ca:1e:b5:2a:d8:cc:79:a2:cb:d8:bc:52:24:8e:56:fb:22:
         4b:a2:d3:d6:13:5b:15:d1:58:5e:81:f9:4a:54:ba:bc:0b:99:
         03:3a:7c:44:1a:49:b4:80:1f:86:36:93:80:92:ca:88:40:e4:
         7d:09:04:36:46:7b:d7:ee:27:e0:d8:b8:81:fa:a1:cf:73:63:
         4e:c5:b4:08:01:94:ce:fb:1d:6c:58:ba:48:39:11:bd:df:cc:
         ca:f8:c4:16:3f:86:14:15:ea:6d:74:b0:7d:6e:f1:25:38:f9:
         33:8c:47:2f:ea:b2:d1:1c:fd:d2:58:11:cb:5d:87:4a:15:06:
         83:6c:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:10:15 2025 by rpki-client