Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
File:                     RBMe6Tam-kL_OvCmrobCxmU91XM.mft (raw, json)
Hash identifier:          CAQGqCp6ffRJ/XCQM4i26rYj9drIiV4jJ0TfE6oG1uo=
Subject key identifier:   D8:54:51:19:32:12:A5:9F:ED:17:76:53:A8:61:96:30:72:9F:3F:89
Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Certificate issuer:       /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
Certificate serial:       0198729873086EED13EBFAE003BF3EB4B08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 01:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:50 +0000
Files and hashes:         1: RBMe6Tam-kL_OvCmrobCxmU91XM.crl (hash: mR8S2IJH5NDkVqeBLXupyQ3OgEhxaQxETzGP3T44j14=)
                          2: xHkJHzTD8_YsVJb1E014CGyqfNk.roa (hash: vU0FBIoesehMBLGSsYMRz2M7MHLMPr/AmIolqA/4dRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:73:08:6e:ed:13:eb:fa:e0:03:bf:3e:b4:b0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
        Validity
            Not Before: Aug  4 01:00:50 2025 GMT
            Not After : Aug  5 01:00:50 2025 GMT
        Subject: CN=d85451193212a59fed177653a8619630729f3f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:28:22:77:0b:84:33:4f:66:2e:df:f3:94:
                    59:94:92:5f:32:22:20:3b:c1:a2:34:a9:38:b8:b5:
                    89:73:97:a4:07:4a:69:40:4f:ae:54:0f:83:21:ab:
                    2e:9e:3e:94:9f:f6:bd:34:c2:52:75:92:3c:da:40:
                    d3:97:f8:bd:f9:ef:0c:97:1e:7d:3f:19:34:9c:bb:
                    fd:c2:71:26:3d:17:c1:83:0b:d6:6d:e5:a2:29:ba:
                    bf:27:ee:7b:2e:32:22:6c:e8:47:52:d4:60:a9:0b:
                    ba:12:d8:39:ad:26:a0:12:ed:53:85:31:87:2a:ea:
                    c7:1b:cd:8d:b2:72:35:28:d7:d7:c4:75:08:4f:80:
                    ea:5c:4a:26:37:2f:bf:5e:6b:20:cd:f5:c3:84:c3:
                    e1:01:4e:97:66:73:2a:fc:12:34:99:61:dc:0c:46:
                    9f:07:87:f6:8b:3a:97:7f:38:f5:3c:7a:a9:11:f2:
                    4a:3b:b3:d4:32:d7:e5:0c:9a:bc:da:de:23:3b:de:
                    89:05:f9:73:23:ba:64:45:8f:ea:1c:f6:c4:23:bc:
                    de:db:2a:99:65:18:35:ba:c6:0b:90:81:5b:19:11:
                    87:4e:8b:08:81:f5:eb:3a:81:cf:7c:5b:af:13:43:
                    8b:59:47:21:d6:8a:10:aa:dd:d2:22:f3:f6:8a:4d:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:54:51:19:32:12:A5:9F:ED:17:76:53:A8:61:96:30:72:9F:3F:89
            X509v3 Authority Key Identifier:
                keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b8:3d:6b:20:a6:8a:01:21:14:3e:07:ca:b5:e8:40:2e:5b:
         3a:41:39:62:6b:db:6c:f9:b4:8c:35:82:a0:0d:64:8c:c6:79:
         99:35:62:53:d0:14:5c:cc:aa:39:45:c7:15:ac:46:40:5f:03:
         4f:3c:d2:bd:cb:22:a7:f9:90:0d:fd:f0:0b:bb:9e:72:ad:5d:
         93:eb:52:28:44:36:c4:dd:4a:44:ac:05:9d:2f:49:e1:b3:96:
         ef:79:40:1d:c2:ef:df:5c:36:91:bf:c7:ae:c5:f7:ce:95:0a:
         92:d2:62:e2:22:d6:8a:66:c7:8f:1c:61:10:a6:b6:04:97:99:
         c1:2f:20:fd:70:71:76:0d:51:8a:bf:f5:15:0a:19:a2:5a:7f:
         39:46:71:15:d0:36:09:b5:b6:c3:40:bb:4c:d2:06:20:b7:fb:
         bb:70:5d:a5:a6:39:8a:c3:22:9d:15:24:e5:8c:18:0d:17:0d:
         c2:52:13:dd:ac:a3:0f:a0:ba:c6:7b:d4:01:80:f0:b1:61:81:
         b0:57:3a:cf:bb:ea:ca:64:6f:57:5b:a9:7e:0d:d3:1c:77:76:
         54:b9:58:a4:5d:d1:bd:79:cc:8b:c9:a7:0a:16:39:d9:9b:e8:
         9e:82:df:08:9d:9c:37:04:bf:69:59:4d:cd:21:13:b7:97:d4:
         1d:bd:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:55 2025 by rpki-client