Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          hDcLCZDSHrkpOsZxfijbvaVBng4hBJRa45CvnpPyxw8=
Subject key identifier:   33:82:87:22:E2:35:9F:7A:37:94:BB:37:0F:54:23:26:31:84:29:BF
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       0198808AE0791342D706C79F11AB6937CEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          15AC
Signing time:             Wed 06 Aug 2025 18:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:41 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: dFXhYEruqnX9/4Ki2Fh02P+wANOo1vis6+e1lVM+Hrw=)
                          2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8a:e0:79:13:42:d7:06:c7:9f:11:ab:69:37:ce:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Aug  6 18:00:41 2025 GMT
            Not After : Aug  7 18:00:41 2025 GMT
        Subject: CN=33828722e2359f7a3794bb370f542326318429bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:12:b4:5b:49:1f:28:84:d9:a4:dc:8a:12:
                    3c:59:ae:66:40:2b:fd:5f:bd:a5:ba:ba:9c:0a:3c:
                    93:98:2d:21:32:e4:26:75:13:52:98:f2:19:be:67:
                    66:50:0c:56:e8:42:34:55:8a:c0:17:4e:a3:9b:3d:
                    5e:e6:d3:b5:99:06:93:46:d4:24:8d:fb:bc:2a:30:
                    85:40:1f:79:6e:70:c8:49:8d:12:a9:0c:03:ee:e2:
                    41:74:32:4a:d3:d4:4e:60:74:a4:13:ca:62:ca:1c:
                    13:fc:33:8b:96:4d:04:1b:c6:44:cf:5b:06:07:37:
                    f1:99:79:de:49:14:51:0d:02:76:98:d1:e6:27:32:
                    be:57:05:5a:16:02:f5:95:19:b7:f1:33:86:e2:4b:
                    93:b1:29:de:64:c6:5c:e3:c0:8d:a9:8b:93:f6:7c:
                    df:bf:db:7c:81:e7:40:93:65:24:aa:c4:24:47:98:
                    91:9e:d6:c3:56:29:33:93:2f:8a:60:96:20:91:ae:
                    d5:1c:6a:40:8a:53:6b:cf:fd:b1:24:53:8e:ea:74:
                    43:7e:69:3b:aa:43:e6:ec:bd:96:7f:10:43:cf:2c:
                    68:68:79:b5:79:f5:f3:7a:ab:05:45:6a:fd:42:cb:
                    d8:26:10:66:0c:a6:90:0a:27:91:5a:2e:13:0c:1b:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:82:87:22:E2:35:9F:7A:37:94:BB:37:0F:54:23:26:31:84:29:BF
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8b:dd:a7:01:b8:cd:e0:bc:b8:84:bf:34:ed:6a:87:30:84:
         92:9e:63:5e:6b:60:a6:99:57:19:5c:25:84:ae:36:bc:89:e3:
         3e:4f:7a:71:c4:d3:01:f8:85:82:cf:67:82:9a:a0:28:03:1f:
         c7:fa:c0:7d:bb:aa:21:48:27:af:5e:83:82:cb:e3:9d:c5:5c:
         24:86:4d:70:0b:d9:8c:29:89:ea:0b:8a:82:a3:d0:86:51:95:
         73:34:10:c1:79:85:1f:4a:43:93:25:fd:fc:d4:00:c7:95:68:
         5b:df:5d:02:58:f0:bd:3a:2e:c6:1e:4e:23:2a:a2:1d:13:d0:
         91:d5:33:9b:0c:d6:f1:ff:27:d2:de:42:b6:5c:91:bc:eb:4d:
         aa:a4:98:8b:29:68:9c:07:4c:7e:ab:3c:8c:1a:43:f6:11:30:
         df:75:a3:67:c4:25:5e:2f:9e:3f:ab:07:ed:1c:9c:80:ff:f4:
         07:75:50:22:80:96:1b:a1:92:82:2c:a0:08:78:54:58:7b:d4:
         81:43:08:62:61:fb:a6:20:86:c0:5f:77:e8:e2:e3:aa:79:bf:
         96:88:9d:fc:05:5a:69:da:df:fd:30:f0:e6:52:13:b0:6a:4f:
         91:83:de:53:01:bd:ea:66:c2:84:02:40:a8:1c:5c:d5:ca:dd:
         e5:68:b5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:22 2025 by rpki-client