Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File:                     1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier:          iqVpK5BSKIu4gywWSOXd/dvtAd7dQ/PwdvMkwaZWGIE=
Subject key identifier:   55:27:B9:54:4B:76:25:1F:29:4F:27:B5:4E:FE:73:B8:6F:B3:96:66
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer:       /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial:       01989FDF3E789A52907FC179914DBD37944A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number:          02C1
Signing time:             Tue 12 Aug 2025 20:01:04 +0000
Manifest this update:     Tue 12 Aug 2025 20:01:04 +0000
Manifest next update:     Wed 13 Aug 2025 20:01:04 +0000
Files and hashes:         1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: nm2K2tFbTwrFAR4oI3/snkTP3jQLJ0fUTdqRIleDKQw=)
                          2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:df:3e:78:9a:52:90:7f:c1:79:91:4d:bd:37:94:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
        Validity
            Not Before: Aug 12 20:01:04 2025 GMT
            Not After : Aug 13 20:01:04 2025 GMT
        Subject: CN=5527b9544b76251f294f27b54efe73b86fb39666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:de:09:1c:9d:c0:c5:7e:1d:9d:fd:45:bd:
                    36:98:06:86:85:46:90:27:5e:13:35:11:95:e4:7d:
                    54:28:6e:a6:a3:e6:78:d0:b2:9b:73:d8:06:68:5a:
                    72:9e:2a:97:61:14:b8:68:8a:23:83:12:7e:f6:71:
                    41:ee:92:fc:ed:05:38:71:54:80:70:64:6f:85:82:
                    35:f0:de:65:13:f2:9a:97:9f:31:d5:3a:4b:d4:cb:
                    0a:4f:10:af:b3:5d:2e:9c:ee:03:de:40:46:fb:87:
                    46:2a:8a:4d:a2:97:28:01:4c:59:ec:72:d6:ce:24:
                    cb:a9:aa:f7:db:60:99:bc:c4:ad:4a:b5:c9:31:a3:
                    e2:7c:eb:36:82:ab:fc:2c:dc:00:84:75:cc:ac:1f:
                    7e:39:3f:56:41:a1:8f:98:1a:2c:f2:fe:af:f8:0d:
                    3e:2f:da:13:6a:46:a7:86:aa:ff:57:eb:c3:3c:5a:
                    0b:1e:e7:25:6a:26:a2:97:ef:ed:c5:fa:8f:5b:20:
                    68:b1:54:6d:18:80:13:89:6f:7d:d5:4a:5d:0b:ee:
                    6f:da:81:56:d6:12:f2:ef:24:c4:51:62:04:b1:74:
                    66:f6:a5:c7:cd:24:13:30:d1:1f:2b:48:d6:64:05:
                    b3:0a:4d:a8:92:35:b4:54:70:ec:d4:c6:bc:31:64:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:B9:54:4B:76:25:1F:29:4F:27:B5:4E:FE:73:B8:6F:B3:96:66
            X509v3 Authority Key Identifier:
                keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a9:0f:dd:f7:fc:cf:e2:d4:43:8b:9f:15:fb:db:d8:b5:82:
         58:a1:23:88:52:0a:fc:f1:78:6a:b8:90:7e:37:5e:b2:90:38:
         8a:dd:49:8b:96:76:33:a5:03:8e:ce:e5:58:8c:4f:bd:ef:bc:
         c1:c1:09:ba:e7:7a:9a:e3:11:3d:11:f0:8c:09:ba:dd:14:b5:
         4a:d2:c9:e0:cf:68:1f:9b:94:76:dd:9f:9f:d0:5d:a6:f7:07:
         95:bf:8d:91:0f:88:cb:a0:86:1d:ba:83:25:cf:3f:da:f0:0b:
         77:e7:23:99:07:01:22:16:4e:73:21:e6:19:bd:cf:f4:6e:4c:
         1e:f2:57:22:45:f5:cc:eb:a2:28:04:2c:82:66:86:24:63:e8:
         46:08:a7:56:af:06:ae:fd:6d:0c:eb:83:7a:27:9d:16:4f:fd:
         c5:a2:a3:4d:e7:40:15:db:89:6d:5c:70:58:22:a2:cc:87:16:
         ec:c5:73:9a:da:2d:30:01:ee:9a:0f:27:7f:06:9d:6f:bb:23:
         a9:d8:15:88:42:ac:ca:ee:b4:e6:f3:66:65:39:f2:db:2d:4c:
         3c:2c:08:77:4b:27:10:4d:62:ff:65:3c:dd:5a:c1:92:2f:d5:
         38:0d:6f:32:12:72:da:b5:d1:8c:06:d1:5f:f3:4a:d7:54:8c:
         7a:48:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:50 2025 by rpki-client