Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File:                     Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier:          P7E2E8dgb86HjvyCHc7C+1dF0Aq0wqBd6Vd1XorsXoM=
Subject key identifier:   44:12:3B:9B:AF:11:21:46:83:E1:95:26:6D:71:79:60:AF:14:F1:1B
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer:       /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial:       0198A1291C64F72C2D043F063FF8E6B8663D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number:          1142
Signing time:             Wed 13 Aug 2025 02:01:22 +0000
Manifest this update:     Wed 13 Aug 2025 02:01:22 +0000
Manifest next update:     Thu 14 Aug 2025 02:01:22 +0000
Files and hashes:         1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: 12kWI5OuOnb0a7yOBBQjVXATljwwED8wRV2fe5SoDhw=)
                          2: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (hash: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:29:1c:64:f7:2c:2d:04:3f:06:3f:f8:e6:b8:66:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
        Validity
            Not Before: Aug 13 02:01:22 2025 GMT
            Not After : Aug 14 02:01:22 2025 GMT
        Subject: CN=44123b9baf11214683e195266d717960af14f11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:b4:bb:94:79:08:fc:25:65:5e:ee:9b:2a:
                    c1:96:b5:35:48:97:02:4e:de:e7:48:03:a8:24:be:
                    f9:19:41:1d:3e:fc:7c:79:3f:8f:9f:30:72:18:ca:
                    ee:6c:a9:c8:31:6f:a3:9b:c2:df:8a:ed:56:d9:66:
                    a8:6f:a2:bc:1b:76:6b:5a:3e:26:ff:61:da:57:7c:
                    1a:af:f2:a2:da:13:a1:8c:9f:f0:e1:74:30:72:f8:
                    f7:d0:8b:14:93:14:53:a9:f2:b8:81:a6:eb:f5:23:
                    45:a1:6b:b4:86:3a:e7:5d:6f:e2:2b:3a:b3:1a:74:
                    c4:b0:3c:be:a8:e0:7e:86:f8:25:e4:26:82:ea:01:
                    df:be:97:68:5e:44:98:e7:d7:10:58:8a:e5:70:76:
                    7e:19:0f:52:2d:f9:6d:b9:75:01:54:91:c7:a0:7f:
                    00:6f:7d:33:ee:9c:82:9e:4d:0d:77:3e:db:c2:6f:
                    33:57:94:d8:82:81:76:f3:73:cb:86:45:2d:06:c6:
                    74:3c:96:87:69:d4:b8:3b:a7:fa:2f:ea:9e:a3:21:
                    19:2b:da:97:ff:25:7f:07:8c:77:78:5d:76:2e:2c:
                    37:76:1c:04:0d:a5:ce:3a:f7:c1:a7:00:a7:19:e9:
                    ea:e2:46:cf:9a:59:ef:d3:94:00:af:a8:f8:a6:34:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:3B:9B:AF:11:21:46:83:E1:95:26:6D:71:79:60:AF:14:F1:1B
            X509v3 Authority Key Identifier:
                keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:ec:bd:9a:9c:b1:cb:4b:6a:54:13:0d:af:04:f5:2f:dc:
         0b:e4:e4:e4:42:86:bb:d7:44:c7:b6:ea:a0:ed:26:ae:62:0c:
         3e:1d:5b:3c:8b:34:85:ec:2f:ea:59:d9:19:a8:5b:40:36:da:
         76:d7:fd:f7:57:04:ab:cf:22:a0:8d:f3:a8:15:ca:1d:59:5b:
         38:b0:ce:eb:02:72:ae:10:24:ec:9d:3a:6c:9f:3d:ef:11:d5:
         5f:ef:c9:2a:97:2a:fe:3c:9b:79:f0:79:a1:0b:76:18:11:95:
         c9:4e:be:de:2c:6f:a7:e8:20:86:82:60:7f:75:be:24:a0:fc:
         dc:d7:40:1c:e6:09:c5:5d:52:19:77:a3:3f:28:1f:b4:46:45:
         3a:d4:35:d1:3a:ec:36:da:5c:07:65:b6:13:59:bc:69:2e:20:
         f5:9c:19:22:87:26:e0:27:9f:9a:d2:af:74:cf:ff:e3:e6:2e:
         fe:46:4a:f7:4d:42:cc:80:eb:2f:1e:fb:ff:11:ef:a8:b1:13:
         dc:19:52:0c:5f:89:ce:fd:5f:98:12:a3:00:50:dd:6a:0f:cc:
         ee:28:40:6f:49:89:b3:67:87:d9:55:b3:cf:a7:85:aa:59:a4:
         2b:df:c9:f9:0f:71:89:03:26:2d:55:80:e4:5a:10:35:af:a5:
         da:77:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:36 2025 by rpki-client