Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File:                     1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier:          h2AgyiA11Pob2eDJLjNmGnXZdKAmtBdR6Z3Do0dYuUc=
Subject key identifier:   DC:36:D5:0F:7A:6B:92:E9:A6:9D:4C:95:BD:69:E3:AC:EF:AA:6D:B0
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       0198955B98ACCED5F769AF1AAD82380337AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number:          0C03
Signing time:             Sun 10 Aug 2025 19:01:04 +0000
Manifest this update:     Sun 10 Aug 2025 19:01:04 +0000
Manifest next update:     Mon 11 Aug 2025 19:01:04 +0000
Files and hashes:         1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: xikrR+hm7BGRIlGo7o9t37x0HZ7MeG7b1kwLY3K7VyI=)
                          2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:5b:98:ac:ce:d5:f7:69:af:1a:ad:82:38:03:37:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: Aug 10 19:01:04 2025 GMT
            Not After : Aug 11 19:01:04 2025 GMT
        Subject: CN=dc36d50f7a6b92e9a69d4c95bd69e3acefaa6db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f6:1b:82:21:e2:43:b7:24:89:50:eb:52:4b:
                    4b:93:14:b3:22:5c:7c:b3:7e:34:e2:27:68:5a:25:
                    0a:5c:a8:a5:03:dd:0b:ef:8d:cf:60:b6:97:cc:e4:
                    07:08:dd:21:3e:3e:9c:05:ed:c2:cb:73:03:50:7a:
                    e1:fb:fe:56:18:92:48:0a:43:f1:b9:21:9a:87:b7:
                    23:40:b7:b4:35:99:04:04:c0:51:8e:ed:de:cc:58:
                    c0:5e:5d:14:3b:01:88:ff:10:aa:82:64:04:5f:02:
                    c3:5e:f6:70:15:f5:78:5e:5d:e9:e3:e6:f6:e1:91:
                    f1:e3:ec:fe:f3:66:f4:26:1b:cb:5a:f1:7d:b6:97:
                    24:db:5e:59:b1:d0:6b:90:7b:85:67:b8:5d:89:80:
                    eb:f0:07:2d:aa:3e:7e:86:65:b1:dc:94:6c:e4:cd:
                    1d:63:3a:18:1f:07:1d:da:89:95:f7:6e:93:bd:05:
                    3b:b3:c5:f1:b3:06:d9:7b:74:80:d3:d7:65:49:0d:
                    b2:11:79:0f:83:b1:c0:e2:94:05:f7:14:db:5b:04:
                    07:2e:89:83:fb:b3:7d:c2:07:7f:ce:21:18:15:ff:
                    72:a3:96:a9:d3:c2:be:1c:13:d1:63:b5:5c:a8:ce:
                    a4:81:4c:33:bf:24:07:e1:ee:80:30:e8:ed:f2:ab:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:36:D5:0F:7A:6B:92:E9:A6:9D:4C:95:BD:69:E3:AC:EF:AA:6D:B0
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:f1:0d:8d:41:59:4a:45:16:d1:ec:ad:2d:6c:2e:43:05:
         89:26:cf:0f:3e:04:bf:a0:55:4f:70:35:d5:58:4d:40:58:08:
         da:2c:98:32:c0:6f:78:d1:fe:ed:9e:ed:ab:41:9e:78:00:a3:
         7d:52:3c:3b:be:29:27:3d:c0:de:36:7c:92:11:66:24:f6:51:
         a3:a4:4c:47:ef:7a:64:91:78:45:72:cd:9a:c3:c2:14:f5:c6:
         ee:ea:4f:72:24:50:22:3e:cc:2a:31:f3:0f:d1:15:98:ce:6f:
         8d:7f:01:bf:7f:20:41:0e:b4:74:04:3c:32:2a:bc:b5:e4:31:
         61:ee:59:e7:72:ab:a2:d8:5e:45:7a:32:8d:d4:84:3f:ac:0b:
         07:93:f7:83:7f:a9:ba:a1:5c:1b:f8:86:b2:47:73:0f:7d:07:
         d8:46:8d:3e:7b:af:f1:79:0e:09:87:75:77:42:a8:97:0c:28:
         f2:41:a2:06:a0:ad:f3:5e:f1:21:b3:54:96:35:c5:fc:f4:84:
         c4:ab:84:08:1e:7d:38:9e:a3:af:86:21:86:84:a6:a6:f4:42:
         99:c8:21:e4:69:1e:28:e6:6b:6b:40:7c:45:d8:44:db:82:a0:
         74:ad:84:11:3b:dd:0a:e8:9a:25:e2:c4:3d:e7:c2:39:18:db:
         0e:6b:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:50 2025 by rpki-client