Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File:                     iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier:          9wVSmiGuty0cMl0k+2QaLpDlHJaxhtpx7Mai4DIRgw0=
Subject key identifier:   DC:59:32:8E:CB:1D:56:0A:E2:86:BF:CB:FA:42:7B:09:7A:62:E8:39
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer:       /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial:       01988B0F61BC10847BF6FEADFAA2899DF7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number:          1626
Signing time:             Fri 08 Aug 2025 19:01:37 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:37 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:37 +0000
Files and hashes:         1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: BvHwfj02WQBZrJM369shNSCuIDksBA7+MAwJkuGjVjg=)
                          2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:61:bc:10:84:7b:f6:fe:ad:fa:a2:89:9d:f7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
        Validity
            Not Before: Aug  8 19:01:37 2025 GMT
            Not After : Aug  9 19:01:37 2025 GMT
        Subject: CN=dc59328ecb1d560ae286bfcbfa427b097a62e839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:75:0e:ea:25:9f:1d:21:47:9d:d9:b1:ee:d8:
                    7e:a4:c1:0c:a5:eb:6b:9e:16:27:bf:44:dc:bb:81:
                    80:d9:cd:80:1f:73:ca:e7:23:0f:91:c2:47:54:5b:
                    12:36:fb:27:bc:94:fc:2c:82:69:a8:84:8a:48:ab:
                    cc:a2:49:76:2d:a9:ef:09:c4:ce:3a:89:5d:24:72:
                    dc:72:c1:aa:fc:e6:26:0f:c1:5e:35:b3:7e:73:1e:
                    36:8a:4c:e5:d3:fb:6a:f2:70:30:86:46:a6:98:99:
                    6e:f8:3e:41:01:ff:fb:75:66:aa:ef:ec:4e:e9:0a:
                    64:61:ac:67:1b:c1:dc:a3:8e:62:45:a8:7c:21:1a:
                    f9:59:c4:b5:a5:f3:ab:d5:d1:99:8a:61:12:9a:c9:
                    df:8b:49:6e:ef:d7:8d:f2:3f:03:35:17:57:2f:db:
                    c5:fc:83:f6:0b:c5:31:32:b7:4a:30:dd:fa:ac:b5:
                    c7:d0:68:73:84:91:3c:e2:8e:2d:31:62:35:af:1e:
                    a1:e8:49:d6:6b:a0:2f:7b:4b:3b:f3:76:e5:28:cc:
                    62:b8:b5:2c:f1:7c:c2:23:88:90:a5:30:b5:b9:7d:
                    83:e7:04:a9:d7:17:35:27:d8:97:b2:9e:1e:67:d2:
                    6b:6f:c7:be:16:1f:1f:5b:21:b2:8a:62:f6:35:05:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:59:32:8E:CB:1D:56:0A:E2:86:BF:CB:FA:42:7B:09:7A:62:E8:39
            X509v3 Authority Key Identifier:
                keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:70:8a:9d:fc:ff:03:bb:fa:37:df:95:cb:5c:ef:ae:b9:
         dd:19:54:31:fa:51:cd:f0:f8:82:14:0b:d9:3a:ab:02:41:60:
         d9:83:54:92:a5:aa:94:6a:7a:ed:02:ef:e6:40:2e:4e:22:2a:
         7f:12:ed:6f:99:8a:04:1f:7d:79:46:d2:0a:83:4e:02:d1:c7:
         67:74:0d:54:36:37:d6:d7:45:1a:e6:ff:cd:73:c3:5a:11:28:
         09:99:48:fc:c1:3d:44:da:38:c8:be:a5:90:bc:4b:54:0d:6b:
         a8:69:f9:be:c5:c3:b3:e5:64:56:cf:fc:91:93:7b:6a:88:d3:
         b1:cd:fe:fd:75:fb:6d:40:b7:80:46:60:7b:b6:65:75:69:c1:
         c5:c5:dd:ae:0f:c4:61:32:50:dc:1d:ed:02:42:15:56:fc:6a:
         db:60:3a:ae:38:f9:a2:8f:b9:25:f7:a5:d3:3c:57:5d:07:90:
         a7:92:0e:01:f8:b7:fe:aa:3f:cc:ca:ce:92:fc:85:fe:f0:81:
         46:cb:c3:d9:54:c9:ee:1c:c9:69:14:60:fa:9e:9f:8c:73:c4:
         1b:0d:81:ab:a5:fd:46:97:a3:5f:1c:65:9b:87:68:02:5e:1c:
         4d:34:11:25:0d:5a:b7:99:aa:3c:63:51:2d:e4:68:c0:aa:44:
         39:77:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:24 2025 by rpki-client