Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File:                     IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier:          nMq7T4PUjZnXZjv0aOu1Q/kGNUsy6pmQrbUfg9iStpA=
Subject key identifier:   06:55:9D:10:FA:EE:BF:67:DC:E2:82:C2:B0:80:14:40:FB:5B:83:4B
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer:       /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial:       01988EEB98BECBD44858EFD41828AD3C8C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number:          046E
Signing time:             Sat 09 Aug 2025 13:01:01 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:01 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:01 +0000
Files and hashes:         1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: sW6JHaLTgwTAN7HlRVHzuMfYagAk79+PKfwdqVY028E=)
                          2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:eb:98:be:cb:d4:48:58:ef:d4:18:28:ad:3c:8c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
        Validity
            Not Before: Aug  9 13:01:01 2025 GMT
            Not After : Aug 10 13:01:01 2025 GMT
        Subject: CN=06559d10faeebf67dce282c2b0801440fb5b834b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:bd:8a:f4:a1:c3:a0:a5:f7:0f:83:d8:26:
                    8b:ba:e1:ef:f0:7e:0e:e8:d7:00:5c:7b:59:e2:c8:
                    2d:11:1c:e4:5f:0f:67:0a:e3:f2:08:10:80:21:72:
                    04:11:07:0d:6e:34:db:1b:68:5a:84:77:a7:8d:cc:
                    14:04:94:b0:78:66:39:fb:3d:7f:57:22:48:ac:c0:
                    ff:48:7e:0e:1a:7f:a7:a1:f5:de:84:46:80:f0:89:
                    67:9d:14:e1:a1:61:f3:80:74:f3:97:0b:5e:ab:05:
                    bd:67:36:46:91:d9:2a:49:1e:4b:d1:5d:2b:01:b9:
                    90:3f:16:3d:f4:86:fe:09:c4:c2:e8:aa:16:92:c1:
                    dc:e4:ad:aa:76:11:b4:ec:24:ce:33:bf:50:79:75:
                    cb:41:91:61:69:cc:5a:40:86:d4:ba:eb:a9:3c:aa:
                    63:d6:1b:ff:95:c8:00:9e:96:28:97:8e:61:51:7d:
                    b4:c2:5a:57:b9:6d:05:61:b0:e6:f4:c4:6b:17:57:
                    45:f4:34:af:32:9e:34:c1:94:0a:dd:3e:ad:81:f5:
                    21:39:13:59:84:0f:9b:62:41:62:fc:db:1e:74:4a:
                    51:f0:22:70:a6:69:17:46:26:6f:c6:b0:16:fc:b9:
                    ef:6e:56:2c:c0:9c:70:c4:48:4d:25:85:ae:56:42:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:55:9D:10:FA:EE:BF:67:DC:E2:82:C2:B0:80:14:40:FB:5B:83:4B
            X509v3 Authority Key Identifier:
                keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:55:d5:fa:0c:21:8b:c3:24:52:ec:d2:ab:cb:3e:d8:a1:f2:
         88:94:5f:97:ce:39:55:79:14:d7:2c:65:05:07:bb:81:84:d6:
         4d:f7:26:dd:6e:84:5e:be:42:b2:ce:46:e6:e2:d5:3b:ad:f7:
         44:44:55:01:b7:0c:65:70:bd:ba:ea:3a:20:13:cf:62:1b:9c:
         f7:24:d1:1a:11:3e:36:cc:15:88:4e:e1:8f:ee:29:7d:0b:33:
         dd:16:c4:b4:fa:38:22:cc:f4:1f:fb:f9:0c:0c:25:0c:7d:25:
         20:bb:6f:0e:57:ff:e2:53:2c:44:fa:30:94:4a:d7:e9:fe:27:
         d7:82:bb:65:62:8a:8e:1e:fe:8d:13:3f:8b:22:58:cf:59:70:
         fc:fe:e2:b1:9b:f5:1c:bd:3d:73:d5:42:21:10:f5:d9:a6:b8:
         ee:79:26:00:07:e4:43:e0:86:f9:50:54:1b:74:5d:e2:12:ac:
         f8:3f:fe:c3:27:0a:ee:f8:13:cd:ce:be:20:e0:82:9c:54:3c:
         e0:26:2b:29:42:eb:dc:96:6c:49:3c:9c:f0:02:77:f8:04:68:
         9b:6a:57:1f:50:86:64:57:d4:13:c5:92:fb:40:26:13:5e:86:
         ea:8e:55:e1:85:df:c5:ea:55:a9:4d:a3:9b:53:88:bc:89:50:
         a5:1d:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:51 2025 by rpki-client