Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File:                     Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier:          D3VGOro9rfyEXQWRRbOG33nGvnXSXH2gjuaAEA7lIpk=
Subject key identifier:   88:92:05:AD:3A:76:86:E5:7B:08:DA:13:0F:B8:27:F2:4D:6B:64:15
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer:       /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial:       019896374C0A4A9BF9CA0C9062241295333C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number:          030C
Signing time:             Sun 10 Aug 2025 23:01:02 +0000
Manifest this update:     Sun 10 Aug 2025 23:01:02 +0000
Manifest next update:     Mon 11 Aug 2025 23:01:02 +0000
Files and hashes:         1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: KCmrKPHbl5MQH5ij3PI6cvRmglKuBqY/gsI949yBYdk=)
                          2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:37:4c:0a:4a:9b:f9:ca:0c:90:62:24:12:95:33:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
        Validity
            Not Before: Aug 10 23:01:02 2025 GMT
            Not After : Aug 11 23:01:02 2025 GMT
        Subject: CN=889205ad3a7686e57b08da130fb827f24d6b6415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:ed:ec:04:8a:9f:83:93:d8:9b:16:92:a8:
                    6d:6f:35:d0:28:6b:ab:1e:5c:60:6b:c3:86:09:fd:
                    7c:d6:6f:2b:b5:d5:6b:5a:5e:05:38:48:8f:39:59:
                    f3:5d:40:f5:1d:e0:74:4e:26:90:3e:45:67:b1:c5:
                    51:99:17:40:34:33:28:66:e1:dc:dd:47:24:a2:56:
                    28:67:44:04:e9:56:dd:d1:03:3f:1c:04:18:00:86:
                    84:65:96:26:7c:40:ff:b1:3c:3f:9d:ca:85:26:60:
                    92:ee:1c:39:a6:e8:ea:c6:6c:38:3b:82:1c:eb:0d:
                    01:e0:6f:14:fe:83:30:80:66:bb:13:dc:ec:74:f8:
                    d6:19:b8:ea:f2:f1:0e:0b:42:47:0e:32:50:54:4e:
                    05:58:35:27:12:26:17:e7:4d:57:ec:60:76:15:1b:
                    96:94:36:6e:20:ca:d7:6e:82:a4:f1:ad:f7:18:1d:
                    df:e9:bd:7d:5b:4e:cd:10:a6:fd:a3:7b:53:e2:ec:
                    76:2b:13:2d:f5:07:a3:ae:50:f4:70:cb:b0:5e:82:
                    66:55:17:e5:a9:00:77:1d:c6:0c:46:35:01:d2:d5:
                    11:36:e8:7b:5f:63:1f:7e:4f:23:8d:26:3f:81:e1:
                    e2:b7:b3:a5:f0:72:22:13:1a:e1:b5:19:a8:5f:ca:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:92:05:AD:3A:76:86:E5:7B:08:DA:13:0F:B8:27:F2:4D:6B:64:15
            X509v3 Authority Key Identifier:
                keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a0:55:8b:f4:28:7a:35:5f:08:4f:87:ed:0c:70:2c:75:85:
         7f:4e:e2:ca:bc:f6:20:8e:23:91:67:71:d5:20:ba:7f:08:57:
         d7:43:e4:f4:53:ef:e2:4a:cc:5e:a7:18:b5:eb:e0:54:06:2e:
         a4:3c:98:f7:d7:c0:8b:74:95:9b:cd:96:6f:48:27:cf:64:96:
         1c:c1:a0:d2:5c:cc:f3:e7:4f:00:f2:33:5f:60:46:5c:70:ad:
         b7:db:71:73:3b:1e:bf:42:4b:45:3c:63:91:d3:5c:1c:46:7b:
         b6:4c:eb:20:86:78:63:79:34:db:3e:3f:30:12:63:d6:65:63:
         92:8a:6b:cd:de:16:b7:42:5d:b6:e9:f9:e9:87:18:20:a7:45:
         f6:10:b4:95:98:eb:47:b1:2b:f6:a5:aa:bd:3b:e6:00:58:29:
         1f:93:2c:9f:6e:fe:0b:7e:64:15:02:02:78:f0:45:ff:37:fd:
         03:73:27:9b:a1:f4:50:29:a5:74:de:53:21:b4:7c:88:db:4a:
         f7:15:ed:d6:14:78:8f:82:2e:14:7a:a9:0d:ac:51:40:55:dc:
         0e:42:e6:c0:f1:2c:b1:82:5c:cd:88:46:2e:0a:81:6e:0f:d9:
         09:58:f4:7b:4c:cb:82:15:c3:91:19:2c:e4:88:30:bc:fd:dd:
         75:08:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:36 2025 by rpki-client