Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File:                     CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier:          zBcAZkw/zB39AtyypMtqlerdkBjJgv0s0/2GyMEp0Cs=
Subject key identifier:   1F:EA:5A:B1:28:0A:39:65:7E:CF:BB:7F:95:50:F7:2F:FC:B8:0C:CE
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer:       /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial:       0198745061D69C40C167131AE46F3058D8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 09:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:21 +0000
Files and hashes:         1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: ezsigMgXSRnb35e6rwAS/bBZLXZVqeLy/hnpCxUzGKo=)
                          2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:61:d6:9c:40:c1:67:13:1a:e4:6f:30:58:d8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
        Validity
            Not Before: Aug  4 09:01:21 2025 GMT
            Not After : Aug  5 09:01:21 2025 GMT
        Subject: CN=1fea5ab1280a39657ecfbb7f9550f72ffcb80cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:04:27:7a:0b:37:41:0c:b1:b5:d1:ec:5f:
                    27:08:3d:8c:88:e6:35:57:ad:21:d4:1b:b8:30:f6:
                    ce:7b:19:95:56:43:09:55:56:5b:95:ce:fa:e1:5c:
                    94:43:29:4b:4d:35:cc:f5:21:d0:d4:d3:79:b8:de:
                    1e:a5:91:26:ca:58:45:fc:76:2f:bf:23:3b:ec:78:
                    f9:f1:3a:b7:ae:86:4e:4b:92:f4:96:ea:b6:32:3b:
                    b6:7f:a2:90:46:21:84:6c:ce:ef:bd:90:ac:a5:bf:
                    ef:3b:16:ad:74:d0:a8:59:b5:2e:ed:9b:27:9b:7e:
                    55:9f:38:fd:40:17:9a:f4:81:c4:d0:fa:55:14:fa:
                    50:bd:6c:34:13:5f:cb:79:a5:7a:7a:23:e2:8d:f8:
                    1d:a2:35:0e:28:29:5e:e1:b6:8a:3d:47:bf:f9:71:
                    96:c0:d8:be:5d:80:4f:55:19:b0:d4:ac:a3:7b:21:
                    33:65:8a:5a:1b:1c:55:e7:8b:ea:af:1f:da:b9:4d:
                    75:5d:70:c7:66:e5:8d:ed:46:14:88:4f:a6:e4:c2:
                    63:4d:42:50:6f:33:58:71:31:8a:82:f4:00:57:bb:
                    1d:09:83:62:78:f6:24:48:20:68:18:14:cc:8b:7d:
                    f9:a6:e6:91:76:fd:f7:6e:b3:1d:e1:b6:a9:0d:ad:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EA:5A:B1:28:0A:39:65:7E:CF:BB:7F:95:50:F7:2F:FC:B8:0C:CE
            X509v3 Authority Key Identifier:
                keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:08:a1:15:0d:7e:5f:04:80:5e:7c:9d:28:19:a2:a1:4c:
         90:e3:2c:1d:38:41:be:d4:69:53:06:c4:23:92:b3:6e:c6:21:
         54:f6:04:ab:16:14:e6:14:d4:41:25:fd:c2:d0:8d:e8:27:ad:
         1b:61:57:fb:d7:3d:40:7c:70:5f:f9:fb:70:6d:a2:ee:3e:62:
         a0:75:3e:1a:b6:ee:a3:be:a8:77:84:17:97:39:31:38:36:f9:
         2d:4d:2c:dc:71:9d:63:55:2a:e1:eb:46:2d:3f:c2:e0:6d:15:
         5e:2f:47:89:f7:c3:ab:0b:6c:7a:4c:6b:29:5e:7f:0c:16:05:
         a7:f3:42:81:1a:bd:f7:d3:6e:a6:94:23:b1:d4:7a:71:89:14:
         6e:86:2a:12:79:07:0a:51:5e:c1:bb:15:fa:5b:8b:a0:41:20:
         d5:85:88:2e:34:8e:d1:be:e2:ef:f5:76:f5:95:93:c6:87:02:
         11:e3:ee:2c:c2:bb:b1:96:17:58:ba:be:5b:bc:b8:18:0f:23:
         31:7a:f9:b1:14:e2:f5:37:02:49:ac:3a:7c:62:6d:46:6e:9b:
         88:f1:d5:2e:22:18:be:3d:ca:84:5f:f0:08:c2:ff:22:84:a6:
         ca:6e:13:e0:e1:6a:e3:33:76:7d:66:ce:e2:12:7e:ff:d0:27:
         03:a3:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:39 2025 by rpki-client