Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File:                     0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier:          iR5RPbxiD/RbXpXzDaoMrF2MTG2rmrogA0x91YZeObs=
Subject key identifier:   4F:3C:DB:FD:D9:DE:51:B5:55:C6:4C:1B:F7:72:AF:3F:1C:6E:D5:12
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer:       /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial:       0198A12889909DF11E8641459BEBD2C41CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number:          1354
Signing time:             Wed 13 Aug 2025 02:00:44 +0000
Manifest this update:     Wed 13 Aug 2025 02:00:44 +0000
Manifest next update:     Thu 14 Aug 2025 02:00:44 +0000
Files and hashes:         1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: mSuVl/pGgDfACC4u8/O8JjOyQqyf1j3cN4AYNTWLUvE=)
                          2: iWhZAjriW-wjhpW_I7AAFupd8k0.roa (hash: luBfIMH09dvaIbcRpG6juKMigtK01xkZI61aTfT3Bf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:28:89:90:9d:f1:1e:86:41:45:9b:eb:d2:c4:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
        Validity
            Not Before: Aug 13 02:00:44 2025 GMT
            Not After : Aug 14 02:00:44 2025 GMT
        Subject: CN=4f3cdbfdd9de51b555c64c1bf772af3f1c6ed512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:e9:d4:6d:b5:e7:f3:f9:d1:2d:31:7c:b0:
                    36:cd:ef:e2:67:d1:93:88:52:26:5e:ec:42:7d:64:
                    c6:90:87:96:39:7b:c4:02:56:16:ab:12:d7:96:54:
                    88:37:5a:b9:30:cd:98:b0:11:10:2c:f1:49:a7:3b:
                    a7:fa:53:cc:fc:2e:3c:73:e6:e3:d5:cd:13:7f:9f:
                    0b:6f:6e:53:1d:3f:49:7a:4a:54:91:b9:ac:32:85:
                    84:e3:9c:8c:80:27:8a:19:36:04:98:58:19:0c:b1:
                    54:62:c4:10:5e:e4:ca:64:b2:63:1a:f0:e7:90:5d:
                    15:d3:b6:e0:e8:9f:eb:da:70:10:18:28:41:62:3c:
                    ea:f0:47:7e:17:f3:59:f8:bd:d5:cf:ed:cc:66:19:
                    51:6d:71:44:48:b6:cb:8e:ca:36:82:d1:b5:ae:9d:
                    33:58:58:ec:d0:22:e9:d6:ce:f3:3f:9d:52:24:0e:
                    5f:74:0c:9d:70:cd:ae:02:dc:42:ef:47:e7:f7:fa:
                    c4:06:d1:ff:16:1b:37:46:88:8a:e4:1f:d8:5a:db:
                    df:7d:dd:1d:99:d6:09:ee:05:ca:fd:2d:cb:e3:a9:
                    41:83:1e:5c:8e:bc:b7:3b:b2:31:a9:a7:0a:40:b8:
                    26:a9:b6:fb:e2:75:59:38:53:c3:14:9c:3f:4a:37:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:DB:FD:D9:DE:51:B5:55:C6:4C:1B:F7:72:AF:3F:1C:6E:D5:12
            X509v3 Authority Key Identifier:
                keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:35:72:bc:f6:4d:e9:38:b1:3b:2c:19:1e:64:8c:b7:9f:bf:
         04:0c:b7:f4:32:d5:02:53:98:63:bb:51:26:99:91:d1:70:2f:
         79:b6:8f:20:0f:4e:c0:8f:43:9c:94:2b:bc:d7:97:c4:cd:a2:
         71:ef:96:e6:01:06:71:87:a9:e8:7b:d3:bb:07:12:84:de:61:
         51:75:4f:78:52:34:64:39:1f:d8:f6:03:7f:91:89:07:de:70:
         83:d8:bf:b7:3f:51:c4:55:fb:c2:64:76:95:01:24:c9:4a:58:
         46:bf:df:cc:02:b6:bf:e3:3d:d6:58:37:b4:dd:d6:67:37:4c:
         33:1c:76:d4:16:8c:7a:23:61:c9:56:2b:e4:25:5d:a4:3f:eb:
         20:2e:67:86:9e:48:00:73:0d:d7:d5:7f:c9:ec:72:ed:0c:25:
         79:1b:aa:9c:86:e6:28:d3:70:17:ab:77:b7:b7:1a:76:c1:12:
         ff:ad:f5:1e:40:b0:1e:ab:e0:1f:1e:1c:8c:3e:83:c4:c8:5e:
         4f:ec:b5:8b:86:6a:8b:73:5a:f7:0b:c8:da:7f:66:2a:57:9f:
         f7:c9:19:9c:65:63:45:7c:62:de:04:c6:85:8a:7e:91:4d:09:
         41:3a:35:02:25:b1:40:34:3c:81:25:a8:c3:75:14:cb:47:6e:
         cd:73:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:30 2025 by rpki-client