Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          cZWsqmrULlxJbReIPWmx9TL5U7wzgk+gPODBme4DMGs=
Subject key identifier:   E0:A7:B7:91:76:81:1E:6E:0E:E0:FB:99:F2:3E:A8:E0:C6:4B:AD:02
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       0198A04E00D28D2898CF5F63EFCA60E9C2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          0CA2
Signing time:             Tue 12 Aug 2025 22:02:03 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:03 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:03 +0000
Files and hashes:         1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: Y/UuCHGhgQrIMw4/fjcqYJTPgf5qJ8Dp/QrAy3K4R60=)
                          2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:00:d2:8d:28:98:cf:5f:63:ef:ca:60:e9:c2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Aug 12 22:02:03 2025 GMT
            Not After : Aug 13 22:02:03 2025 GMT
        Subject: CN=e0a7b79176811e6e0ee0fb99f23ea8e0c64bad02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:c9:1b:0c:0c:99:b8:23:b5:d1:76:24:00:
                    ae:d7:d5:58:23:d0:0c:36:ec:be:f4:0e:28:2b:fa:
                    2f:12:06:71:ad:f8:ba:fc:2b:5b:b7:db:9e:15:0a:
                    e4:95:1a:93:71:4f:3f:13:5e:e3:d4:8c:66:57:ac:
                    17:aa:7c:f4:29:7e:61:ed:30:99:46:78:77:04:be:
                    82:46:1a:9f:42:96:f0:9e:3f:f4:61:35:51:1d:8b:
                    63:8f:44:7f:26:a6:4e:ee:be:9c:41:e9:d6:bd:c9:
                    bc:eb:74:2b:0d:49:33:1a:0f:15:b5:82:e9:d4:83:
                    26:94:4c:92:ce:52:b0:d6:a8:fe:f8:3d:a5:a3:66:
                    ad:b0:6d:2e:28:78:4c:45:3d:11:f5:b1:bb:58:51:
                    b6:80:62:f7:f9:bd:cd:21:fb:d3:c6:81:8e:24:2a:
                    97:af:d7:94:67:3c:ba:40:14:15:75:ef:54:56:5b:
                    79:ba:12:f8:07:d6:84:77:e0:66:87:d4:68:89:d8:
                    b3:08:32:97:d0:eb:04:87:de:4b:a4:9a:65:fd:15:
                    49:ed:a0:8b:63:28:d4:7a:0f:e7:e1:84:77:73:a6:
                    7f:f9:2e:1e:fc:e8:69:55:1f:ed:4f:93:a6:a3:0c:
                    62:82:fe:7a:c8:41:55:d5:c7:63:57:a1:fd:f6:73:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:B7:91:76:81:1E:6E:0E:E0:FB:99:F2:3E:A8:E0:C6:4B:AD:02
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:db:2d:c4:e3:6e:f0:00:ad:d2:b8:1f:5d:bd:d1:59:93:8b:
         4e:1e:46:d4:00:bb:78:87:ce:bc:e7:36:cc:85:2f:2a:06:2e:
         ce:92:5e:fa:96:89:7a:1d:76:87:88:3c:f1:e8:a9:60:35:6b:
         b1:72:16:a0:11:0b:46:eb:fe:a5:29:f0:7f:93:7b:8d:74:6b:
         52:a7:3b:87:7a:1d:56:e3:ea:0b:fe:27:ae:11:b3:dc:85:47:
         46:fb:72:d1:41:fe:b8:fd:b7:9a:b9:ab:c0:9f:89:57:fd:33:
         6d:8c:d6:fa:5d:2a:49:c0:69:ef:e8:df:18:1b:fc:07:d1:c0:
         9e:e8:da:cd:f1:b8:58:db:61:ae:77:13:7a:25:37:0f:66:a6:
         73:1b:79:f5:53:70:58:f7:df:8b:e3:00:d6:f0:12:bf:7b:c4:
         bd:fa:ef:7f:81:29:a1:50:23:df:62:0d:23:07:cf:66:a6:f6:
         c4:61:7b:92:6e:27:13:01:72:41:db:cb:6a:81:a2:4a:4a:87:
         46:51:d0:55:30:db:7d:17:ca:92:9e:d3:3a:0c:f3:6d:86:15:
         ad:3a:5f:af:8b:98:b9:57:29:aa:33:15:1c:d8:4b:65:85:93:
         01:12:e3:c8:03:f5:e0:e1:e8:8d:26:77:17:f2:c1:94:3b:c3:
         51:b6:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:40 2025 by rpki-client