Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File:                     4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier:          +22MvuQfjoBnNGmDwc3avaDasA80nLcA4ynvs0EV+lM=
Subject key identifier:   ED:3C:94:BC:B2:FC:AE:31:DF:9F:ED:49:3C:CA:78:2B:80:B4:8C:9B
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer:       /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial:       0198729891AE3257CDEF322DD4720E94B9FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number:          136D
Signing time:             Mon 04 Aug 2025 01:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:58 +0000
Files and hashes:         1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: mQHro+ulCgjf+APGTFqRKM5CRlN2o7Pm6ojpR9xjrXs=)
                          2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:91:ae:32:57:cd:ef:32:2d:d4:72:0e:94:b9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
        Validity
            Not Before: Aug  4 01:00:58 2025 GMT
            Not After : Aug  5 01:00:58 2025 GMT
        Subject: CN=ed3c94bcb2fcae31df9fed493cca782b80b48c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:75:5d:3a:2a:55:84:dd:2f:f6:5a:6a:82:
                    04:1e:57:71:b8:f6:ed:52:e6:2c:4f:66:2a:9d:b8:
                    ca:24:0c:8e:ad:d4:1a:d1:59:c9:ad:28:4c:57:1f:
                    3c:c7:0e:c7:62:bb:fb:a5:0a:b7:7f:80:7f:45:35:
                    e8:91:b4:12:9a:1f:0a:3b:2b:a4:6a:e7:f1:61:92:
                    92:7d:43:48:50:38:f9:b9:7b:6e:12:29:0b:3b:49:
                    d4:e4:b6:b2:64:b8:65:68:2b:20:c0:3e:24:db:5c:
                    2a:57:40:1c:9d:7f:31:41:b0:3e:36:63:04:08:48:
                    ab:76:47:6a:e8:00:96:28:ab:b5:6c:74:9c:ca:1a:
                    db:c2:08:34:b9:63:90:66:e8:85:11:bf:b0:f2:e8:
                    f1:8c:27:99:76:6f:42:12:62:32:1b:d7:71:11:ed:
                    ad:34:a4:fa:55:68:dd:c2:75:b4:b0:09:38:f0:3d:
                    55:db:f1:d6:1b:d4:30:e0:8e:c4:a0:67:ae:40:d8:
                    fd:e8:e3:8d:9c:9e:73:20:91:ec:a7:60:43:37:6f:
                    30:4e:6e:24:51:52:73:70:ab:8d:e9:1f:23:c3:e0:
                    10:51:a1:07:67:b8:64:bc:f8:28:ab:80:b4:cb:b8:
                    25:01:44:ac:0c:57:d7:3d:51:32:db:2d:e3:eb:9f:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:94:BC:B2:FC:AE:31:DF:9F:ED:49:3C:CA:78:2B:80:B4:8C:9B
            X509v3 Authority Key Identifier:
                keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:25:00:d4:d1:7c:ad:93:47:29:c1:ea:75:2e:73:97:90:4b:
         14:49:9f:25:e3:64:0c:19:7c:d0:76:fa:9a:95:c3:8a:d3:65:
         81:8f:0b:2f:e3:55:76:02:bb:12:18:72:dd:5b:b0:70:ec:6b:
         dd:52:e8:10:f1:f9:f5:a3:48:d0:8d:d4:79:6d:b7:d0:7c:3c:
         a5:ce:ea:92:5f:3a:1a:a8:5c:95:93:47:fe:e9:35:e0:c9:8f:
         82:e0:56:51:29:1f:08:d4:4d:07:42:80:74:a4:ce:35:74:10:
         d6:98:6e:71:78:1a:fc:30:56:2a:d0:b4:9b:9c:be:6c:42:ba:
         04:14:27:0e:75:45:72:a8:32:2c:25:e9:7c:cc:0a:c7:96:9f:
         8b:1e:e5:22:c0:94:95:c5:e3:62:24:ae:8f:17:8f:4f:b0:83:
         3d:9d:35:7b:d8:b5:75:24:b6:70:5d:9a:52:a2:ba:f8:b2:91:
         51:a5:4f:7b:fe:d1:5d:c5:4d:69:36:e5:e7:ec:c5:bb:f7:a9:
         6b:1d:77:9b:0b:8d:f0:13:b3:b5:8a:6e:63:74:6d:02:57:f3:
         38:57:8c:59:01:f1:da:5e:6e:e0:7b:98:b5:fd:43:44:20:0d:
         37:34:46:5d:39:27:e1:ae:86:e9:2e:e9:b7:5c:2a:24:75:0f:
         53:fe:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:24 2025 by rpki-client