Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          Atr2NK/XmHKqcqhbv0F0fvtZxhMzn2i21hyC68UbNgI=
Subject key identifier:   4A:78:25:80:13:DF:79:4E:4C:F7:5C:32:77:62:5B:13:F5:D6:26:9A
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       01987C40528E657CF9D6779E0F39B47616CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          1521
Signing time:             Tue 05 Aug 2025 22:00:46 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:46 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:46 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: PSt5qUnByLwd3n962Fx93hA4oJeJRt9NI3GOVmAShlU=)
                          2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:52:8e:65:7c:f9:d6:77:9e:0f:39:b4:76:16:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Aug  5 22:00:46 2025 GMT
            Not After : Aug  6 22:00:46 2025 GMT
        Subject: CN=4a78258013df794e4cf75c3277625b13f5d6269a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:57:9b:be:8e:5c:85:83:0a:37:81:47:50:
                    d7:f8:91:7f:6e:26:50:6f:9a:74:d9:61:7e:1a:e5:
                    53:7f:72:b2:87:b7:65:b9:98:fb:59:99:02:97:2f:
                    04:85:81:c4:99:c7:6d:ff:13:74:f7:f1:cb:cc:23:
                    1e:3f:b2:8c:e7:1d:3a:32:2d:7c:b8:59:8c:3b:fa:
                    a2:1a:91:28:d4:a9:d1:17:49:ac:06:64:06:62:fe:
                    1d:12:03:4b:45:ae:5c:cb:bf:4b:74:44:96:79:ed:
                    8b:96:94:93:ce:05:67:67:3d:ac:3e:93:29:6c:58:
                    ee:52:2d:19:19:20:68:d8:8e:ab:3d:62:f5:e2:4c:
                    84:69:c9:75:40:33:bf:d0:82:d2:c7:ff:2c:a1:b0:
                    b0:44:2b:2e:06:e7:75:38:8c:41:0c:bc:99:c0:81:
                    40:d7:de:a2:e6:76:b4:9c:e5:6d:f6:6e:df:5f:bd:
                    d7:c4:31:6d:8f:aa:c4:b0:8c:e9:e7:de:f7:44:b3:
                    95:87:9a:b2:98:9a:de:a2:86:44:62:80:1c:4f:54:
                    5a:be:0c:0b:8f:0d:99:8a:f0:9f:2a:8e:12:cf:c1:
                    bc:19:5c:ad:51:1a:33:76:d4:c4:f2:2f:9e:9b:59:
                    3e:d1:86:7d:57:cb:74:44:2d:40:e8:6c:46:f1:2b:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:25:80:13:DF:79:4E:4C:F7:5C:32:77:62:5B:13:F5:D6:26:9A
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3e:3c:14:b5:e0:da:1d:ff:83:9d:3e:02:4b:64:1d:49:d6:
         c6:f3:1f:89:c5:f0:67:64:1a:34:57:2c:e0:39:47:cb:92:17:
         b3:d6:bf:d5:33:b3:d5:5b:5d:e7:97:57:e5:d7:90:04:69:74:
         49:24:06:46:78:d2:c3:1b:30:d4:ca:11:d3:30:dc:c3:a4:6c:
         95:b0:9e:3a:eb:96:bd:19:b8:f8:51:b0:36:20:2f:5f:36:d8:
         58:cf:b8:83:f5:34:04:e4:00:6d:eb:f5:1e:ec:e8:73:95:9f:
         8c:5b:2a:3b:af:1c:a7:8e:df:14:62:e9:5d:64:6b:b8:0b:8d:
         f9:ea:45:61:5f:45:a6:10:01:d7:ac:02:b3:5d:0b:72:37:00:
         43:cb:84:c3:79:d6:2e:df:4d:43:70:12:eb:3a:06:fb:bd:0e:
         b7:36:f0:11:01:67:7c:ff:50:5f:2b:fa:6e:64:7f:e1:55:df:
         67:ff:ba:7c:3e:b4:56:bf:4b:ee:a5:97:4c:cd:f7:eb:7d:c3:
         de:90:b8:2a:4e:52:15:4d:81:92:6b:52:fb:6e:ae:ab:e9:7f:
         36:4b:bc:b5:ea:42:0a:92:44:38:68:ec:68:34:6d:fa:54:a0:
         d4:f4:48:16:c6:e9:20:92:08:21:40:4f:bf:1d:de:6a:63:bc:
         20:17:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:31 2025 by rpki-client