Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json)
Hash identifier:          8EN3HCyZ/1p54JJGIRsn3MznKAYLJAf67SaaZ0PlQEY=
Subject key identifier:   05:A0:7A:13:10:AD:56:3B:EA:38:3D:82:D6:12:93:67:98:37:DE:EB
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Certificate issuer:       /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial:       01984A7815AC9832EF864FA7AC2BB463347B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
Manifest number:          13AB
Signing time:             Sun 27 Jul 2025 06:00:40 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:40 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:40 +0000
Files and hashes:         1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: oUWrBPejGI4g9ZWQeh2xE1qHHfnCUZfZkGuzXnQCOlc=)
                          2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:78:15:ac:98:32:ef:86:4f:a7:ac:2b:b4:63:34:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Validity
            Not Before: Jul 27 06:00:40 2025 GMT
            Not After : Jul 28 06:00:40 2025 GMT
        Subject: CN=05a07a1310ad563bea383d82d61293679837deeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:c4:b7:fb:9d:a9:eb:07:33:64:9f:63:ac:
                    87:6d:0a:27:5e:6a:81:cf:65:83:bc:8f:ff:a2:2a:
                    eb:ed:d3:78:03:d5:5c:12:35:53:1d:e1:2a:39:45:
                    36:89:ce:62:08:32:95:3f:bb:46:c3:be:11:fc:4e:
                    70:e8:f2:93:32:6f:5e:19:5b:54:e0:bb:29:2a:b0:
                    fa:fa:dc:6c:c4:0b:b7:43:d7:8e:98:4d:e9:44:84:
                    7c:01:db:78:27:24:ee:1c:13:61:24:7a:a5:2a:ee:
                    4e:4b:aa:0a:65:fa:c0:72:dd:d5:0d:30:cd:8b:30:
                    02:85:1a:7a:a4:1a:a2:a6:a4:1a:bd:e6:0d:52:57:
                    11:05:3e:eb:e3:bd:41:39:71:17:34:9a:23:93:81:
                    88:ce:3e:70:24:18:b7:b4:c1:f3:db:54:91:cd:cb:
                    88:36:9f:26:81:27:b5:58:ed:83:a0:43:2d:22:c6:
                    ff:63:5b:06:9d:87:c8:43:a6:52:05:b7:c0:92:e8:
                    62:54:19:f7:17:f0:b3:cd:bf:b7:16:29:24:77:45:
                    44:d5:98:f6:0a:f7:a6:63:66:62:b9:56:fd:c7:06:
                    d5:80:16:1c:d4:0b:3a:8e:c5:29:3f:18:22:3c:bf:
                    f6:65:18:16:02:9d:32:66:a9:93:a6:96:5b:11:c6:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A0:7A:13:10:AD:56:3B:EA:38:3D:82:D6:12:93:67:98:37:DE:EB
            X509v3 Authority Key Identifier:
                keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:3d:a0:38:4a:ca:fe:77:f1:e6:f2:5a:d0:18:bb:84:29:
         0a:f7:05:4b:93:88:f8:c6:78:fe:6f:d6:33:ca:f2:92:b3:f4:
         3a:4e:90:d7:d8:6a:4d:52:54:0b:e3:a1:5e:4e:3f:6e:42:c3:
         59:5a:b1:4b:6f:a3:87:c9:56:43:73:88:b5:90:58:62:77:ec:
         3c:8b:a6:75:15:a8:4b:11:4a:ac:e2:dc:a1:84:37:04:fb:5a:
         2c:4b:22:9f:b2:86:ae:b1:eb:34:7c:23:c0:a2:21:24:62:41:
         e2:84:1c:81:ac:d4:40:4b:0c:3b:82:89:1a:e9:50:d5:f4:fc:
         4e:36:54:3d:45:b6:b9:52:3a:83:f8:65:f2:99:f7:a3:8b:a3:
         f8:70:1a:c2:0d:42:3b:92:f1:26:78:93:62:ba:1d:c6:be:df:
         37:a4:00:4d:f7:27:c6:87:21:35:0a:ee:25:15:33:45:89:2d:
         18:f6:21:83:68:95:e6:40:6c:a3:7c:85:e4:81:bf:99:4c:fa:
         13:1c:4d:d5:5c:24:3b:0c:90:65:76:ad:b9:1b:9c:e7:0e:5c:
         72:fa:67:e5:f4:61:a0:12:58:d7:10:00:1d:ae:28:d4:01:ad:
         4b:b3:e0:d3:d9:09:e9:f4:b8:14:fe:52:2e:24:c9:9b:04:e1:
         c2:f3:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:55 2025 by rpki-client