Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File:                     d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier:          Zng15fzHsZ4QApm02AobwpLBIP4pQXZW2+SgdvOD8U8=
Subject key identifier:   B4:5C:D1:E3:43:7B:DD:91:E1:41:A6:B7:DF:17:9B:AE:91:1D:A2:E4
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer:       /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial:       01984A0A137C68466AF6BDDF26A5F0EF7FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number:          1525
Signing time:             Sun 27 Jul 2025 04:00:30 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:30 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:30 +0000
Files and hashes:         1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
                          2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: aoUSGIRMz9KHs89jppQ8RAZTp5HWeZOd9KVJ/yTIisA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:13:7c:68:46:6a:f6:bd:df:26:a5:f0:ef:7f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
        Validity
            Not Before: Jul 27 04:00:30 2025 GMT
            Not After : Jul 28 04:00:30 2025 GMT
        Subject: CN=b45cd1e3437bdd91e141a6b7df179bae911da2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:2c:3c:f8:75:e7:4f:0e:5e:ee:cb:10:ae:
                    7d:21:e6:08:bd:5e:f3:4d:48:ea:92:da:af:4c:00:
                    b8:fc:5a:6f:0d:56:b2:a1:39:a2:85:ea:26:29:29:
                    81:23:24:a7:2d:71:05:53:c4:12:c1:68:11:30:1f:
                    f7:1d:f0:7e:6a:79:ed:8e:f9:d8:ef:85:ca:d1:6f:
                    d9:50:dc:43:77:5f:21:10:a8:22:40:02:4e:fb:4b:
                    d1:44:df:0e:5c:6a:db:15:55:9b:b9:73:d2:f3:ca:
                    67:7a:b1:66:3e:8b:17:06:7c:e9:7f:84:1c:cb:ff:
                    f0:4b:5e:22:79:1b:6f:fa:84:31:67:8c:c7:29:8c:
                    24:70:e3:5e:4b:02:b3:a2:50:51:dc:7e:7b:ad:ba:
                    40:b2:bc:a4:15:74:2a:e3:19:0d:09:01:56:4f:02:
                    34:5c:a2:92:27:1d:61:70:2e:9a:6c:ef:72:5a:8a:
                    72:35:f3:f9:fb:1b:d2:35:9c:c5:74:e3:c4:07:bd:
                    6b:ae:2f:d9:c4:b7:e3:f6:d9:6f:49:23:92:51:f0:
                    f8:3b:4b:f7:7b:c8:39:42:7c:f4:2d:8f:a7:80:8b:
                    58:0f:df:02:d1:d6:52:da:82:e8:87:29:01:41:35:
                    e0:48:ff:74:f4:73:cf:14:54:29:2d:74:ef:45:5c:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5C:D1:E3:43:7B:DD:91:E1:41:A6:B7:DF:17:9B:AE:91:1D:A2:E4
            X509v3 Authority Key Identifier:
                keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:28:d9:db:b1:99:fb:f2:bf:6f:d0:67:1e:f0:ec:03:bb:3e:
         d9:27:77:27:ec:49:91:91:e2:f0:f7:83:76:66:bf:dd:43:e5:
         f4:b5:b0:54:70:1e:69:1e:3b:8e:57:96:fc:7c:1b:0a:d7:05:
         2f:8f:01:43:f1:a3:be:20:84:1d:68:bd:b8:82:f7:b2:0d:bb:
         97:cf:a4:e3:b5:f5:fb:c3:a5:41:1d:5c:eb:15:43:e4:8f:f3:
         78:4f:81:3e:d5:ac:2b:ba:36:6f:25:b1:27:79:14:40:f0:d0:
         24:26:d2:82:6f:65:51:82:54:99:16:fa:ca:86:82:d5:7d:3a:
         10:50:75:39:d6:f8:98:af:64:c3:50:4f:95:28:be:30:d8:56:
         53:78:68:12:d6:5f:ae:89:ec:2e:1c:7b:f2:79:1d:91:ce:fc:
         d0:f8:34:e7:d4:52:33:ab:d0:8f:cf:75:da:80:8a:9a:6c:04:
         a1:a1:53:26:bb:0d:7b:07:d5:f4:fa:27:4f:54:26:68:da:01:
         09:3a:3a:91:79:0b:b9:cc:f9:b8:94:1f:ba:c7:9c:a6:1e:cb:
         c9:e5:9f:78:1a:7f:42:23:d9:28:e1:a2:09:c1:03:bf:be:cb:
         09:fb:81:fb:b0:16:45:49:9b:4c:c1:42:81:08:03:49:ac:93:
         b8:65:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:17:35 2025 by rpki-client