Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File:                     70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier:          OAb+4iQbWWkG1xdPjWJM1VotdEdy4Pm6hw69GHyXhSU=
Subject key identifier:   B8:EF:ED:7F:64:03:96:94:BE:4D:0C:F9:FE:18:AD:1E:11:4B:B2:75
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer:       /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial:       019848C041E143AF8F9A692E37C5E12DFE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number:          0B76
Signing time:             Sat 26 Jul 2025 22:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:15 +0000
Files and hashes:         1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: sVVXfs0VxaQPg4/ct24hebuWYg5Gko0W4JyW1k4OS3E=)
                          2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:41:e1:43:af:8f:9a:69:2e:37:c5:e1:2d:fe:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
        Validity
            Not Before: Jul 26 22:00:15 2025 GMT
            Not After : Jul 27 22:00:15 2025 GMT
        Subject: CN=b8efed7f64039694be4d0cf9fe18ad1e114bb275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:a3:8e:97:80:dd:78:16:e1:3b:39:7d:20:
                    66:46:54:1d:db:bf:ec:9c:70:99:53:b4:69:c8:e9:
                    29:28:9e:cd:73:6e:90:37:fe:fd:f2:2d:ca:64:8c:
                    64:c1:43:59:5f:18:f6:ad:24:28:ec:1e:6f:d1:2b:
                    d7:11:9a:eb:aa:51:e6:d0:51:16:2e:0a:c2:21:21:
                    30:7f:38:19:ac:47:00:1d:4c:7e:10:68:24:2d:c6:
                    e2:7d:d3:ba:87:cf:3f:a0:f3:43:06:cc:80:1e:49:
                    41:f5:b0:d7:86:f4:31:e3:b1:ab:c0:a8:71:70:26:
                    f8:41:e9:3b:6d:fa:89:6b:a9:53:d0:92:0a:2a:16:
                    04:6a:0c:c5:78:a7:e4:55:94:09:d6:b6:a7:47:dc:
                    98:34:d8:a8:17:81:d1:00:48:15:b3:f0:23:af:27:
                    39:ed:b5:4b:ff:de:96:df:fb:0a:51:99:a4:90:ce:
                    e3:9d:4c:c9:3e:9d:99:92:47:81:6f:f6:c9:7c:31:
                    ac:79:fc:7e:67:9b:d3:5e:97:67:86:e7:e4:fc:a9:
                    24:e4:cb:fa:97:8b:50:ae:98:24:4e:47:3c:cc:64:
                    97:ca:0d:77:6e:07:3a:1b:3b:42:2d:96:ea:c9:1b:
                    6a:52:7d:8e:3f:ec:52:26:fe:3a:a6:e3:45:ad:89:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EF:ED:7F:64:03:96:94:BE:4D:0C:F9:FE:18:AD:1E:11:4B:B2:75
            X509v3 Authority Key Identifier:
                keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:db:b2:31:31:d2:f5:e2:77:6f:32:eb:53:ac:94:1c:79:3e:
         db:a5:a6:a6:8f:60:58:e8:ff:5b:58:de:f4:65:ca:dc:8f:51:
         27:84:f1:71:de:84:52:dc:b3:5b:b0:f8:1e:7c:55:22:3c:67:
         a0:c1:39:b4:e6:d4:6e:86:db:5a:90:99:f1:07:6c:76:8c:4c:
         a5:e3:90:52:4c:1d:06:af:41:af:2f:e8:15:a9:54:87:83:af:
         15:b0:ed:4d:3e:a4:8a:f9:db:00:a7:95:11:77:2f:a9:61:7a:
         45:45:55:4b:d9:5b:e5:57:6f:8e:8e:74:d4:24:ce:b7:b1:5d:
         57:5a:4c:52:a5:84:45:56:be:d7:bd:d0:8f:73:77:ac:20:26:
         ef:a9:ec:17:02:0d:07:4c:91:cc:26:dd:fa:0a:b7:59:f5:4a:
         0b:6b:38:15:cc:1b:55:1c:92:e1:ad:d4:4b:c4:e0:ce:88:35:
         bb:26:de:84:c9:b7:68:a4:4d:f8:4d:66:b8:df:01:4c:05:3b:
         ba:27:4b:3a:1f:5a:2f:06:e3:c7:12:1b:98:7d:d4:a6:37:e4:
         11:d5:a7:b3:cc:41:95:1a:6b:6c:84:09:e6:b7:b5:45:b7:88:
         54:8f:e1:e0:d2:6e:b4:36:70:36:2b:df:e4:a7:b6:9a:a8:59:
         3a:7e:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:45 2025 by rpki-client