Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File:                     1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier:          iVMRWLLtSnPosHkJSEDeAao1vwA149xBAvhrUfiGIOg=
Subject key identifier:   4A:23:85:84:8E:C8:0E:95:EB:44:15:DD:51:5A:0B:CA:CE:68:A0:CB
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer:       /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial:       01984776BEC77F508DDD655087BBE7CD15D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number:          1343
Signing time:             Sat 26 Jul 2025 16:00:21 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:21 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:21 +0000
Files and hashes:         1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: e4jIQvmy70/CWNz4/tyrqakXnE83j4BvKAgjPYKS3L0=)
                          2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:be:c7:7f:50:8d:dd:65:50:87:bb:e7:cd:15:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
        Validity
            Not Before: Jul 26 16:00:21 2025 GMT
            Not After : Jul 27 16:00:21 2025 GMT
        Subject: CN=4a2385848ec80e95eb4415dd515a0bcace68a0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:3e:89:b9:68:69:29:7a:d3:dd:48:ea:35:
                    19:0f:d2:b4:b0:0e:66:5d:99:54:a8:61:e1:d4:36:
                    90:81:0a:2d:a9:da:51:b7:2d:89:cd:3a:14:be:e1:
                    f6:0d:f7:54:17:8e:64:82:52:7b:b3:6e:17:39:e6:
                    f7:b3:52:ff:a9:3a:1c:a2:c1:c9:46:f4:a0:7f:15:
                    03:3f:78:5d:87:57:bf:dc:c5:3b:e7:c4:24:f5:78:
                    18:4c:46:54:43:cf:12:8b:e9:f2:ca:8e:4c:7f:90:
                    a1:59:9b:d2:40:f7:0c:89:5c:8e:c2:95:66:97:04:
                    0d:93:22:58:5e:72:f8:9b:3e:f1:98:a9:c7:d5:dd:
                    6e:e9:38:b3:a3:14:d0:4f:f4:9f:71:07:ae:a9:c5:
                    95:38:b0:91:99:10:8d:49:2a:e0:88:d3:61:24:29:
                    a2:9f:88:19:5f:7d:76:7a:e7:8d:71:a1:79:05:dd:
                    29:c9:f8:05:7d:66:50:f9:cd:3a:d1:fa:b5:03:37:
                    4c:e1:2c:bb:ef:50:76:dd:47:49:41:cb:1e:4a:b1:
                    27:8f:f7:f8:a6:4a:7e:ee:0d:3b:c0:fc:86:e7:e5:
                    84:b3:7e:0c:c6:3c:e7:8a:1e:4f:02:a8:bb:df:cf:
                    a7:84:14:15:83:e0:92:b0:68:55:94:15:9c:31:75:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:23:85:84:8E:C8:0E:95:EB:44:15:DD:51:5A:0B:CA:CE:68:A0:CB
            X509v3 Authority Key Identifier:
                keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c8:0c:c4:5d:6d:a8:7b:71:e7:88:cf:27:c8:e7:00:cc:3a:
         25:fb:81:94:63:f4:95:97:58:8c:9e:47:4f:66:a9:94:5c:1c:
         f0:75:44:89:08:73:45:47:42:bf:f1:b1:0f:7b:06:22:9f:49:
         f0:a1:20:62:06:9f:80:e8:6c:9d:05:4f:70:52:81:53:98:92:
         31:df:03:b9:88:fa:4c:5c:d1:1b:02:22:ae:7d:71:45:cb:30:
         d9:21:97:08:3c:bd:4c:a8:9c:cf:91:fb:b8:ad:80:a4:4b:dd:
         9f:4a:1b:c9:c4:0e:27:97:bc:bc:ce:41:b7:3a:f6:f7:47:73:
         fd:99:2c:fa:9a:2e:75:6e:19:e2:ac:68:17:a0:41:e5:ee:82:
         78:04:9b:16:18:23:20:3b:bd:90:12:d7:31:41:9f:48:4c:5e:
         9f:5e:ac:95:de:cc:b7:ac:8a:55:88:04:37:4d:8e:c3:26:e7:
         f9:47:9f:2e:78:b9:7e:e3:90:e2:3d:18:4b:d0:42:57:33:c5:
         09:ac:c8:70:bf:51:17:a2:c1:a6:a7:52:30:9e:4e:8d:a6:4e:
         2d:5c:02:7e:1a:42:0b:78:d1:d7:62:55:ba:2c:2b:7e:21:5d:
         16:00:5d:2f:55:b5:17:77:fa:0c:4a:27:cd:ff:37:62:ba:57:
         ec:59:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:59 2025 by rpki-client