Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          0iZ1xFKEIcGDhiFKCp6XYLnuhI7SuqroQ7NeYpdL+tc=
Subject key identifier:   AE:19:2A:84:57:6E:ED:D7:BD:B7:C7:E0:C0:09:60:F5:CA:9A:47:5A
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       019844AC81F1E15A50FE81E6950D4B40082E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          1627
Signing time:             Sat 26 Jul 2025 03:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:12 +0000
Files and hashes:         1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: zgijafZcVbFbA18ZIU8Tb+mhTIXlTL+iUUFylcfZgDw=)
                          2: 2Ksn55yLgCkUTD5aLOt0Y8z_PQA.roa (hash: YGbzAqhxgCQickL+xdM1b5h2KIGE4igLXR/EObDj07M=)
                          3: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=)
                          4: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=)
                          5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=)
                          6: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:81:f1:e1:5a:50:fe:81:e6:95:0d:4b:40:08:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: Jul 26 03:00:12 2025 GMT
            Not After : Jul 27 03:00:12 2025 GMT
        Subject: CN=ae192a84576eedd7bdb7c7e0c00960f5ca9a475a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:23:ea:35:71:0b:e0:63:4b:69:f7:52:31:5c:
                    08:89:96:4a:d7:52:22:16:35:92:b0:fb:c3:76:70:
                    98:b4:85:0b:8b:bc:59:1e:5e:38:bb:d4:9a:53:09:
                    f7:c9:c2:03:a5:88:59:8a:eb:a8:13:50:ac:6f:b9:
                    fb:de:46:a3:61:9a:a9:03:d3:79:b6:d6:3c:38:e8:
                    77:a9:95:31:22:5a:c4:66:2e:ee:4e:03:14:9d:6c:
                    1a:6e:99:81:5e:9a:dc:09:2a:26:c7:c2:5b:a1:50:
                    06:6e:e9:5c:d1:2e:43:a0:f4:53:36:93:55:8c:b8:
                    c0:ab:15:f4:e4:e1:b0:0c:f5:f4:a3:ad:03:e6:26:
                    0a:ea:ee:42:d2:78:7a:21:ae:ff:e6:9b:f0:b5:7f:
                    ad:33:cc:5a:85:7b:f6:ab:8f:fd:7f:3e:2d:df:d6:
                    00:3c:f0:5f:f0:0f:fd:d0:60:0c:17:df:c3:89:a8:
                    61:21:f4:5e:53:b3:85:00:28:9e:e1:c0:c3:88:5e:
                    42:f4:f1:76:5a:9f:41:69:c2:96:53:f2:30:46:62:
                    ea:48:0e:53:2b:71:f7:bf:b4:07:db:7a:39:e3:33:
                    ca:58:86:b3:a7:9f:bc:09:23:69:f1:63:02:2e:3d:
                    94:b4:9e:4f:6a:90:6d:54:bf:52:27:92:d7:a7:a1:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:2A:84:57:6E:ED:D7:BD:B7:C7:E0:C0:09:60:F5:CA:9A:47:5A
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:58:69:c5:cf:65:21:63:e4:ca:74:06:0a:76:12:a4:75:57:
         42:ff:ef:d9:ec:55:65:ab:c1:2b:26:ae:76:df:dd:30:66:d7:
         9e:68:09:06:a3:f1:c0:69:d4:18:9c:69:14:72:52:f8:5e:7c:
         f4:20:9a:76:c0:2e:29:73:43:b8:d9:07:8d:19:65:aa:2a:b5:
         38:b1:dc:56:e9:db:e0:ac:43:06:dc:6f:81:c9:56:73:39:a3:
         01:d0:18:29:da:cf:55:c6:2f:4d:b0:5c:7f:1f:c9:1b:29:00:
         50:01:85:ff:ed:6a:65:a5:16:24:36:2e:59:df:d5:d3:76:34:
         52:b6:1c:ac:0f:41:f7:b6:dd:6f:79:2e:bd:9b:7d:21:da:0f:
         43:80:ff:89:ad:6e:bb:40:8d:12:a5:24:76:5c:c7:2e:1d:2c:
         d2:98:08:40:27:dc:e3:86:f8:92:b5:27:ef:1d:17:0a:96:5e:
         92:b7:fa:47:b8:ee:cb:67:53:5d:23:35:55:fd:73:50:cc:9c:
         ec:84:ba:dc:c0:88:b1:39:1a:ab:4b:05:04:20:f0:1a:96:fb:
         f3:78:de:6c:37:70:88:32:ce:64:fb:99:40:47:0c:63:3d:dd:
         6b:4c:90:30:0a:c4:36:8c:45:f3:aa:be:df:b4:5c:b9:78:93:
         7b:04:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:45:05 2025 by rpki-client