Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          ZXZhTaXnfEdGddgOGmxL5gGKOxvORa8w11bA5uIYgps=
Subject key identifier:   94:59:7C:F2:27:1A:EB:6A:9A:81:E4:29:A9:E3:7A:54:22:2B:64:49
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       0198530CF977852F771EF633160FADB65D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          1606
Signing time:             Mon 28 Jul 2025 22:00:15 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:15 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:15 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: rRhFJkQP9Azw0DkEQMh5zyVcSW/Dr/fyM1dE6ljqWHI=)
                          2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0c:f9:77:85:2f:77:1e:f6:33:16:0f:ad:b6:5d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Jul 28 22:00:15 2025 GMT
            Not After : Jul 29 22:00:15 2025 GMT
        Subject: CN=94597cf2271aeb6a9a81e429a9e37a54222b6449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:0e:5c:6a:01:b2:ea:5f:28:be:23:bf:1c:
                    6b:ab:df:d3:39:d9:fc:6e:5f:3d:bd:ac:c0:8b:ff:
                    87:01:2f:ea:69:32:55:10:de:2e:c3:ec:14:56:af:
                    70:82:a4:88:e2:e4:69:a5:04:81:99:62:d0:4c:a9:
                    4a:09:c0:a9:d3:2e:9b:a3:70:73:f8:3a:6d:69:23:
                    46:f3:d1:28:9a:90:a3:29:a2:51:02:97:5f:81:31:
                    dd:ee:c9:fb:64:7d:42:28:a5:1c:cc:f9:70:88:cf:
                    70:82:07:db:db:ba:94:62:d5:5f:93:80:8e:50:18:
                    7d:bb:9d:e5:a8:66:d9:6f:88:96:90:b2:f8:db:bf:
                    09:34:a2:52:08:83:f2:60:40:c9:bc:f0:64:e4:81:
                    aa:40:46:4f:a5:7c:b4:e1:df:7a:1f:31:94:c0:f5:
                    31:03:d8:13:9c:52:02:88:e5:f4:ae:9d:81:6c:e2:
                    1e:1a:42:a2:97:a3:b3:b8:cf:c3:92:ab:b9:97:27:
                    77:bd:ac:4e:17:ec:4e:d7:23:fa:d9:7e:29:b4:4f:
                    45:2a:68:0a:2f:6a:7f:3c:01:48:6a:3f:f8:5a:94:
                    90:e6:72:76:d0:7e:bf:20:85:ec:b1:bd:6d:da:95:
                    84:aa:79:70:c4:b0:cc:4e:ca:67:5f:14:76:9f:b2:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:7C:F2:27:1A:EB:6A:9A:81:E4:29:A9:E3:7A:54:22:2B:64:49
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:4c:15:80:7b:a0:ba:28:61:91:32:31:55:d0:bb:42:2b:
         b8:a6:c8:0f:b7:23:b6:7d:a2:e0:14:5e:1f:73:94:56:f1:d7:
         ea:87:6b:77:bd:9e:e0:d8:b1:3f:c5:8a:89:0d:e5:f4:ee:59:
         bb:5d:36:0a:dd:4b:36:59:38:aa:54:32:8e:a0:60:9f:94:31:
         9f:02:03:12:52:a4:bc:32:91:0b:ac:ac:52:4b:09:5f:2d:99:
         c4:83:9c:0d:90:1d:17:24:96:2f:d0:44:9f:c6:78:a5:74:f2:
         95:57:57:aa:29:30:ff:30:db:a5:c9:b6:99:01:31:45:5b:b2:
         99:d4:b6:e8:af:07:47:1c:3f:4b:d7:c8:3e:ef:a5:2f:56:56:
         4c:be:78:15:f1:b3:54:41:06:e0:67:cb:b5:ed:c9:de:f6:bd:
         20:04:89:0e:b1:39:9f:a4:51:46:5a:7a:39:90:30:ef:d6:38:
         53:8d:e5:6b:0e:bc:18:37:8e:b5:ec:7a:4e:fa:74:35:79:25:
         aa:73:de:b5:93:df:8d:27:f5:14:92:79:2e:3f:34:2f:ff:a9:
         ae:39:95:64:31:ff:00:d7:a8:71:1b:c2:6e:cc:ff:fb:21:a6:
         92:74:47:50:1c:09:eb:f2:17:ed:0f:c7:0c:0d:4c:23:a9:44:
         42:63:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:10 2025 by rpki-client