Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File:                     B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier:          YWuqca1puXpwQHKl7N9E8KcnTzc82+CKtzw2zkOv7zw=
Subject key identifier:   22:EE:8D:7D:D8:DC:0A:9C:25:DE:8F:C0:7C:A1:82:A1:AF:1D:0E:9F
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer:       /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial:       01983F4F5200A025DD6636BC1761B7C645FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number:          15FC
Signing time:             Fri 25 Jul 2025 02:00:19 +0000
Manifest this update:     Fri 25 Jul 2025 02:00:19 +0000
Manifest next update:     Sat 26 Jul 2025 02:00:19 +0000
Files and hashes:         1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: 9yHeBs7YKSW2yeacDGAxZbJO44mHUQgVO7lAjol+KP8=)
                          2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:4f:52:00:a0:25:dd:66:36:bc:17:61:b7:c6:45:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
        Validity
            Not Before: Jul 25 02:00:19 2025 GMT
            Not After : Jul 26 02:00:19 2025 GMT
        Subject: CN=22ee8d7dd8dc0a9c25de8fc07ca182a1af1d0e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:ff:b0:76:91:5e:e7:66:cd:a4:3d:07:f2:
                    7c:07:1c:ab:5f:cd:96:b0:e1:cc:28:70:73:b2:ce:
                    cb:90:7f:55:f9:7e:20:a7:9a:0a:bf:93:76:54:0f:
                    04:c6:25:cb:df:b9:88:35:ec:bd:63:58:1f:60:03:
                    bc:f8:3b:c8:ec:c5:f9:8a:0e:ec:77:5f:94:50:39:
                    44:d0:9c:56:17:5d:06:52:f3:bc:4c:c4:11:70:77:
                    a6:79:87:66:82:0b:a3:ce:7b:f0:05:33:20:ea:44:
                    53:39:87:d9:03:3b:a4:cc:1c:f2:2e:5e:3e:9c:53:
                    52:eb:3c:5b:03:1e:43:48:a8:e4:94:72:45:fa:a4:
                    d4:fd:f9:27:74:42:07:9b:91:40:e7:20:d8:ec:db:
                    35:f9:71:69:9b:dc:db:09:6d:9c:84:1f:f3:c2:7d:
                    a3:0c:ea:ee:e4:eb:0e:62:5a:57:92:f1:ce:7d:bd:
                    7e:63:07:e4:ef:9e:b6:f5:65:b5:3d:f5:7a:71:d4:
                    f0:8d:5d:41:11:4d:6d:b4:79:67:19:2c:cd:4c:37:
                    d9:52:a0:5e:41:0e:f4:79:4c:27:20:f3:b3:e2:a8:
                    d3:dc:d4:40:51:96:c9:fa:16:5d:13:d3:46:a8:44:
                    ef:bc:95:3e:56:03:fc:ae:a4:da:49:3d:41:eb:63:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EE:8D:7D:D8:DC:0A:9C:25:DE:8F:C0:7C:A1:82:A1:AF:1D:0E:9F
            X509v3 Authority Key Identifier:
                keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:ee:5e:f8:2c:5f:b4:fd:ec:64:9b:e8:65:4c:99:b3:09:
         98:dd:dd:9f:8d:04:d9:bb:5c:00:e6:3c:2e:96:d1:15:da:c2:
         66:c6:2c:18:40:13:15:f8:23:a0:fb:e1:cf:8b:54:9e:c4:3e:
         7b:fb:04:47:d3:df:c5:2e:c6:e0:8d:a4:bf:b6:72:82:73:d8:
         c3:f1:15:6f:f0:ab:3b:0b:21:33:8b:47:35:2a:89:fc:70:24:
         54:87:e6:bf:de:bd:74:58:5b:2a:5f:9a:0e:c4:d5:32:93:06:
         c8:95:4b:ed:ec:3e:13:86:07:e7:09:81:d8:13:bb:24:d3:4b:
         40:c5:90:6e:c5:60:ed:4a:c7:11:41:e9:61:32:c6:93:b3:a4:
         e2:28:4e:d0:79:51:ab:a3:a2:bc:44:d8:92:6c:03:2f:e3:4b:
         dd:c1:4a:31:dc:03:8d:5b:17:e4:0d:42:d5:7a:af:16:a4:da:
         81:fb:f3:25:bd:b7:e5:c3:c5:07:8c:ce:df:ba:b5:fa:67:61:
         ce:f2:7d:53:99:05:d7:79:74:36:b1:15:b8:a2:68:c7:7d:df:
         59:69:78:8d:16:e0:b4:42:d3:88:ab:83:c5:e9:62:ac:36:af:
         be:fa:41:58:20:47:4a:2d:15:cd:67:4d:e6:d5:b9:3a:b6:92:
         3d:90:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:17:26 2025 by rpki-client