Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File:                     CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier:          56SOahSRmqQU2+7Yjy9OuJvZ6UKkpgC4Jiu3Yfv9pRk=
Subject key identifier:   9E:DE:BC:69:B4:F8:72:81:55:4B:AF:AD:97:57:51:53:58:4B:85:44
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer:       /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial:       01984776F6BBF3B24FC498A35CA8DE4B9A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 16:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:35 +0000
Files and hashes:         1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: 8/1tNi7LZ3YOgZM7yunHxbUSlBrDZOJbzwySEcOiPeo=)
                          2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:f6:bb:f3:b2:4f:c4:98:a3:5c:a8:de:4b:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
        Validity
            Not Before: Jul 26 16:00:35 2025 GMT
            Not After : Jul 27 16:00:35 2025 GMT
        Subject: CN=9edebc69b4f87281554bafad97575153584b8544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:ed:9c:6f:8a:49:48:96:69:2a:c6:f5:59:
                    d2:a4:56:87:1a:16:26:4f:b5:63:31:42:08:fb:0e:
                    e8:f0:e2:81:33:b7:82:c1:9a:bb:3c:94:85:6b:18:
                    37:1e:02:76:d6:3e:cf:d6:8a:20:bd:22:cd:de:21:
                    01:d4:7c:ca:c5:b1:6a:53:4c:9d:54:6e:0c:ce:2e:
                    14:35:3d:3b:bd:78:a6:fe:e2:b1:74:72:36:78:28:
                    7d:08:d5:c8:e2:5b:80:1c:cc:56:e9:ed:46:e5:3b:
                    fc:e1:8a:bf:89:30:83:8b:af:d3:a6:95:6a:a9:b9:
                    0e:3f:b9:50:a1:e0:37:6f:4a:fe:9f:75:ec:e2:05:
                    d5:19:97:4e:d5:5e:9c:d0:ad:d8:94:9e:4e:04:fd:
                    59:7a:f8:e0:75:f1:18:f4:bf:4d:61:ac:be:ad:1c:
                    03:55:07:a9:c0:17:f4:66:ba:26:57:52:40:87:44:
                    08:85:12:8d:1e:28:91:44:8b:25:c3:c6:86:38:3e:
                    07:b2:4d:4b:43:57:cc:ba:ec:68:11:58:6f:4f:b1:
                    d7:35:5e:64:cb:3e:35:15:cc:f6:73:ce:69:5a:eb:
                    4d:b7:0b:57:d7:77:38:bc:f3:ed:91:4d:08:cd:14:
                    04:0f:ba:71:67:88:b4:9e:75:92:d2:11:d1:6c:86:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DE:BC:69:B4:F8:72:81:55:4B:AF:AD:97:57:51:53:58:4B:85:44
            X509v3 Authority Key Identifier:
                keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:6d:4e:83:f4:d5:e6:5e:24:c3:a1:2d:fc:ce:52:ed:20:
         e0:2a:1b:af:2c:8b:fc:8f:54:e8:f3:b0:38:87:1c:d8:eb:d8:
         cc:b9:1c:5d:53:76:a8:85:a6:06:41:27:e2:2a:d4:2b:8a:43:
         32:dd:24:73:9d:f4:55:24:18:c3:17:a5:c3:93:92:31:a2:35:
         2d:5d:1f:81:04:8f:57:43:54:d4:0d:a3:8d:59:6b:97:e9:6f:
         73:e4:50:0e:79:fa:58:4f:99:14:fd:32:9b:ff:4a:92:40:fc:
         ea:e7:fd:6a:7e:80:24:d3:11:c0:83:cc:5f:b8:ab:02:d7:7e:
         6f:9c:64:92:dd:01:10:f8:4a:3b:d0:ed:8b:bd:40:e5:48:71:
         07:81:94:67:dc:90:7c:7e:d0:84:c5:75:92:7a:43:d5:cd:05:
         43:b2:38:68:57:65:39:45:fb:b1:e5:e7:83:c4:08:76:7c:15:
         75:3b:a5:c1:43:a1:13:9a:58:4b:90:ec:2e:ff:17:af:4f:be:
         9f:3a:c8:76:6c:bd:58:c2:4f:94:fc:ed:c6:31:82:fd:4a:2b:
         bd:b9:d3:af:e9:85:8c:1b:58:d1:c3:a8:f7:e8:08:01:61:3c:
         59:7b:08:6f:53:d4:a5:b0:4b:a7:54:25:b8:aa:2c:b9:bf:e6:
         c4:d5:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:12 2025 by rpki-client