Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File:                     bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier:          ID3eCW/m5hAVBS6aobuwJ85DZFLayntHmmnSiAZFVvg=
Subject key identifier:   31:35:F8:62:C0:ED:4E:BE:CC:97:D1:DE:10:11:1C:88:81:4F:CB:37
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer:       /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial:       019848C09A4B7C4535B4F228D9EC84E0D076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 22:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:38 +0000
Files and hashes:         1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
                          2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: ouF01ejwK2BzoKUPzW2GHOOcGdRWe+TLi1RhQ24ilEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:9a:4b:7c:45:35:b4:f2:28:d9:ec:84:e0:d0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
        Validity
            Not Before: Jul 26 22:00:38 2025 GMT
            Not After : Jul 27 22:00:38 2025 GMT
        Subject: CN=3135f862c0ed4ebecc97d1de10111c88814fcb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:85:3a:1e:eb:f3:9c:c5:0f:d1:c6:a6:03:
                    cc:c3:5b:6b:cc:a6:03:13:f1:a0:b7:6a:9a:bf:aa:
                    d1:f9:db:06:f7:3a:4e:40:89:e0:2b:0f:98:68:fb:
                    a3:90:96:41:bf:16:66:e7:79:86:ce:ed:1d:93:1a:
                    4f:bf:1c:9e:10:a6:ad:c9:0c:b0:1b:8d:87:26:fd:
                    29:bd:ec:30:d3:37:c9:e8:ff:73:9e:82:ef:f2:d9:
                    97:fc:f9:eb:7b:f5:6b:f0:41:88:c7:1c:09:6f:83:
                    45:09:5c:78:f3:c1:fc:d7:1b:8f:c7:99:00:fe:dd:
                    ad:2d:79:5c:a6:9b:47:37:d6:72:d6:0f:ee:d0:ae:
                    ad:a7:bb:64:45:51:92:59:e3:21:4c:01:3b:33:38:
                    2a:2a:f9:0a:89:38:d2:60:48:99:40:3f:b5:a8:10:
                    94:1d:eb:b7:8d:01:6a:d2:9a:1a:a4:74:7d:ac:eb:
                    6e:5a:34:00:f1:d2:8e:55:49:6e:0b:d2:20:97:03:
                    b9:6d:6c:bd:40:59:35:b4:8b:c8:b9:0a:1f:86:f6:
                    51:76:0f:64:9f:89:6e:97:c8:e7:a9:94:82:0d:bb:
                    23:43:15:42:49:5e:ce:e9:0c:64:bd:0f:aa:bb:6e:
                    bf:16:89:36:0f:a7:02:12:d1:59:f1:94:ed:a2:81:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:35:F8:62:C0:ED:4E:BE:CC:97:D1:DE:10:11:1C:88:81:4F:CB:37
            X509v3 Authority Key Identifier:
                keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:3c:65:d9:84:88:31:23:27:81:84:71:ed:52:c3:06:06:
         e4:41:77:17:70:49:8a:15:f8:77:39:02:5e:0c:90:75:f1:0a:
         5d:ea:1a:58:1f:40:27:e1:f1:7e:95:22:c1:e1:4b:88:eb:bc:
         45:8a:1a:30:1b:14:b8:21:b4:1e:d0:f4:44:4d:ef:21:12:84:
         a1:bd:a5:ba:6d:29:0a:1f:72:ac:72:96:d1:95:bd:76:cc:f2:
         73:25:d7:54:ed:40:46:38:0e:d8:df:f4:3e:57:7c:0c:07:99:
         ad:cb:ff:13:63:be:5b:df:e1:d5:99:f7:4b:9e:bd:bb:6c:ba:
         a1:84:8d:48:58:db:93:33:1e:68:58:3a:1b:7e:f8:69:10:de:
         77:78:8c:a6:c0:ac:1c:45:a9:a0:2e:c9:2b:36:ef:a6:dc:c5:
         d6:82:e4:eb:43:d9:72:34:6e:df:5c:aa:a7:0d:d0:bc:44:25:
         97:33:ab:47:a9:f4:35:83:15:cb:1d:50:8a:a6:1a:98:af:58:
         96:f2:90:f4:1e:d3:3b:6e:39:c4:18:f1:ed:77:72:2e:23:44:
         78:c0:be:40:70:d3:3e:ff:0e:a8:81:a6:82:1e:f0:1a:b2:51:
         cf:2d:82:e3:c4:88:a0:6a:cd:ba:3a:87:23:16:61:01:97:37:
         83:38:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:32 2025 by rpki-client