Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File:                     iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier:          rrPUUf0Fj2WaaM3V6PInC36GVZDN68JgHasZH5gtMD4=
Subject key identifier:   C9:1E:5A:F4:F0:FB:34:D7:B8:1F:5C:EF:7F:2D:4E:E2:DD:4E:C0:98
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer:       /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial:       01984AAEB211B0B1AA9B3D6EDBD3A1DBB16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number:          0502
Signing time:             Sun 27 Jul 2025 07:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:19 +0000
Files and hashes:         1: Ajbz3OGkwZMEFq0jmclXR5Gr8N4.roa (hash: VyX/vNC7tiH5t3Mk3m61yLf9U3OPk8ttEhnvx5R6lEc=)
                          2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: IXkRUZeae8BbIbrmi2dCbkPFKR4zYeyGOZklqzVNfTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:b2:11:b0:b1:aa:9b:3d:6e:db:d3:a1:db:b1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
        Validity
            Not Before: Jul 27 07:00:19 2025 GMT
            Not After : Jul 28 07:00:19 2025 GMT
        Subject: CN=c91e5af4f0fb34d7b81f5cef7f2d4ee2dd4ec098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:8f:8c:47:55:1f:22:cc:64:58:13:ad:46:
                    f1:36:07:e4:4e:b6:c9:39:ee:8d:d0:ba:5f:2c:d9:
                    d0:15:4a:4b:ac:80:e7:b7:c1:67:1c:fc:98:05:1b:
                    0e:69:3c:96:d8:97:bb:ce:26:d2:04:1e:cb:4d:44:
                    99:4f:bf:76:50:58:37:93:5b:17:b4:2f:ad:a3:e1:
                    d5:15:e2:3e:8d:0a:0e:a7:fd:e2:3e:0e:84:95:e7:
                    f7:76:05:4e:6b:3c:c1:ef:2e:a9:65:fd:8b:ab:24:
                    08:b9:94:e6:a3:1c:91:fd:c6:19:3c:29:78:55:b9:
                    6b:51:64:83:9a:e3:62:fd:ff:cc:cb:dd:e9:25:93:
                    7e:91:9d:90:69:9a:85:62:b3:8d:ec:13:c4:c4:23:
                    5b:cb:81:4d:8b:eb:c1:f8:63:bd:02:ff:c0:a3:d1:
                    10:4c:58:2c:cd:9d:81:b2:a6:d5:f1:83:c5:84:e9:
                    f5:93:a2:78:9d:22:58:d5:ae:38:6d:e0:82:5e:29:
                    2e:30:d8:6d:22:29:78:55:02:72:08:aa:45:85:00:
                    af:21:bd:66:d3:e2:ba:92:e4:84:ab:49:4c:6c:8e:
                    81:a3:b4:2f:f3:02:c1:dc:7c:1d:5f:1c:4f:a9:ee:
                    ab:c1:9b:a6:e4:12:f5:bd:c8:1a:65:03:43:51:a5:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1E:5A:F4:F0:FB:34:D7:B8:1F:5C:EF:7F:2D:4E:E2:DD:4E:C0:98
            X509v3 Authority Key Identifier:
                keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c1:f5:50:a4:33:d9:9f:35:cc:0d:80:db:91:54:aa:41:b0:
         d3:b2:72:c3:ac:e2:f5:75:bf:df:e3:29:03:b7:b8:7b:c6:4c:
         90:ed:b2:54:04:c4:3a:76:bc:ed:ca:30:e4:4f:41:62:e0:63:
         d3:af:95:28:1e:e9:df:81:af:5b:d8:ef:7f:86:e7:b4:68:8c:
         0d:1e:88:82:b6:81:d0:e1:81:90:65:9f:54:ac:eb:2c:b6:77:
         c3:4f:3e:28:46:b9:f3:64:e0:c0:bb:37:44:66:c6:5c:b5:20:
         21:31:e3:67:20:8d:e4:0a:b5:b4:0d:3a:7d:4d:7c:88:eb:30:
         16:03:54:56:af:f4:ca:16:43:08:09:42:72:4d:c3:75:3f:dc:
         c5:fa:dc:8b:df:26:2b:8e:ba:9f:ae:34:56:56:82:38:2f:a1:
         70:cd:18:dd:c4:0f:3b:d4:bf:63:3e:ca:ac:6a:0a:35:e5:84:
         bc:a9:e0:e4:20:1e:3f:c7:16:81:74:53:1f:30:af:d3:8d:aa:
         13:a7:c3:f8:76:b1:5f:b6:aa:09:fc:a9:3c:ee:f3:97:ed:df:
         47:a9:98:2c:9d:da:14:ab:0d:29:15:85:a3:c8:6f:71:37:70:
         92:80:5c:b8:12:ac:36:1f:b9:78:d6:56:07:6e:23:05:f0:65:
         29:ff:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:32 2025 by rpki-client