Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
File:                     peab2C1ewMe9PV3J-SkC8141ekU.mft (raw, json)
Hash identifier:          JQStAIGlfpN+Zk92ejHDnhZ+3HOqvr+2voGEoNwqOHA=
Subject key identifier:   B1:9E:71:E9:9F:C1:5E:60:EA:70:30:F7:11:BB:3B:0B:F3:74:98:8F
Authority key identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45
Certificate issuer:       /CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
Certificate serial:       01984219AA01A12408238EFCD2E7E7C79809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
Manifest number:          133D
Signing time:             Fri 25 Jul 2025 15:00:34 +0000
Manifest this update:     Fri 25 Jul 2025 15:00:34 +0000
Manifest next update:     Sat 26 Jul 2025 15:00:34 +0000
Files and hashes:         1: bvafkdXWZnMB_mvjbu-MAxSD4Yo.roa (hash: GpeEOD6j0SJeb7dFldEdJfdSWaMlKEyCXikEQdhGnF0=)
                          2: peab2C1ewMe9PV3J-SkC8141ekU.crl (hash: FjoxwSJJ7+HKdMW4Ig64SxeX7R39ZZQ/gerOB9+zrpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:19:aa:01:a1:24:08:23:8e:fc:d2:e7:e7:c7:98:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
        Validity
            Not Before: Jul 25 15:00:34 2025 GMT
            Not After : Jul 26 15:00:34 2025 GMT
        Subject: CN=b19e71e99fc15e60ea7030f711bb3b0bf374988f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:f2:91:df:ab:ea:f6:a3:3e:13:3e:0e:27:
                    89:c9:d0:31:a6:2e:68:1a:b2:01:5e:ac:29:73:37:
                    79:0f:2f:3b:c7:03:d1:ed:3e:87:c5:b0:c9:d5:73:
                    3e:5a:36:30:98:a9:08:27:59:e4:e8:60:16:d8:00:
                    f4:c8:e7:05:17:3c:ad:76:db:68:db:b5:12:35:9b:
                    cc:2b:4d:97:68:df:d5:13:42:28:db:63:c3:87:9f:
                    f1:f5:6c:5d:c1:89:a8:3a:17:8d:69:1c:e7:2a:b7:
                    00:5c:6c:63:ce:f9:b0:4c:a5:11:39:ef:7f:09:1f:
                    7b:24:1a:74:ce:9a:df:3c:d8:f3:1b:32:c3:68:e4:
                    ea:16:b6:4d:93:14:0b:c0:98:cc:8d:53:27:1c:f9:
                    86:af:3e:08:8c:66:f0:f0:bf:c2:a6:ea:3c:c3:65:
                    c9:e5:ef:e6:ed:ab:e8:47:10:3c:55:2f:85:d6:b5:
                    bb:72:b7:fc:2c:b8:2f:e0:10:23:f9:ee:92:72:09:
                    2a:27:b3:c1:c6:27:56:ae:1c:7b:58:7d:9b:a9:74:
                    5e:7e:45:0f:b6:d5:78:18:e8:ed:ed:93:75:83:85:
                    b2:d7:d4:7d:96:9b:b3:b0:4c:62:aa:08:ce:9f:b1:
                    dd:7b:a3:a1:20:53:83:33:01:e4:91:ad:61:73:87:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9E:71:E9:9F:C1:5E:60:EA:70:30:F7:11:BB:3B:0B:F3:74:98:8F
            X509v3 Authority Key Identifier:
                keyid:A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:08:60:bb:79:40:d2:69:7c:54:4f:5d:98:f8:07:8a:33:a9:
         7c:d5:44:e2:23:83:fc:b9:6c:d0:37:de:4c:1d:4e:50:c4:4e:
         df:8d:53:3d:76:12:f7:89:48:1b:3a:c6:27:54:2f:e8:39:f1:
         f5:d6:ac:f0:d8:cf:9a:7a:4a:cf:08:78:b2:d3:99:df:7d:31:
         ca:0a:a4:aa:5f:a6:4e:6a:74:2f:b9:f9:aa:51:2a:41:d0:ae:
         08:cc:32:75:b5:95:3f:7f:0c:8b:dd:eb:e1:dd:7b:d5:8e:73:
         b1:6f:88:a4:cd:22:e8:4f:5b:f8:57:bc:75:ee:5d:cd:ea:c6:
         18:23:51:f4:01:50:17:8a:f9:50:ac:a3:b7:59:7b:ff:17:13:
         06:1c:34:06:ee:22:ae:31:b6:22:cb:49:e7:7a:59:ab:9b:3d:
         ee:b2:7d:b4:2f:c8:60:61:9a:99:04:2e:2c:e0:95:24:f7:d6:
         41:89:38:64:31:9f:a8:5e:43:3f:d7:45:4c:ad:e4:83:1a:5b:
         9d:84:d0:89:dc:91:95:6c:57:d3:6a:ec:1e:61:bb:f2:d4:4d:
         2f:3c:33:6e:5e:c1:79:f1:b0:4e:e7:27:06:58:f0:a2:ee:5d:
         23:2f:ab:93:dd:5f:ea:2f:78:ee:53:a6:ba:d2:e4:ed:f4:79:
         11:c3:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:16:58 2025 by rpki-client