Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File:                     RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier:          WppeR9dGF6A2z5W8BIxapT4QWRrTgXyQn2s3+ulzIMk=
Subject key identifier:   28:51:8D:C3:F0:CD:DC:26:42:57:F2:FC:AF:F0:6F:23:64:D3:E8:A2
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer:       /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial:       01984A40DEA4CC53AC934D8E3865F77628E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 05:00:21 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:21 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:21 +0000
Files and hashes:         1: CgYapJdE3lATpkmQavkm2MlhTAs.roa (hash: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=)
                          2: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: w6oJBhh9w0yc6XQSCnpt6XmbwO5uncgEeR6bGu1XtP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:de:a4:cc:53:ac:93:4d:8e:38:65:f7:76:28:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
        Validity
            Not Before: Jul 27 05:00:21 2025 GMT
            Not After : Jul 28 05:00:21 2025 GMT
        Subject: CN=28518dc3f0cddc264257f2fcaff06f2364d3e8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:be:19:71:b3:e0:e9:65:d6:b4:81:e9:34:
                    91:36:5c:93:42:e4:37:68:2b:cc:f1:a4:cf:63:cf:
                    8e:a9:08:a9:39:5a:4c:2e:20:77:b4:e9:64:a4:9c:
                    93:5e:e5:9b:14:3c:4e:59:20:fc:9c:c6:a6:2b:40:
                    4b:46:d2:8b:c6:b7:da:33:b0:26:0b:98:d2:03:59:
                    36:e3:0b:06:2e:d4:55:e8:cf:8a:f5:a9:6d:87:6a:
                    7b:e6:7e:94:5a:49:88:59:29:14:c5:55:33:3c:7b:
                    c6:cc:68:5e:82:f5:b2:be:b4:8c:8f:7f:ff:b8:1e:
                    5d:90:8d:0c:2a:d2:1e:d3:f2:f2:32:c9:13:44:44:
                    ba:bb:68:a3:68:7d:5a:b0:bb:79:68:0b:73:8a:b8:
                    c4:a0:73:54:8d:cd:ff:81:45:19:e2:47:d2:34:8e:
                    38:7b:10:9e:0a:49:4b:db:49:c0:8c:83:97:34:67:
                    7b:87:0e:0a:b8:0c:5e:03:9b:33:da:75:fe:5e:ae:
                    2a:9f:d2:44:c4:fa:fb:6d:40:e4:4a:1e:75:f0:cd:
                    d1:31:0b:6b:ab:e7:f1:a5:87:28:48:38:21:cf:7e:
                    59:73:68:c6:3a:8e:60:e8:50:98:d3:fc:6b:89:53:
                    14:c2:a8:fb:5c:64:74:f9:2f:2c:b4:e8:50:c6:90:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:8D:C3:F0:CD:DC:26:42:57:F2:FC:AF:F0:6F:23:64:D3:E8:A2
            X509v3 Authority Key Identifier:
                keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c1:22:6b:69:7e:08:5c:dc:0a:b9:51:27:b2:33:53:78:d0:
         a2:91:05:f7:37:eb:a1:93:fa:1e:46:1f:e1:dc:06:df:04:80:
         2b:b0:4c:14:33:f9:ce:a2:b9:9b:a6:0c:17:22:8a:ac:d3:a3:
         2d:76:15:2a:9b:92:4a:4c:71:f2:e8:dc:d3:ad:0c:46:21:50:
         1a:12:10:4a:af:25:d0:32:c7:7e:b2:73:eb:91:ba:ba:0d:64:
         10:7e:bc:72:f2:9f:b8:7a:04:d3:d7:f2:bb:c0:73:53:11:f3:
         bd:b1:64:ac:e0:41:ba:da:18:ed:33:20:da:4b:42:91:97:5c:
         2e:eb:0f:1c:85:6d:a3:a3:02:8f:63:6f:4f:cc:7e:da:ff:2f:
         73:3c:fc:a1:ad:51:c5:05:cc:e7:96:f6:a3:68:37:ca:d4:2a:
         14:e8:72:5c:08:20:51:ec:c6:61:69:ad:b8:73:0e:10:58:56:
         c3:c7:7f:24:6f:76:b8:a9:4d:7c:bd:e7:4a:1b:5f:b7:d0:b6:
         00:c8:e2:fa:c6:d0:e5:da:15:4b:44:74:d5:3d:3f:90:20:41:
         c0:62:44:f8:10:a5:b7:ff:d5:ce:67:51:f5:46:c6:5f:1a:e2:
         5c:64:8b:c6:b9:92:c6:53:57:a8:a1:c8:53:86:ca:1d:9b:43:
         58:74:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:18:08 2025 by rpki-client