Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          Cu2O4V2FWOAj5g0YIG5hYRaaISvIbjWok9SDJ3LevpY=
Subject key identifier:   D8:8B:CD:B9:46:8D:0E:F2:84:FA:3D:F7:1A:9D:3F:C4:8D:84:3D:FF
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       019848C0367359D230023025D719B6E8D985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          1341
Signing time:             Sat 26 Jul 2025 22:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:13 +0000
Files and hashes:         1: JROuZAUGn_uROa26H7eCA7kb4tU.roa (hash: VxgK0RqcCU8OfeeQD1Bnel6yFDs/O6brmPZY7KVwoN4=)
                          2: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: gaK1B0QfTONeofr+ewHwQT6fDgDaPXPgLQXszE6oTR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:36:73:59:d2:30:02:30:25:d7:19:b6:e8:d9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: Jul 26 22:00:13 2025 GMT
            Not After : Jul 27 22:00:13 2025 GMT
        Subject: CN=d88bcdb9468d0ef284fa3df71a9d3fc48d843dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:be:17:d6:f9:15:d0:b9:b5:0b:29:a2:be:
                    f2:ec:0d:e1:35:79:c3:62:d5:ba:48:dc:95:51:bb:
                    18:13:23:4a:67:84:b4:ed:0f:00:75:ef:c8:47:d2:
                    6b:87:52:5d:54:41:3f:91:42:f5:81:5a:41:b9:c4:
                    36:b0:d9:cf:67:b7:66:4a:6a:c9:11:13:87:29:a2:
                    61:47:50:f4:45:7a:0e:53:ae:fd:3b:c9:94:9e:38:
                    f3:fb:f1:40:8f:cd:8c:01:fd:b0:bb:7f:7c:05:2e:
                    14:a2:ed:59:cf:df:f3:a2:47:5b:8e:78:87:f4:bd:
                    cf:0e:1b:7c:13:88:83:ab:b6:15:80:ef:d3:1a:24:
                    6f:27:7a:d3:d3:83:cc:99:d2:3a:0e:e1:9b:4d:89:
                    e0:14:cb:5e:91:36:20:7e:fb:b5:f5:39:26:f9:2a:
                    a6:68:06:51:50:bb:3e:70:f0:4e:8c:3b:1b:7e:7f:
                    66:a4:6b:4c:8b:c1:e3:d0:06:df:91:df:29:87:61:
                    68:b0:b8:91:8e:49:15:41:28:f5:39:b8:02:2a:e9:
                    ee:8f:d3:78:a3:c2:29:15:a7:42:fd:89:3a:c8:10:
                    4d:f6:6f:b7:55:12:cd:75:c0:8e:fe:a9:57:54:f3:
                    f9:d9:19:b5:df:d1:c9:7c:b5:d4:81:f0:6a:3d:87:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8B:CD:B9:46:8D:0E:F2:84:FA:3D:F7:1A:9D:3F:C4:8D:84:3D:FF
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:a2:ad:e7:91:10:c5:b3:28:6f:c8:17:67:37:f3:52:ca:
         87:d0:5d:15:da:e9:35:e4:74:9d:13:09:a8:e9:a2:2a:15:3d:
         d6:46:e8:a0:e6:8c:29:43:fe:b3:68:74:c2:0c:ef:40:bd:0f:
         a2:cc:41:df:5c:56:a2:af:7d:4c:07:fd:d7:e7:00:24:b7:a4:
         47:71:e8:c3:ec:be:73:1a:7d:ca:89:db:0c:19:8c:34:82:51:
         52:a9:1b:b0:04:85:17:2d:9c:35:08:39:45:fe:8f:e2:e6:79:
         57:c0:26:83:81:f6:1e:7c:41:62:45:26:7c:46:8a:ec:79:e9:
         50:9e:9c:26:2b:ef:40:08:c0:9c:90:b6:41:2d:39:b6:ea:21:
         bf:96:1e:bf:78:05:e3:eb:67:e1:57:6e:43:28:29:ea:63:36:
         82:da:28:10:1e:b6:b1:cd:92:d3:bc:9a:27:a8:44:58:d6:0f:
         28:27:b3:ca:35:be:f8:ef:ef:cb:06:bb:fd:fe:b6:58:3d:17:
         49:4b:87:3d:52:d5:14:ac:af:12:90:bc:1e:f1:68:31:3a:a8:
         6c:a2:25:b5:05:bf:40:4a:fe:c2:cd:b6:51:44:d3:29:aa:f8:
         3f:dc:56:0d:d9:64:4b:fc:6d:a2:ce:f6:90:5b:7e:67:94:5f:
         35:a8:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:15:03 2025 by rpki-client