Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File:                     scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier:          DD8gorqQeHW72NTXxjpgSs1jxXXi/j6nsxXKdBBZaCE=
Subject key identifier:   44:FC:58:44:A4:25:59:09:AF:E1:A6:87:E7:FE:08:70:F3:9C:95:77
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer:       /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial:       01984A77D8231A28ED724F006BCF2E391FAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number:          0A65
Signing time:             Sun 27 Jul 2025 06:00:24 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:24 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:24 +0000
Files and hashes:         1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
                          2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: rFM8x7p/3H/7eyRO3A2T/A7epIghqlvm3yFyef+Wzrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:d8:23:1a:28:ed:72:4f:00:6b:cf:2e:39:1f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
        Validity
            Not Before: Jul 27 06:00:24 2025 GMT
            Not After : Jul 28 06:00:24 2025 GMT
        Subject: CN=44fc5844a4255909afe1a687e7fe0870f39c9577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:e3:6b:46:97:b6:4a:3a:16:28:cc:72:f5:
                    29:91:92:4c:33:da:34:fa:25:78:19:f4:8b:d7:6a:
                    41:cd:68:52:af:c9:cb:e8:5e:5f:47:de:e7:24:5b:
                    5c:e8:0e:b0:38:a8:58:c5:c5:79:c7:d1:6f:8f:fe:
                    75:fb:d2:5c:a7:e7:eb:f6:12:1b:6e:47:08:4e:8f:
                    18:78:8a:e5:44:32:35:fd:75:a9:48:e3:5c:b0:43:
                    9b:2f:fd:7e:56:c0:77:cd:de:56:3e:ba:83:0d:23:
                    8f:a2:25:0b:c1:90:6e:c0:4b:ac:7b:a3:30:eb:16:
                    a4:fa:64:8c:13:a5:94:2b:c7:ab:8b:bf:6b:6e:75:
                    7b:34:58:62:16:1d:1e:b8:60:0d:e2:cc:86:cc:d0:
                    fe:4f:e4:4d:14:0e:9c:83:58:0f:c5:27:df:fc:46:
                    53:29:99:38:5e:88:3d:a0:37:9c:01:7d:10:93:bc:
                    72:eb:04:b5:cf:c6:56:23:c6:5f:3f:09:76:61:ca:
                    a8:3d:f0:c5:6a:b9:f2:45:95:13:86:88:4c:70:1a:
                    63:32:0f:41:5c:9b:1f:99:34:92:5f:f9:a5:6e:84:
                    aa:bc:8d:6b:cc:c5:44:82:79:a2:11:63:f2:b9:7c:
                    28:15:ef:da:9e:f1:89:40:92:62:21:83:90:9f:5a:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:58:44:A4:25:59:09:AF:E1:A6:87:E7:FE:08:70:F3:9C:95:77
            X509v3 Authority Key Identifier:
                keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:07:2c:45:d4:0f:6a:ea:30:76:bb:9d:33:32:7a:6c:84:59:
         88:ec:a1:93:1e:7b:e6:b2:aa:8a:33:8d:68:c9:aa:e9:7a:1c:
         29:30:fb:16:51:c7:3c:04:a1:04:b6:9e:e9:94:04:cb:70:c0:
         9e:e7:b5:6c:55:ca:d6:7b:bb:3b:1e:10:41:6f:f2:40:19:21:
         21:c4:32:81:6e:31:3a:65:d7:d9:68:70:19:c8:c0:88:f9:1e:
         8b:d5:55:3c:02:03:8d:ad:48:b6:04:3f:4b:9b:ca:0a:d1:15:
         40:ee:79:39:34:ba:9c:f5:58:9d:bb:2a:da:ba:8a:cd:0a:e8:
         89:a9:b8:85:e6:60:c3:89:8d:78:ed:50:2b:bb:b7:e4:01:52:
         0c:6a:53:48:86:38:a8:69:0a:ee:31:ca:f8:9e:71:61:5d:62:
         c3:ce:65:8a:fe:2a:3b:f1:ae:0b:02:84:59:6d:bf:ca:b0:02:
         30:74:47:48:65:9d:ae:fd:2c:8e:e7:20:3c:e2:0d:f8:09:f8:
         e2:1c:90:2a:40:a7:a2:c4:83:51:87:6e:b5:12:84:b1:42:95:
         bb:79:5c:37:d1:9b:f0:0d:16:5a:e1:f2:a4:35:eb:19:86:0b:
         0c:89:59:bf:27:09:36:8f:cb:bd:3a:27:ed:cf:cd:03:23:b9:
         ef:53:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:01:37 2025 by rpki-client