Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File:                     p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier:          gpYVS0h/OEa2MrTPsJO/LPwrwuJq3qdQIoRNQQzQEls=
Subject key identifier:   77:8B:8B:FD:53:1A:E7:1F:DE:EA:A8:0A:F8:79:B1:7C:7C:C4:3B:3D
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer:       /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial:       0198481BB4D30C8C165E83FFF06C74F1AF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number:          0CB8
Signing time:             Sat 26 Jul 2025 19:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:31 +0000
Files and hashes:         1: Z94Es0pJzdNNFG_pvtxbCrg0w94.roa (hash: uXR+OJPAQJAMUd3RxLmxlHyff75ZTmhyAoVDvTJyktM=)
                          2: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: KymJnEsQXi050lZsP68vXBx0C5JR+b4UtpquGDF1/yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:b4:d3:0c:8c:16:5e:83:ff:f0:6c:74:f1:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
        Validity
            Not Before: Jul 26 19:00:31 2025 GMT
            Not After : Jul 27 19:00:31 2025 GMT
        Subject: CN=778b8bfd531ae71fdeeaa80af879b17c7cc43b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:be:7e:c8:91:32:93:20:99:19:0d:d5:b1:
                    d9:94:65:ac:89:e4:35:18:d8:fb:bf:1b:5a:50:24:
                    62:49:db:7d:ff:a1:a0:33:c3:2b:ed:2c:5f:00:e3:
                    9f:96:b7:30:d5:5a:b1:7b:24:74:22:58:41:f7:bc:
                    07:01:d1:5e:cc:36:53:30:fa:e3:2d:b0:fe:02:25:
                    72:b1:73:a4:d6:97:db:19:b1:5f:0b:4c:a2:85:91:
                    f6:40:9f:a4:cf:90:bf:72:3d:e3:ce:1d:dc:2d:59:
                    34:e3:79:c0:47:04:e9:bf:84:3f:c5:08:38:f8:32:
                    16:82:34:7b:8a:44:68:04:b8:67:a1:99:01:59:ff:
                    5a:39:44:03:46:8f:2e:08:0c:3c:d6:eb:30:c9:15:
                    a3:8a:c9:66:df:36:fa:59:43:2a:55:c8:94:31:3e:
                    6d:9b:a8:6a:5a:02:ee:1c:87:0a:3e:3a:85:54:7e:
                    25:84:ca:a2:bc:e7:35:5f:0b:29:cd:98:19:e1:a2:
                    85:67:15:2d:7a:ef:d6:70:75:6a:4f:a3:57:ad:22:
                    99:ea:cd:52:66:18:92:e4:0e:9f:d7:51:e3:96:f6:
                    29:ad:00:2c:f5:80:69:9a:7d:e7:2e:b5:d4:8f:3a:
                    1f:b0:87:4f:44:15:55:f7:84:f4:e6:83:aa:ec:8e:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8B:8B:FD:53:1A:E7:1F:DE:EA:A8:0A:F8:79:B1:7C:7C:C4:3B:3D
            X509v3 Authority Key Identifier:
                keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:a0:33:df:49:bd:6c:70:00:0b:14:3f:08:ea:8e:19:00:
         57:61:d4:a8:f7:4d:b5:32:e5:b7:18:c3:99:e9:52:a8:98:01:
         be:7e:f8:07:7d:58:91:85:d2:44:e2:26:91:7c:10:29:1c:ef:
         7a:ab:0e:ac:c0:8a:44:c2:53:d2:37:ba:e6:cf:ea:38:62:2a:
         dc:ba:44:51:c9:c2:ea:af:f5:77:27:38:17:7e:ef:18:93:7f:
         cf:a9:03:88:84:6e:ca:3d:30:8b:49:91:90:19:70:04:30:00:
         4a:de:b2:c5:f2:a9:ad:d7:4e:98:8b:f2:bc:d1:42:2c:4b:9b:
         f7:0f:22:60:75:b1:e5:85:4a:c5:13:3e:85:f3:0e:d9:41:78:
         2b:2d:24:31:d0:4b:dd:bf:b1:89:04:71:c0:eb:72:f0:81:25:
         54:c9:58:7d:c9:08:d6:7d:62:e2:fe:04:ff:69:ea:91:ac:e3:
         e7:ef:09:c7:6d:98:51:d6:cc:b0:98:f6:bd:15:5c:27:5e:a4:
         16:be:ae:c7:01:b7:e9:88:2d:b2:75:d2:8c:65:bb:c1:26:1e:
         76:14:b7:50:32:6a:d0:7e:e0:b8:92:10:88:bf:33:bb:47:33:
         9c:46:c9:86:46:c5:d8:63:3d:5c:bc:3b:3c:3b:0a:c7:e4:a4:
         a8:fb:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:59:24 2025 by rpki-client