Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File:                     1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier:          Z7jLANdHX6ezFhbMyBFYo/+ELvbsqaOFJkXZh0pyjRI=
Subject key identifier:   14:E2:B0:C9:DA:30:06:4D:64:63:F8:C1:2E:2F:F1:D3:53:F1:6A:22
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer:       /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial:       01984A41816A37F177E4F3DD701D008BBD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 05:01:03 +0000
Manifest this update:     Sun 27 Jul 2025 05:01:03 +0000
Manifest next update:     Mon 28 Jul 2025 05:01:03 +0000
Files and hashes:         1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: yb6qOXE6lBI33dQugBVtzoFO2B+l7ekD3EDpkYCRTzU=)
                          2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=)
                          3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=)
                          4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:81:6a:37:f1:77:e4:f3:dd:70:1d:00:8b:bd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
        Validity
            Not Before: Jul 27 05:01:03 2025 GMT
            Not After : Jul 28 05:01:03 2025 GMT
        Subject: CN=14e2b0c9da30064d6463f8c12e2ff1d353f16a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:53:7c:c6:23:a0:5f:14:64:0e:76:49:5b:
                    fe:0f:c2:53:52:8a:6f:d9:bd:0a:58:83:8d:20:ce:
                    5a:13:f7:72:53:fc:f6:32:5f:c5:83:ea:e4:8a:fc:
                    69:1c:93:e8:ce:4d:e6:db:5c:8c:ab:2b:df:66:1a:
                    3c:df:68:e8:3f:92:94:8d:83:c9:42:95:62:a9:3c:
                    0f:0f:1f:50:d8:a6:ab:7d:fa:60:ff:de:24:66:33:
                    92:e3:1e:c2:7a:7b:d8:8d:80:c8:3d:dd:46:1b:68:
                    0d:e4:86:9a:66:c3:a8:48:27:1e:b1:b4:67:4b:ae:
                    7f:1e:78:8f:d5:ce:f6:87:58:b8:b4:47:e3:ba:71:
                    00:e6:de:bd:0f:79:45:6a:43:1a:c2:77:a5:65:f5:
                    09:de:e9:cb:2d:65:23:cd:80:ed:35:b1:98:2b:4e:
                    9a:b3:3c:1a:ae:7e:e8:be:b1:c3:a5:86:fd:c8:22:
                    1c:dc:70:d8:b8:6e:10:54:2c:8b:52:f0:b5:5a:af:
                    42:a0:fc:04:4b:95:28:b5:dc:bb:e9:b6:c6:e5:ba:
                    af:6d:12:bd:71:6d:07:8f:10:65:17:80:6a:c0:39:
                    5f:d3:64:19:3a:f2:2f:c3:3f:7a:b2:7e:a0:f2:b5:
                    6a:96:2f:4d:ed:32:fd:08:95:02:2a:51:6b:b4:42:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:B0:C9:DA:30:06:4D:64:63:F8:C1:2E:2F:F1:D3:53:F1:6A:22
            X509v3 Authority Key Identifier:
                keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:7e:b3:70:f8:8c:bb:b3:26:f6:df:92:83:46:53:00:ac:
         48:94:6d:c2:5d:65:20:58:9e:20:55:77:50:b8:a8:92:f3:e3:
         3e:0f:27:29:bd:22:d9:12:06:d5:c9:5b:04:91:4e:89:c0:5b:
         d2:01:9a:74:d2:50:f6:fd:e4:c9:89:77:8d:33:10:15:a8:63:
         04:6c:ff:3b:e9:95:49:58:34:9a:7e:9a:db:99:f0:97:77:7c:
         31:cc:d8:5a:ef:d8:30:96:96:a0:2f:1b:7e:cb:aa:c4:86:9a:
         ce:2d:9a:17:62:a8:3c:ce:99:b7:82:8e:04:25:cc:ab:ce:8c:
         4b:ac:5e:17:9d:6f:cd:10:f5:82:6f:76:e9:a3:b5:3c:47:02:
         44:90:bc:c8:30:0e:1f:6a:b2:6f:5b:ca:09:ce:1f:ce:29:ec:
         68:f3:33:2e:22:fb:7b:d0:78:f8:20:e6:16:30:0c:a0:fa:67:
         0a:96:d9:85:07:1a:2f:6a:b9:8d:9e:c7:14:f8:71:6e:5a:36:
         8f:ea:7a:13:2d:d4:59:c1:33:28:32:9e:29:80:1b:07:0f:17:
         92:1d:0c:63:d8:ad:1e:8a:24:b2:e4:2a:09:6c:fa:61:00:30:
         c5:3d:d2:34:ee:3e:a5:92:22:cf:e5:33:96:bb:bf:52:fb:b9:
         0e:96:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:54:59 2025 by rpki-client