Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          +cCEZJy6bmFWAvIFnRn2pK+fR5S8Gy+QiK2bYxoDqoA=
Subject key identifier:   A8:E0:56:5D:CF:BC:9C:47:42:DF:B4:31:23:90:58:D5:EA:D3:83:8E
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       01985344879BC605085FB01F04361529DD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          1449
Signing time:             Mon 28 Jul 2025 23:00:56 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:56 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:56 +0000
Files and hashes:         1: 2vth8JCO_Wyd-5uRLg3PTDr-fFg.roa (hash: 9LUpst7vMTMHTa3hQ4R9T7kLec7gteJsYM3fKAc8ccE=)
                          2: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: or5kJUBIWiyKZDg4rpp1xHdyh2wYWikroGLC3Fo9q1U=)
                          3: LNIMITYAbnJvMYE5J7ei8eACNa0.roa (hash: TvpR/eCPWYxWewvW/DN1BJNGxjnk3BZ6oYY2B4jFvf8=)
                          4: TLJiRRlOwtTTUz20TZKNV_ibyho.roa (hash: nl+gTrTAcZwj7M8TY8eq7Uo7CmcdFRJEseyL47O4t3o=)
                          5: vd7D-3mdClrE2pBAFW5I8DbmNHQ.roa (hash: XeWgnqjmy+ysQNojNpVwYywd9xnz6oTic5jOkSU+sTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:87:9b:c6:05:08:5f:b0:1f:04:36:15:29:dd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Jul 28 23:00:56 2025 GMT
            Not After : Jul 29 23:00:56 2025 GMT
        Subject: CN=a8e0565dcfbc9c4742dfb431239058d5ead3838e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:25:a1:3e:7e:e5:e4:0c:e1:20:19:0c:56:
                    a5:d1:80:44:6f:85:e9:cf:45:11:0f:e4:e5:ca:97:
                    23:3b:21:8d:f8:17:9e:83:4d:e3:98:93:de:9b:2a:
                    8c:05:8e:c2:3e:4a:db:b5:2c:78:f1:b1:e2:f8:7b:
                    ce:d9:f6:8a:2b:a3:11:ea:41:0a:34:60:f7:60:e7:
                    01:62:a1:a2:23:88:ac:51:0f:ab:26:a1:23:ac:b5:
                    d3:dd:ed:00:0f:02:bf:c8:1a:76:d1:cb:56:ac:a7:
                    8e:42:81:ca:06:eb:b5:ae:70:f3:88:28:96:5b:16:
                    00:16:41:af:b8:c5:c7:43:1b:b0:8a:0c:7d:37:e7:
                    a5:cd:70:95:77:4e:c6:26:26:68:df:ac:ec:fe:cb:
                    cf:73:e5:21:06:91:c2:bd:d7:a4:a5:c5:d4:94:33:
                    07:ad:bd:f8:b9:02:b2:e1:15:3d:90:bb:ef:b5:4a:
                    c2:e9:f5:fc:15:e7:e2:19:f9:18:c8:f7:7f:1b:3e:
                    96:96:47:b2:ff:c0:2f:22:22:c7:6f:2f:9e:ba:20:
                    ac:97:77:a2:a0:d2:9e:97:aa:f1:ae:ef:b1:1b:83:
                    c2:83:01:6e:9c:bd:23:d0:5d:fb:ed:52:98:e4:f6:
                    66:34:c7:07:73:8e:f7:e2:33:67:bb:43:16:7f:a2:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E0:56:5D:CF:BC:9C:47:42:DF:B4:31:23:90:58:D5:EA:D3:83:8E
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:6b:6c:b1:ad:f1:cf:eb:1b:32:21:35:91:6f:85:b7:0f:d8:
         1f:4e:0e:f2:8d:9b:e2:23:24:75:0b:4c:99:8e:9b:b2:86:d7:
         76:8b:7f:07:a3:a3:b2:f7:7b:43:4a:9e:2f:aa:3a:e6:ae:c7:
         fd:7b:c8:3c:d6:66:e9:36:cb:16:26:f2:1a:b1:ed:2e:1d:93:
         8f:52:1c:fb:ac:e0:53:b1:9a:49:40:52:aa:9c:2f:80:e2:71:
         ae:e4:ea:c2:b7:5b:f6:87:72:36:8f:89:0f:2b:08:44:bb:67:
         70:96:94:27:70:9d:5e:de:dc:9d:35:da:e5:31:66:21:9c:b7:
         70:93:e7:96:a6:8b:0d:da:05:fd:c4:1f:64:8d:ba:d2:48:5a:
         53:c2:b3:a8:ab:9e:b8:30:36:4e:d0:2c:99:12:e5:a8:b9:d5:
         c3:5d:e0:d8:7c:80:5e:02:7c:19:d3:99:5b:a2:54:e9:7a:31:
         06:cb:0f:e3:12:47:e4:cb:9a:b6:65:4d:93:25:42:8a:bf:ce:
         db:d6:6f:31:ab:8e:d7:b4:aa:7f:b1:30:c7:67:15:08:f5:6e:
         19:f4:cb:19:c8:a9:a2:cf:2e:1e:9f:95:1c:59:e5:a9:76:78:
         3f:85:86:c5:51:33:bd:66:d7:42:91:e1:f8:f7:fa:0e:94:ce:
         5d:8d:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:16:56 2025 by rpki-client