Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          TYVWDr3UHse0Pq6GFhC0nHCnYrMjn/X662vnFZypF0U=
Subject key identifier:   C1:9E:E5:7D:7C:07:89:83:C4:5D:B0:3D:96:BB:B7:58:E9:5A:6F:98
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       0198518C4AE6382ECC3178802673FC39E751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          132F
Signing time:             Mon 28 Jul 2025 15:00:05 +0000
Manifest this update:     Mon 28 Jul 2025 15:00:05 +0000
Manifest next update:     Tue 29 Jul 2025 15:00:05 +0000
Files and hashes:         1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: l9fJpVpVAraGBSYD1Q+HF/Mj+kYgar41jfsEi5KqiK0=)
                          2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:8c:4a:e6:38:2e:cc:31:78:80:26:73:fc:39:e7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: Jul 28 15:00:05 2025 GMT
            Not After : Jul 29 15:00:05 2025 GMT
        Subject: CN=c19ee57d7c078983c45db03d96bbb758e95a6f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:83:76:fb:c3:bf:95:4d:93:1a:c3:13:67:
                    2e:fe:7a:43:f0:8a:76:44:84:83:51:dc:83:61:b4:
                    72:bb:a4:19:cb:f9:a3:08:11:ab:1a:29:ae:2a:87:
                    a3:33:8a:3f:a3:53:96:20:79:2e:8f:8a:c4:ed:05:
                    80:e9:ae:d4:c2:6e:12:a7:bd:2f:bf:78:18:c4:6c:
                    c1:cd:5e:7f:a9:51:50:0b:91:19:f7:49:63:1e:d3:
                    2b:49:ae:97:35:84:29:e0:8c:25:9f:fa:a1:e8:40:
                    4e:80:75:62:5b:37:30:c6:c4:dd:ae:49:ba:d7:94:
                    c4:8b:7d:bb:ef:01:2f:42:ac:32:ba:b2:88:42:fb:
                    66:57:37:8e:0f:aa:7d:0b:e6:27:af:e1:d5:d0:47:
                    f0:53:5a:4c:2c:c2:49:c2:f0:68:ff:7f:ea:91:d1:
                    82:52:21:2a:75:3c:9a:12:00:28:eb:1f:38:22:60:
                    c3:a3:e9:5b:25:c7:58:0c:cd:41:82:ae:26:b7:9e:
                    bd:41:35:62:a9:17:1c:6f:3d:fa:c5:78:f0:e1:5c:
                    d9:e2:8b:eb:d3:2c:66:45:e5:e8:5d:17:ad:50:0d:
                    31:c9:dd:c7:80:0a:d2:a9:34:94:52:3e:74:02:2c:
                    bd:4b:09:c1:59:e2:36:d6:b3:b6:00:9b:d4:9a:42:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:E5:7D:7C:07:89:83:C4:5D:B0:3D:96:BB:B7:58:E9:5A:6F:98
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:09:bf:d5:89:96:bb:42:23:3e:a4:63:f5:aa:57:d6:05:
         54:f6:8a:d1:1f:f7:1e:50:18:62:47:18:bf:51:62:cd:37:56:
         05:90:af:11:8a:7c:70:67:00:5d:4b:80:dd:49:55:8b:57:fc:
         81:c0:31:e8:25:3d:da:d7:34:4a:0e:55:39:2f:f3:ee:1f:6d:
         db:97:41:3a:b9:64:00:04:a5:08:5e:8d:1c:81:b7:26:77:50:
         ef:d9:c6:b7:76:09:08:82:2c:51:54:16:01:6f:0c:15:9b:ba:
         2c:7d:fc:98:75:0d:a8:4c:43:4c:4f:c7:ea:ed:56:b2:a1:55:
         3e:38:d8:2e:50:36:62:1e:35:74:68:f9:9a:c1:e7:64:a7:a5:
         c0:a9:d6:55:85:bd:78:a6:a4:61:7a:57:a1:53:fb:d6:3f:f0:
         4a:41:7e:3e:58:6c:af:9a:3d:7a:b2:34:58:f3:44:42:cb:b6:
         de:53:ec:f3:f9:d6:dc:46:3c:33:bb:e0:20:0f:0f:9f:e7:ae:
         29:db:a1:29:3f:32:6a:3a:06:4e:81:de:ae:95:ad:b6:14:15:
         45:bd:a3:8b:60:27:9e:6e:37:f9:57:6e:23:dd:f5:ca:93:74:
         ef:b0:d9:8b:da:15:59:f9:d3:07:3a:93:81:ad:b0:37:5d:64:
         bf:ac:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:21:21 2025 by rpki-client