Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File:                     Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier:          Wj2ZC302klEC3UbqwhNS0wFZ8K9vNtp5fnNLOe3knzw=
Subject key identifier:   98:12:3F:24:D6:A4:B0:18:04:7D:80:B0:B9:FE:47:A4:B8:F7:13:DD
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer:       /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial:       01984B540BB4368664F9EFE0820033BF59C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number:          0C0A
Signing time:             Sun 27 Jul 2025 10:00:55 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:55 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:55 +0000
Files and hashes:         1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: E8Q33lozCkoveTI5MnToa9qKLKdy68Q/6CYIzAEfGm0=)
                          2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:0b:b4:36:86:64:f9:ef:e0:82:00:33:bf:59:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
        Validity
            Not Before: Jul 27 10:00:55 2025 GMT
            Not After : Jul 28 10:00:55 2025 GMT
        Subject: CN=98123f24d6a4b018047d80b0b9fe47a4b8f713dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:59:1e:7d:83:96:99:69:59:98:d5:ee:2d:d4:
                    21:10:b4:d7:13:d6:69:61:10:8a:91:67:70:9c:44:
                    7c:62:2c:6f:dc:ac:cc:3a:0a:a7:55:ac:09:e4:1d:
                    cf:a9:a6:ed:ea:84:cf:58:5a:b5:c2:de:a4:0a:ad:
                    b8:ff:4c:b8:09:1d:08:6e:dd:fc:5c:93:e2:ad:02:
                    53:b0:90:49:30:69:2a:18:9f:94:eb:42:ef:1e:47:
                    59:18:48:ec:3e:ab:a1:af:b3:10:84:92:b4:59:29:
                    3d:49:9e:63:d4:27:c1:a6:43:04:1c:a1:55:74:b0:
                    90:86:f2:65:02:9a:f6:40:e0:0c:8a:25:29:bb:8f:
                    d9:74:80:41:67:da:67:cb:86:53:2b:6a:32:09:ce:
                    fc:45:64:8c:97:53:2f:76:30:82:1d:25:4a:60:2d:
                    60:c5:fc:22:df:ff:62:3a:2a:19:7e:e7:fa:3e:c5:
                    8a:16:03:1e:f4:6a:4d:ac:2b:5b:31:41:88:8b:80:
                    b2:70:2c:37:47:8f:e9:f1:d5:d9:a5:3c:65:05:8a:
                    48:11:0c:50:90:c0:51:d2:1a:14:5c:91:f9:05:fc:
                    29:50:56:8b:73:94:7d:61:40:44:c4:7b:8f:d4:02:
                    00:65:c0:2f:ae:90:29:34:25:53:21:f9:41:3b:b7:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:3F:24:D6:A4:B0:18:04:7D:80:B0:B9:FE:47:A4:B8:F7:13:DD
            X509v3 Authority Key Identifier:
                keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:aa:bd:69:49:6f:94:21:48:4f:cd:49:93:c6:c6:55:f8:da:
         5c:62:59:4a:98:e2:a8:79:5a:ad:51:d8:af:64:80:6d:82:fb:
         b6:84:29:ad:9f:4e:46:a6:c3:32:71:7f:c8:e8:13:f2:ec:80:
         65:b0:1a:f2:18:8b:57:70:02:f6:9f:ec:8d:96:b1:6d:f8:2e:
         9e:b3:b0:40:3e:dd:be:e4:39:bd:35:5b:18:fe:77:79:95:b2:
         bf:07:6e:d7:50:de:33:ec:ea:fe:a9:2d:42:9f:dc:1d:2f:3d:
         bc:79:06:1f:96:e3:b4:2e:12:cc:dd:3c:40:d6:40:3b:54:79:
         53:2d:fa:8a:2a:55:1f:4d:b5:7c:50:b2:3f:fd:4a:0a:84:d5:
         d8:6b:ac:79:26:1b:a3:23:3a:e4:54:5e:5d:7d:30:c7:d8:9d:
         60:83:70:1e:86:c0:5b:28:2a:e3:17:de:d9:60:a3:a5:8f:04:
         df:44:df:a9:de:93:27:49:a2:8d:bd:99:83:e1:b2:7d:df:d0:
         59:b7:67:8a:1e:b6:5a:58:7b:67:0f:48:0f:2f:db:7d:5b:51:
         0d:9a:ed:04:bc:1b:85:61:2c:62:04:2a:39:3a:3d:b2:86:0a:
         f8:59:9a:bf:4b:d9:6c:31:db:0e:c2:fe:09:e8:5e:cf:b6:84:
         af:2c:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:21 2025 by rpki-client