Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          FZpJrVBKkKt2XWeGCebsEJr412ysfpckN9I33QCZsQc=
Subject key identifier:   59:66:EA:75:02:A6:D5:67:53:51:F3:35:61:5D:CF:62:A5:E4:E8:BF
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       019848C0297A8AC3BDA0195D2785C3F4C00C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          010B
Signing time:             Sat 26 Jul 2025 22:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:09 +0000
Files and hashes:         1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: P9WJ5SUZsfuQOS7EwAoFtUMdLDX1dwLsDb586Eg+CSs=)
                          2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
                          3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:29:7a:8a:c3:bd:a0:19:5d:27:85:c3:f4:c0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: Jul 26 22:00:09 2025 GMT
            Not After : Jul 27 22:00:09 2025 GMT
        Subject: CN=5966ea7502a6d5675351f335615dcf62a5e4e8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:cc:3e:6b:a5:33:56:97:fe:33:0f:72:bb:
                    4d:3f:ec:2c:86:f6:e3:04:ae:0b:3d:ff:a3:8a:07:
                    b7:04:73:17:fc:14:b5:1f:72:4b:0b:ed:e2:fc:a6:
                    87:2a:c6:c2:6b:ff:38:32:4a:71:d5:dc:e7:8b:9b:
                    7b:6b:f4:30:22:ce:8c:92:29:64:c5:6f:28:2d:d5:
                    ff:fd:5e:69:50:f9:f5:9c:44:8f:b1:e6:16:41:b6:
                    52:06:fe:05:42:42:ca:d8:ba:7c:94:96:69:d0:6e:
                    18:52:33:9f:15:9f:c9:91:4d:37:fb:27:7a:d0:70:
                    11:32:49:8c:fd:08:71:3f:a8:9d:74:84:df:01:c8:
                    a5:8b:ca:a0:a5:ac:cb:ab:8e:a0:77:23:48:db:3a:
                    68:2a:b3:ab:b4:1a:ab:6d:17:d0:53:eb:4d:36:9e:
                    a4:61:05:67:de:b6:e0:3d:a1:f2:2f:49:00:02:44:
                    4b:6e:94:a3:ba:46:c2:12:ef:86:15:96:9a:d0:6b:
                    ab:c3:e6:2f:5a:61:d9:f3:ab:23:fc:96:78:d3:6c:
                    c2:c2:97:6b:f6:82:c2:52:37:e9:c4:ea:49:de:55:
                    5d:57:81:5d:30:61:fd:49:2f:32:bf:53:d0:3a:36:
                    f9:b7:6c:36:1d:84:20:14:fd:7a:3d:60:92:24:bc:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:EA:75:02:A6:D5:67:53:51:F3:35:61:5D:CF:62:A5:E4:E8:BF
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9c:ed:a8:de:1a:0b:e2:11:f0:a4:da:8f:79:6e:a4:1d:40:
         a9:06:98:3b:68:7a:da:3b:1a:bb:89:29:4f:d0:13:f3:f6:0f:
         29:33:2b:39:80:6c:a2:29:ca:3b:82:d8:11:97:24:d6:60:6c:
         c7:83:f3:ef:05:df:09:43:39:85:b5:61:e7:d6:3b:4b:5d:b2:
         a3:4b:db:97:22:3d:90:67:48:1a:05:f1:fc:ee:bc:d9:66:15:
         c6:d1:ab:76:e3:dc:40:f5:ba:82:fb:ee:15:58:3c:85:e7:dd:
         18:f5:72:e1:b6:fc:c2:db:29:b2:69:ba:03:80:5b:48:10:0d:
         a6:61:ad:67:a1:ed:ea:d8:c0:76:18:f6:4a:9d:d3:d6:df:6c:
         44:cb:3f:aa:63:9d:63:ac:6f:88:9d:18:6c:39:9f:d5:73:b1:
         0a:8e:75:97:11:1f:8e:ce:03:f7:06:7e:9a:6c:ed:f5:3e:10:
         9e:0d:bd:2c:22:ee:79:e8:1e:15:dc:2e:1e:82:0a:36:12:10:
         95:75:8f:a2:23:4d:90:d3:45:69:11:dc:a0:cc:d3:4a:f7:d9:
         45:eb:f9:78:27:a3:6a:cb:56:14:7f:e7:b9:0d:20:8b:a7:b3:
         9e:69:7c:08:48:06:d2:61:54:6d:af:aa:c4:91:68:97:d0:94:
         11:ef:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:18 2025 by rpki-client