Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File:                     R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier:          Yg8Szhr7cfhNtuJQy4hv1YF84UlJXDalcREU503MY8M=
Subject key identifier:   14:EC:15:7A:5F:86:1B:84:61:8E:DE:32:B2:63:70:90:F3:E2:B8:A9
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer:       /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial:       01984A40FBA3CAB025A60D1F4EA25D0918AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number:          04CD
Signing time:             Sun 27 Jul 2025 05:00:29 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:29 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:29 +0000
Files and hashes:         1: 2E-i-XVwWZd-hZzL5RDcxHIUK_w.roa (hash: kmE7612P7PDRz8jZU91zzdg87lpJGT1okogHYfmxmWk=)
                          2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: yIv5MFaE3bq8YUu/z0SGfPOzt+hcNKnforPKqpJUb5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:fb:a3:ca:b0:25:a6:0d:1f:4e:a2:5d:09:18:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
        Validity
            Not Before: Jul 27 05:00:29 2025 GMT
            Not After : Jul 28 05:00:29 2025 GMT
        Subject: CN=14ec157a5f861b84618ede32b2637090f3e2b8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:4b:ad:79:55:24:ec:a1:5e:13:66:54:ba:
                    49:24:b0:fc:36:2c:35:9d:a7:c9:ea:e1:18:0e:21:
                    2b:14:9b:ed:d6:2e:f1:92:44:78:4a:c9:20:3c:d5:
                    6b:51:77:e7:e1:91:82:c3:26:75:08:42:46:cc:47:
                    3e:d3:66:03:52:36:88:83:44:9e:21:bd:3f:79:01:
                    f4:08:93:8b:34:bb:77:d9:00:2e:da:a8:18:d1:07:
                    f4:93:d0:78:0b:26:c0:40:9d:ec:a5:4f:4c:0b:5a:
                    fb:23:fe:a2:09:25:99:f5:c2:2a:86:48:03:ee:d6:
                    25:0d:06:15:de:55:4e:53:43:51:d9:ef:0f:c2:20:
                    3a:d0:18:63:87:55:f1:af:b0:e7:d1:27:1a:b8:f0:
                    ad:8b:74:d1:65:49:11:7d:7a:05:b9:f7:9e:5b:00:
                    b5:72:53:e4:8e:14:6f:62:ed:71:48:4a:b0:82:9e:
                    69:59:ce:ba:0a:c0:ae:61:ca:ef:77:6a:ac:6a:ca:
                    a8:ff:d3:41:94:22:1c:ba:05:67:4b:24:b4:4b:67:
                    9d:2a:76:ce:0b:25:3c:80:5c:bc:b5:b6:c5:6c:e3:
                    4e:3a:85:10:c5:1e:71:73:bf:cd:d1:c2:b0:79:5f:
                    3a:6b:dd:15:df:d5:4e:b5:50:83:f7:7c:cc:db:ba:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:15:7A:5F:86:1B:84:61:8E:DE:32:B2:63:70:90:F3:E2:B8:A9
            X509v3 Authority Key Identifier:
                keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:47:0c:a3:c1:cd:fa:f0:f6:b3:2a:93:7e:2c:c5:2a:4e:
         e7:87:24:9f:9e:04:4d:5f:de:ae:cd:22:63:9f:3d:48:37:18:
         2d:89:91:9d:34:c3:7b:8b:6f:c5:6b:30:67:4d:e4:a1:ef:10:
         0c:69:80:14:33:c9:0a:28:a7:a1:17:52:ee:eb:89:ab:bc:f8:
         c5:f0:77:ce:e4:bf:20:e6:2f:ee:89:03:78:58:30:c8:8d:80:
         2e:ad:9b:ca:37:ba:93:b7:c7:ce:7b:5f:11:4a:9f:1c:44:51:
         a8:4d:b5:7f:d4:ce:ac:8a:2f:2b:2f:e1:4a:e7:de:e2:67:cb:
         49:9d:ac:d2:23:c0:ce:e0:77:6a:fd:a6:64:61:5c:9f:c6:d0:
         64:73:cd:52:75:eb:e7:3f:75:63:28:d4:67:bb:c9:9f:56:7b:
         9d:92:94:ce:6c:8e:c6:5a:42:01:be:87:b4:3b:09:bf:a7:55:
         6a:37:92:c8:5e:74:9e:22:aa:35:c8:aa:e7:9a:56:a4:1d:fd:
         8c:e3:af:61:51:db:b0:bb:16:e4:85:3c:b6:2e:31:28:65:3d:
         15:03:b1:64:c4:d8:4c:3b:c7:68:33:0d:91:f8:b7:39:c8:58:
         a5:0b:a0:1b:d8:bd:77:32:bd:24:7e:e1:68:c6:48:63:d5:48:
         7b:32:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:32 2025 by rpki-client