Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          BYQhV4gWTnKJJZwN9OGWhlw1Lr5xQwAw9erI0yh4xF8=
Subject key identifier:   19:ED:91:4D:31:A0:A7:27:99:0A:18:87:98:DB:9B:C6:0F:5D:88:8D
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       019849D394D3F9DC9C3F5AEB1ADC2EC30F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0BEF
Signing time:             Sun 27 Jul 2025 03:00:59 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:59 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:59 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: +v4dBk+MwTG27sNeUhVSbMKHgXjaOeEImNJG0VmJMmU=)
                          2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:94:d3:f9:dc:9c:3f:5a:eb:1a:dc:2e:c3:0f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Jul 27 03:00:59 2025 GMT
            Not After : Jul 28 03:00:59 2025 GMT
        Subject: CN=19ed914d31a0a727990a188798db9bc60f5d888d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:d7:35:ad:3f:ac:d2:7d:08:6e:c1:43:22:
                    24:ef:27:b1:e0:fc:b6:cb:ca:52:bf:38:51:b8:f3:
                    67:7f:68:d9:7f:57:d8:80:bd:a9:06:94:66:c5:0e:
                    22:93:b3:89:ff:49:0c:8f:c8:23:30:b7:4c:0e:0d:
                    f0:f6:ff:9d:b9:80:71:bf:18:20:49:8f:dc:7e:f6:
                    e4:ea:e7:26:3e:38:7b:d1:a3:ca:62:e9:63:5f:1c:
                    d1:b7:e8:5d:e1:00:0a:d6:c5:08:5c:97:e5:04:28:
                    86:2c:05:1f:d6:5f:18:ac:ea:1a:6b:ba:28:0e:12:
                    57:be:5a:05:fe:b0:aa:60:32:8c:f0:d4:f6:bd:34:
                    ea:b6:2e:1d:3f:27:ba:c8:cc:af:11:d7:26:c5:91:
                    84:dd:45:1c:62:eb:ea:9c:41:14:f2:08:bb:4e:f1:
                    d3:aa:b4:ce:d8:8f:98:b6:22:00:95:52:f6:1b:00:
                    7d:c6:96:e7:b7:36:28:7b:8e:03:a9:ab:79:5b:a4:
                    6c:7f:f6:3d:95:2d:47:70:31:fc:71:9f:67:e2:7c:
                    1e:a7:75:6c:7b:1c:7b:c7:3f:22:f9:76:e8:0b:53:
                    ac:eb:20:c7:1d:c2:6e:8e:b8:b3:9a:a0:02:2c:f3:
                    4c:65:3a:0b:9c:f5:36:86:8e:44:4b:65:38:a6:46:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:ED:91:4D:31:A0:A7:27:99:0A:18:87:98:DB:9B:C6:0F:5D:88:8D
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:e6:65:ac:01:b6:77:29:42:c6:9e:c7:45:b4:8a:99:82:
         c5:b0:4e:af:66:f3:4c:2e:15:ea:a5:50:e1:ea:6c:e2:b1:24:
         a7:54:2d:16:d8:6b:ff:a8:90:35:f2:f5:26:6d:ee:34:c7:20:
         31:f2:0e:29:b9:4f:5a:bc:fb:e0:c7:99:87:9d:b5:97:61:67:
         71:3b:69:b6:58:92:c9:e8:fd:08:fe:03:52:e1:9b:69:c1:8e:
         3f:0f:fd:30:35:dd:cc:51:e6:f7:47:c1:f0:e9:7a:1f:87:0e:
         26:cb:05:e4:b1:a4:cf:98:f1:b6:15:fe:c4:52:62:ea:90:4b:
         fe:3c:b7:fc:f4:2f:e3:46:38:ee:ad:fd:5b:f8:43:90:8a:12:
         b0:c7:5c:0b:78:46:8e:0b:72:7a:dc:06:22:3e:5c:43:ea:13:
         1d:9c:41:4e:cb:5f:6c:8a:4f:32:d3:fc:05:80:0d:f4:95:bd:
         44:f0:c0:a7:b0:35:e3:3a:fe:71:74:b2:54:cc:cc:f5:54:de:
         c8:da:a8:b3:10:d4:c5:d7:51:40:fd:38:ae:d7:51:74:21:29:
         cc:42:e9:e9:fc:ca:90:c9:a6:eb:08:9b:80:69:97:80:3e:19:
         84:1d:68:73:45:6b:fb:d0:a0:8f:29:3f:8d:9b:02:43:57:52:
         52:b5:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:52 2025 by rpki-client