Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
File:                     SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json)
Hash identifier:          i9ru/5Y9CoS81nOoSP5qbsBwQ1rRShLOVZcfwWodrLI=
Subject key identifier:   D2:76:65:67:C0:77:91:FB:C3:99:57:3C:B8:34:B1:4D:C4:41:42:07
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       01984AE57CF351DD0ECD1E759825E7D6F115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 08:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:10 +0000
Files and hashes:         1: 18JawMIQ4IIjxCBNljP_sugctIs.roa (hash: EGBShqy4nnzMqWs1NYZxzIjsKkDa8M7h19J8gjpdtvA=)
                          2: C6gHQdBURBlm35x0GDwcWWNARyk.roa (hash: GaokyZWXRvMib4ncq4hEcNLu2IPcx/q3bdp2NSF7Jyk=)
                          3: QVs3JRJ54mdavYMKzmA8EI3DNl4.roa (hash: LgJPv3PoY+gQldztQf/0Gwj+6GMbnE4l+sQElujcqSY=)
                          4: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: ZXCUtqiLqs66nffRsTwl/qq+3TTiyb6KN9CtQZ1sJZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:7c:f3:51:dd:0e:cd:1e:75:98:25:e7:d6:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Jul 27 08:00:10 2025 GMT
            Not After : Jul 28 08:00:10 2025 GMT
        Subject: CN=d2766567c07791fbc399573cb834b14dc4414207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:09:14:15:81:6d:0c:27:d1:0f:f9:d2:d6:
                    13:e5:ed:b2:ce:38:38:7f:66:ed:d0:ce:7c:f9:c9:
                    73:e3:b1:ac:ce:dc:9e:03:e0:92:66:13:f7:b6:4e:
                    ff:ad:d2:7a:55:e9:bf:e2:3c:d3:d3:72:d2:0b:fe:
                    9a:37:d1:2a:85:ca:a6:d8:58:ad:77:73:1a:17:42:
                    3c:e0:84:98:b6:68:ee:54:87:7f:08:63:31:21:a5:
                    46:3a:fb:0c:e4:a8:48:25:44:ce:45:91:e1:ca:db:
                    c3:1b:1e:85:b0:1d:df:7d:05:b7:b1:e3:0d:ff:06:
                    64:95:ce:bd:ee:a1:19:08:6e:06:b2:9b:65:5f:78:
                    dc:50:a3:c5:93:21:13:83:c6:9b:ce:d9:a9:d4:81:
                    16:7e:91:14:f6:aa:59:00:09:aa:aa:70:51:89:65:
                    39:31:5a:57:39:fe:b0:4b:c8:43:8c:f0:f2:04:17:
                    32:fb:a1:d8:04:97:82:d4:10:7a:32:08:17:6d:82:
                    8a:23:ce:27:be:af:20:c1:6d:fd:d5:e6:89:36:47:
                    b9:5b:42:21:b6:9a:b1:62:0f:bf:38:82:ec:3b:5b:
                    7a:46:22:6c:60:a9:46:c9:92:0d:5d:13:c4:04:4e:
                    d5:44:a2:37:5b:76:69:ae:63:b0:b2:8e:9c:94:d2:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:65:67:C0:77:91:FB:C3:99:57:3C:B8:34:B1:4D:C4:41:42:07
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f5:e1:d5:7e:88:7c:20:82:e5:47:09:12:a8:0b:16:84:b2:
         1b:ed:0e:27:84:4e:c3:b4:b2:16:d8:06:cf:03:ef:d0:99:22:
         bc:b4:65:20:f2:3f:d2:f3:f8:5e:70:67:43:8f:32:d8:9e:43:
         6c:75:50:f8:f4:f8:db:00:c1:1e:01:ac:c4:ca:1f:c9:d9:27:
         81:e8:66:b4:76:56:e7:cc:a8:a3:e3:e9:07:86:ce:dd:fe:5c:
         da:53:f4:c2:f9:78:d7:62:2c:57:03:db:70:7c:d3:7d:25:81:
         91:f8:ba:ce:17:d4:18:4f:35:91:e0:83:2d:61:c2:33:bb:42:
         79:41:3b:02:f7:fb:1f:73:b7:a8:a7:e5:30:1c:01:a1:16:ca:
         fe:8e:89:05:3a:d0:f4:92:87:e7:cf:44:09:00:fc:3c:ac:a7:
         ae:1e:77:12:e0:66:b3:6e:aa:17:59:bb:f8:62:db:22:36:61:
         bf:ee:88:48:9e:0f:91:4c:29:54:2c:d4:94:f9:0f:15:6d:93:
         a3:4d:1c:e1:ee:f9:e7:d1:ec:d5:3f:bb:9f:74:2b:52:7b:6e:
         2b:91:a7:a5:ab:cc:48:a1:4b:9f:ce:bf:24:2d:01:f8:a0:ce:
         da:0c:38:73:81:f7:0e:5e:d8:dd:d6:7e:73:4f:88:37:df:d2:
         a5:d0:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:41 2025 by rpki-client