Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File:                     R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier:          aPgRbvAwik65zYnAl3x9V6dE30U7YO4kMzTdpq/DMbs=
Subject key identifier:   CB:3C:C1:E3:27:13:26:23:D9:5B:22:B2:5E:45:0B:D0:94:58:49:A1
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer:       /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial:       0198518CCA1B9EBB46B589F6D30879510509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number:          05B1
Signing time:             Mon 28 Jul 2025 15:00:37 +0000
Manifest this update:     Mon 28 Jul 2025 15:00:37 +0000
Manifest next update:     Tue 29 Jul 2025 15:00:37 +0000
Files and hashes:         1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=)
                          2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: KP4cYurqjBXw35gllm/Hq/9gsVIlAL9Ab42u/Y8tzGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:8c:ca:1b:9e:bb:46:b5:89:f6:d3:08:79:51:05:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
        Validity
            Not Before: Jul 28 15:00:37 2025 GMT
            Not After : Jul 29 15:00:37 2025 GMT
        Subject: CN=cb3cc1e327132623d95b22b25e450bd0945849a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:08:52:64:ff:54:f9:5b:dd:80:00:2d:e7:
                    83:c4:41:fb:26:a1:74:50:f2:3f:1a:d5:51:9e:3e:
                    ad:66:82:93:ad:61:b4:dd:84:28:43:f8:ff:46:6d:
                    a0:11:bb:da:6b:3b:3e:8a:f1:b5:f4:0b:67:0a:1a:
                    cc:0a:92:b4:c9:e3:e4:08:35:ee:7f:6f:b5:ba:03:
                    34:69:71:d5:05:93:0d:81:ff:7b:ae:84:2a:95:82:
                    7b:82:a5:d0:0d:d9:ed:0d:66:11:1d:0b:4b:7a:ac:
                    f1:33:4e:6c:51:7d:ae:06:1d:48:ab:ea:88:bf:62:
                    c5:de:1f:45:cd:ff:55:64:d5:3d:e7:e1:ef:72:cc:
                    b8:a1:30:a8:c2:4e:06:51:e3:fa:4e:38:bb:04:20:
                    df:5b:50:69:8d:68:d6:47:8a:90:6c:96:36:ed:be:
                    a7:e4:35:96:bb:52:de:0f:c9:64:9e:2b:0e:f9:7e:
                    fa:d0:56:23:35:20:a7:bb:69:c8:0e:26:41:10:81:
                    7c:dc:e1:29:73:ab:e8:ff:10:17:61:3f:1c:6c:bb:
                    a2:b7:cb:35:4b:7e:ba:f5:b4:a7:ff:60:f3:7b:46:
                    a1:87:bc:18:ee:1b:fa:7c:c5:69:8f:58:bf:04:7a:
                    1d:02:e2:b3:38:23:e4:f7:9e:a9:5c:3b:a5:6f:45:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:C1:E3:27:13:26:23:D9:5B:22:B2:5E:45:0B:D0:94:58:49:A1
            X509v3 Authority Key Identifier:
                keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:de:00:6e:55:4a:2e:72:00:e3:4a:45:b4:7c:1d:2a:f8:
         25:f3:ff:53:d1:0d:89:11:c2:15:7c:51:61:71:76:83:85:c3:
         6b:97:b3:2c:81:34:e3:05:49:97:b9:85:a5:cc:75:ca:5f:93:
         8c:68:e1:2b:27:9b:4a:32:a3:07:5e:e5:20:a9:75:17:d4:b6:
         97:9b:d7:a6:10:73:26:99:b1:1f:25:99:97:07:84:4f:96:60:
         7b:bc:dc:a5:1c:35:de:b0:91:a7:26:47:7c:3f:6a:b6:a5:10:
         e1:32:44:24:0c:2f:db:24:38:a8:0d:75:3e:19:49:c0:26:08:
         da:03:df:0a:31:02:40:da:1f:1c:1a:95:f8:74:04:c4:6e:91:
         c7:fe:3d:b7:ad:31:30:36:1c:13:59:a3:14:35:f6:e7:eb:97:
         93:97:45:ab:e5:73:ae:8b:bd:fb:1f:d5:00:3c:fe:d3:de:9e:
         b2:ad:80:17:9e:1b:c6:27:c6:c8:82:ab:4c:59:28:37:07:c4:
         01:9c:44:09:b8:2f:73:96:bb:ba:06:94:6d:c2:d8:d1:b6:af:
         30:eb:d6:ec:7e:61:a7:af:ad:1d:09:21:91:e0:bc:66:c6:81:
         93:11:c9:79:58:31:72:5c:95:ab:4b:49:db:fe:b8:37:b4:66:
         76:ed:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:15:40 2025 by rpki-client