Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File:                     CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier:          N4Sui66F5MTDiPw+MdqwVVervb4HgoqY+/9zQmq2exg=
Subject key identifier:   F1:80:28:90:F6:00:BB:DB:7A:23:97:39:F3:E1:44:6F:4D:41:DE:8E
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer:       /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial:       01984A0A00CAAA8978A037BC3F2C9D097568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 04:00:26 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:26 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:26 +0000
Files and hashes:         1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: 9sD7RMdBd4yhkoEmDwMYSXjZ7zZS5meYVSicAHGe79g=)
                          2: Jf9y1r-7U3oVE_0fSwlBWZfWEa0.roa (hash: GPOv3V78s13UPdmn9zsSWoQbLb5tsSshuu6xid5/0Es=)
                          3: Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa (hash: nJnymsSFWBg9H1fUFjESgx2imNhbNeKcWoh7uta0L5c=)
                          4: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:00:ca:aa:89:78:a0:37:bc:3f:2c:9d:09:75:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
        Validity
            Not Before: Jul 27 04:00:26 2025 GMT
            Not After : Jul 28 04:00:26 2025 GMT
        Subject: CN=f1802890f600bbdb7a239739f3e1446f4d41de8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:ff:b1:e4:d3:01:6a:9f:c9:b1:cf:2d:5c:
                    9c:70:4e:3c:50:7a:03:c9:8a:6f:75:a2:36:7f:cf:
                    63:78:7a:2e:cc:56:65:90:2b:8a:95:fc:7a:37:59:
                    f6:39:18:d9:58:72:c4:3e:3a:51:43:27:fb:1d:f2:
                    21:12:9d:7f:26:35:84:45:2d:d3:9e:a5:85:02:d5:
                    5b:49:c8:64:69:2f:ec:c8:16:04:15:9b:25:00:bf:
                    6b:b9:79:ca:ed:5b:1e:f6:64:a4:57:82:0f:b3:31:
                    dd:b4:63:be:8b:9e:73:97:6e:17:93:e5:f8:35:dd:
                    07:73:50:44:95:d0:b8:9a:14:54:35:7f:89:5a:80:
                    18:ce:e1:5a:54:63:30:3e:95:94:f6:92:97:9c:97:
                    80:6e:fa:0b:d9:ec:fe:e9:cb:10:e2:f8:81:5a:6a:
                    db:4f:91:5d:07:cf:dc:ed:1c:9d:56:15:6b:aa:77:
                    0e:a4:50:86:7c:c5:5c:54:fa:8b:c5:92:de:87:ee:
                    5b:ef:de:92:dd:25:7b:37:36:08:92:13:3b:e4:b6:
                    08:52:87:22:7d:ba:b2:8c:e2:e3:e3:00:d1:8c:ff:
                    7d:d0:53:70:c5:08:6a:84:4e:77:1b:f7:a1:7c:d6:
                    25:04:9f:e5:4c:5a:67:d5:14:51:d1:d8:2d:c8:20:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:80:28:90:F6:00:BB:DB:7A:23:97:39:F3:E1:44:6F:4D:41:DE:8E
            X509v3 Authority Key Identifier:
                keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e6:64:3f:ef:94:88:d3:3f:48:2d:cd:2e:57:fc:7d:86:47:
         26:c7:ef:4d:5e:f0:f4:04:5f:62:b7:55:cb:c2:1d:8a:1a:c5:
         ed:aa:dc:21:ed:4f:80:c3:3d:4e:12:93:ad:b6:7c:35:6c:0e:
         e9:ef:41:1b:5b:5e:7a:10:1c:42:99:2f:ad:75:8b:0f:82:fc:
         8f:15:5b:f5:fd:e9:36:67:59:f4:be:a2:ce:1f:e4:8a:ef:8c:
         09:34:ff:d8:44:4b:63:fe:f3:9e:45:28:a3:1b:9e:e0:4e:0b:
         17:96:aa:1b:46:3c:2c:74:ec:00:06:82:50:9e:b2:c9:c3:a1:
         58:dd:f2:0d:46:82:ff:3e:e9:77:5b:a5:c7:6c:93:cd:06:fa:
         03:14:79:44:14:f8:3b:9c:4a:30:90:8b:45:19:f1:9c:7c:e5:
         aa:bc:f4:0c:dd:5e:7d:23:d1:b6:60:cb:3c:75:26:48:46:82:
         7f:aa:ef:a1:f4:eb:40:cd:71:29:a9:2b:70:88:ff:74:8b:71:
         ff:f5:d6:e6:b6:eb:1d:0e:5f:d9:ea:b3:e3:6d:7c:80:b0:a7:
         28:5b:db:a1:b8:cc:d0:87:02:a9:0c:9f:99:37:37:67:85:ac:
         a1:7d:a6:5e:5c:81:9f:a2:48:ff:d8:b6:ff:43:26:65:3c:20:
         32:4e:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:05:13 2025 by rpki-client