Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          /FJafGS3u/RiWNxxXHpV00cd69teC1jB0Jy5rlqtn+I=
Subject key identifier:   AF:99:EB:5E:C5:C8:72:AD:B9:DF:41:0D:59:BE:4A:CE:8F:B5:56:94
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       01984A77CC429AFD6637B09B0395B7C47D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          0D97
Signing time:             Sun 27 Jul 2025 06:00:21 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:21 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:21 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: +81W1z+9G26LEU7saMqo8bDY0xHNRjW/2bXGMP+5qI0=)
                          2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:cc:42:9a:fd:66:37:b0:9b:03:95:b7:c4:7d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Jul 27 06:00:21 2025 GMT
            Not After : Jul 28 06:00:21 2025 GMT
        Subject: CN=af99eb5ec5c872adb9df410d59be4ace8fb55694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:26:97:e0:48:6b:b3:48:af:52:20:6d:b1:
                    10:22:ff:90:e5:b4:d8:1a:80:41:fb:2f:66:70:90:
                    ec:e1:c9:d0:bd:cd:71:7d:32:f7:d5:bf:3c:66:97:
                    09:4d:62:e7:30:0c:88:06:8f:ed:da:16:6d:73:d6:
                    d9:34:59:cb:7a:69:c8:61:49:20:eb:b8:60:d6:e3:
                    d2:0e:5b:28:bf:a5:65:84:ac:49:0f:d0:cf:d4:26:
                    ec:79:a9:d4:58:4b:c0:05:11:4b:49:83:4a:23:6b:
                    0d:11:35:27:ad:23:d0:13:8f:e7:f0:cb:f6:dc:b2:
                    da:80:46:d0:9e:eb:43:c7:84:b7:c7:6c:66:d2:46:
                    fa:ef:32:bc:93:a1:48:91:dc:fe:38:3d:88:b2:39:
                    87:aa:9f:76:b9:98:c5:18:f3:68:56:d5:d7:4f:6e:
                    97:ed:05:b9:f1:6a:6f:ce:74:e6:a0:1d:f9:43:75:
                    04:e7:ff:5c:58:43:15:47:a2:17:3c:7b:ac:7a:f2:
                    5e:61:55:cc:81:7d:a0:b4:5c:70:40:8c:4e:2a:f2:
                    d2:68:8c:0e:62:30:4f:89:c5:69:75:92:b3:9a:d2:
                    a2:ec:5d:c3:13:27:59:71:76:55:62:d2:f0:35:70:
                    23:b6:50:44:53:f5:c1:6e:5e:7e:39:b7:6f:8f:e1:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:99:EB:5E:C5:C8:72:AD:B9:DF:41:0D:59:BE:4A:CE:8F:B5:56:94
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:57:5e:59:27:82:dd:20:cf:11:3f:81:46:26:55:77:be:
         a3:2a:38:df:b6:2d:2e:c6:df:21:2a:db:43:10:a0:92:7c:05:
         5a:08:6d:a4:b1:24:a3:af:14:fe:d0:47:b0:0b:fb:37:ca:5a:
         4d:9e:d0:8e:2f:e7:31:8b:a3:64:3e:ce:b2:43:22:a2:98:c8:
         29:29:17:9b:c7:13:78:4b:9b:07:d1:8a:e8:66:48:a4:9e:e6:
         d1:83:94:fc:89:62:73:66:f1:87:98:d8:f5:54:b3:2f:3d:a6:
         f9:24:60:cf:bb:eb:17:a4:6c:03:2d:7c:47:d8:e6:1b:4c:cf:
         ff:05:6c:00:c9:af:51:89:8e:a7:03:4f:ef:1c:24:e6:eb:9f:
         d3:fe:dc:0e:61:94:2f:81:2b:be:6d:ca:1b:6b:50:85:96:54:
         fc:1a:f7:a5:e7:d2:86:8b:79:61:91:bd:8f:ce:97:3e:f7:3e:
         5a:33:84:e2:71:8e:ec:f9:71:fe:0c:17:0f:89:18:72:e9:21:
         ef:05:01:d0:8e:36:18:62:69:24:93:77:c8:1d:db:a6:2b:10:
         a3:bc:68:27:f8:74:eb:75:66:bb:98:23:5e:07:36:42:9a:2a:
         43:86:10:af:96:4d:b9:9d:e4:3f:ff:62:09:26:c7:41:d5:a1:
         06:fa:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:09 2025 by rpki-client