Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File:                     TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier:          bmKp1uVfM5dPWLaINusCQ0TXdZFpAC5UR7AE1SgYxFQ=
Subject key identifier:   D8:65:8C:50:1F:6F:63:27:29:FC:38:40:82:D5:E3:CB:73:B7:AB:F6
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer:       /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial:       0198443EAE69684884E4A8ABB81D6D941A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number:          0793
Signing time:             Sat 26 Jul 2025 01:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:15 +0000
Files and hashes:         1: Lns1LMe1--aCWobzDFBGvJLb-v0.roa (hash: 3lUaKCTyCDmb++7MRYHqVolI8pfAgpID3s0wPUzmsmk=)
                          2: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: xsplUC+j311SY5XNrmeQd3jDyN/saUZG+DWcMkChbU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:ae:69:68:48:84:e4:a8:ab:b8:1d:6d:94:1a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
        Validity
            Not Before: Jul 26 01:00:15 2025 GMT
            Not After : Jul 27 01:00:15 2025 GMT
        Subject: CN=d8658c501f6f632729fc384082d5e3cb73b7abf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:59:4e:2c:99:44:3a:a0:82:b5:42:ae:9d:
                    64:01:06:57:b4:f1:ca:58:99:7d:5a:96:2b:8c:3d:
                    7d:47:9b:56:be:b5:69:65:2d:30:eb:f8:a3:f7:8e:
                    76:ff:da:a6:3c:9b:55:f3:99:28:ed:b1:99:66:b6:
                    c4:5b:b1:45:32:8b:eb:93:6d:c5:19:64:de:82:e2:
                    86:17:3b:bb:f4:4f:15:2f:07:6a:70:d8:c2:41:51:
                    04:7a:74:57:e9:07:6c:81:a5:45:a1:5c:63:c9:d8:
                    8d:05:01:76:ce:43:4c:70:8e:ff:ab:61:1b:54:0c:
                    71:27:69:11:83:01:7d:1c:4a:34:15:40:a3:c8:ac:
                    3e:31:3b:cf:4b:34:33:d3:3f:cd:b8:b0:e4:76:f7:
                    ea:f8:49:c3:b0:7c:f7:c8:23:18:6d:a2:c1:d8:a9:
                    c1:d9:e7:05:da:0a:7e:11:c7:3c:c3:f9:4a:1b:c3:
                    99:ac:a5:58:5d:20:b6:bf:0f:87:be:4c:d4:92:86:
                    a2:48:03:fc:76:ca:5b:55:03:89:e1:94:61:0c:0a:
                    96:3a:ad:ef:9c:d4:80:fd:ec:e3:47:5f:c2:31:d6:
                    83:87:44:10:76:f9:98:43:16:c1:06:68:1d:03:3d:
                    d2:a7:38:12:36:71:3f:fd:07:ca:e4:c5:27:d4:7d:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:65:8C:50:1F:6F:63:27:29:FC:38:40:82:D5:E3:CB:73:B7:AB:F6
            X509v3 Authority Key Identifier:
                keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:56:58:0a:51:f3:df:ba:f1:5e:63:7a:8e:0d:e3:a0:2f:
         b9:fb:9d:81:30:a3:86:4e:df:d3:33:29:ed:ab:14:7f:d0:d0:
         46:c3:0d:7d:c8:85:55:09:bc:65:9b:c1:0e:7b:4c:62:ee:b5:
         57:d9:71:bb:e2:56:5d:be:7b:c2:9b:72:33:de:3e:28:51:67:
         0d:8d:b4:1e:5a:0c:48:6b:ed:09:73:02:32:0a:7a:5e:e6:f4:
         8d:49:34:e7:71:81:a4:4b:20:18:17:7f:c6:d1:a6:3a:d0:c4:
         59:c3:40:73:55:d5:02:0e:45:d0:35:aa:3b:9c:d7:76:33:82:
         40:47:5b:79:4d:d2:b0:57:42:f1:58:e3:e7:67:30:8b:27:ae:
         2f:a9:49:05:38:d7:19:29:08:7c:c2:80:67:b9:1c:44:a9:44:
         91:f1:c1:03:ee:64:e8:51:20:16:db:d8:1f:c2:3c:e7:9c:48:
         08:d8:8c:55:ee:36:df:9f:ec:41:b7:e6:76:eb:f8:d3:35:fe:
         68:6f:d4:ca:12:69:45:92:23:0e:50:f1:86:6b:85:89:69:aa:
         9f:ee:c8:d7:86:a0:fa:cc:f7:dc:d6:a7:25:89:71:ef:03:bc:
         60:ef:c3:85:77:ae:2d:f6:db:35:c1:ac:06:e9:1f:db:fe:ec:
         7b:17:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:52 2025 by rpki-client