Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          oF9cn/bdFy/xR/Aieycr8gFcsk4ewPaqbdp9TWH3b5Q=
Subject key identifier:   60:8F:D8:94:82:FC:E3:60:40:31:3F:50:56:16:04:D9:CA:AA:8E:3D
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       019849D34EBF028C1411B11195ADC0B7011B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          0ED9
Signing time:             Sun 27 Jul 2025 03:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:41 +0000
Files and hashes:         1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: f+01kpCGuPQlnfHE20374WKoYKY68HLCiZlpOG7ddF8=)
                          2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=)
                          3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=)
                          4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:4e:bf:02:8c:14:11:b1:11:95:ad:c0:b7:01:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Jul 27 03:00:41 2025 GMT
            Not After : Jul 28 03:00:41 2025 GMT
        Subject: CN=608fd89482fce36040313f50561604d9caaa8e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:3c:09:50:6f:db:fd:2e:fb:bb:59:e9:cc:
                    7b:a0:31:b9:e9:1c:83:1c:0f:f2:1f:29:47:a4:15:
                    72:3b:d2:12:00:02:ab:10:8a:e6:44:b8:4b:2d:70:
                    40:0c:ce:9f:cc:45:ab:f9:4c:3e:90:28:d0:97:6b:
                    88:9e:a6:0a:ef:bc:cc:3b:6b:b4:0a:c5:d2:07:18:
                    cc:2a:09:c2:3f:0f:0f:97:0b:ac:80:15:d2:b8:2c:
                    8c:54:6a:96:30:20:2f:a2:87:8c:1f:b7:e6:aa:35:
                    01:c4:eb:34:5f:63:f4:92:92:bb:44:68:93:6f:9e:
                    05:05:05:ea:1e:ec:47:81:60:0e:fe:c2:e2:90:6e:
                    29:17:61:2b:3d:51:a4:3e:21:49:95:e2:6e:de:a8:
                    95:0a:93:5b:24:c9:f7:33:4c:e2:33:e7:c1:cb:05:
                    31:81:b9:b2:ed:bd:52:c8:56:a5:be:ac:63:a5:17:
                    22:97:f9:20:6c:54:97:0a:ed:d3:d7:83:24:cb:b0:
                    2c:a3:bc:29:2b:17:83:3a:34:94:5a:50:be:25:54:
                    ed:7a:d9:5f:03:43:3d:d0:97:ec:a4:d9:f4:f3:1c:
                    ea:9a:f0:3a:81:bc:ea:97:69:22:5b:24:42:3c:cf:
                    0c:2c:70:fc:86:19:11:11:6e:b8:3d:87:17:22:57:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:D8:94:82:FC:E3:60:40:31:3F:50:56:16:04:D9:CA:AA:8E:3D
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:a0:52:9c:7f:3f:3a:7b:fc:a1:36:25:83:18:6f:08:2e:
         55:37:d2:f3:3c:ad:91:d2:1b:34:20:04:96:4a:df:9a:6d:11:
         10:3c:c8:e2:49:12:09:16:78:d5:27:2a:ee:41:67:6b:5a:5c:
         97:4f:b9:93:25:61:a3:f7:3a:9f:44:89:c4:e5:5b:3c:3a:3f:
         0a:9f:6e:ed:36:8a:2d:ec:5e:5f:e7:05:10:2c:81:e3:d4:50:
         1a:09:cd:7f:ba:d2:c1:42:d9:e2:51:b2:9f:7b:6d:33:df:5a:
         85:fe:52:b0:68:e8:a2:58:a1:d0:f3:ac:d9:55:27:f9:8b:97:
         04:67:e8:f0:2d:b1:99:6e:e2:88:99:94:52:69:ef:37:5c:78:
         a6:a5:a3:36:14:9b:ff:4e:20:03:0b:f8:f3:69:a1:27:6f:75:
         bd:b4:42:fd:39:df:4c:44:49:7c:c6:3a:d0:9c:aa:bf:12:60:
         73:ab:73:37:4b:68:1f:0a:fe:75:28:f2:a8:e6:82:12:a4:e4:
         e4:22:a6:69:62:96:30:37:b2:23:20:c7:76:9f:9d:9a:eb:73:
         94:26:5b:18:e5:b1:b5:f4:92:83:1f:58:33:4d:75:2d:21:e0:
         fe:ab:c3:7d:76:9e:78:aa:60:12:f1:b1:74:c1:07:81:8f:7d:
         13:24:b8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:24 2025 by rpki-client