Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
File:                     1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json)
Hash identifier:          d4nOj91XnB7zFFh2A8nG0B7lZMrQC/Y/ydiS0wBAdxQ=
Subject key identifier:   E3:BE:BD:7E:F4:63:05:9B:EA:13:84:46:89:E2:9D:87:39:E9:27:E4
Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7
Certificate issuer:       /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
Certificate serial:       019923A07973F6080C9646FED1409E9A9717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
Manifest number:          0B3C
Signing time:             Sun 07 Sep 2025 10:02:23 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:23 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:23 +0000
Files and hashes:         1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: pcj8TUBQEMaCZM/peJQJvfiYX+yscjlgsCWAeWDE58c=)
                          2: yhLkTBwFXW9MjzC359UU8CJ6Bcc.roa (hash: YsI+CGd1aoGxeJp5us7qb7YQNNKxFAd0kxBSQecushk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:79:73:f6:08:0c:96:46:fe:d1:40:9e:9a:97:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7
        Validity
            Not Before: Sep  7 10:02:23 2025 GMT
            Not After : Sep  8 10:02:23 2025 GMT
        Subject: CN=e3bebd7ef463059bea13844689e29d8739e927e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:f9:bb:5a:3e:5f:3e:2b:df:91:7f:11:9b:
                    ce:1b:90:8b:b8:01:37:9a:a9:63:f5:c6:86:ef:63:
                    ec:92:ed:a7:0f:9c:d0:19:e1:3d:ce:70:87:3e:6e:
                    2e:44:94:30:e7:9b:66:3e:ab:32:54:e6:81:1a:d8:
                    25:61:b5:0d:41:35:ef:6b:53:d4:f0:e8:79:0c:ec:
                    e4:2c:1e:e4:57:92:d8:19:e7:16:3e:c7:57:36:6b:
                    6c:3c:6e:48:3a:13:4e:05:0f:77:b0:f5:5c:65:43:
                    2a:6b:2c:c0:d0:c0:e2:0c:9a:86:a1:61:cd:c6:21:
                    66:20:48:37:4d:fe:3a:e5:a1:4a:8b:75:07:b4:2b:
                    85:a8:1e:a0:5d:aa:98:02:c9:43:69:b5:37:49:00:
                    a1:35:71:bd:82:bd:4a:38:83:2e:2b:54:0c:11:52:
                    8d:e8:e6:20:1d:94:c1:1a:72:29:96:8a:a2:5f:fa:
                    2b:00:8e:79:92:23:98:b0:8c:cc:46:97:1f:b1:79:
                    3c:a7:60:f6:0e:77:d4:11:76:db:a5:01:07:08:eb:
                    68:cb:10:f4:2c:42:2b:60:de:34:cc:b9:9c:7d:1f:
                    fa:44:e1:a9:60:b8:3a:a0:c7:b3:e3:8e:31:5f:ee:
                    64:02:3f:47:0a:92:74:99:74:c5:8e:b5:83:db:de:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BE:BD:7E:F4:63:05:9B:EA:13:84:46:89:E2:9D:87:39:E9:27:E4
            X509v3 Authority Key Identifier:
                keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5b:a3:b0:82:17:f9:f8:bd:d7:57:be:38:a0:dd:9d:8c:7d:
         fa:55:e3:70:d1:1e:a4:26:1a:4f:1c:34:ee:90:4f:67:16:66:
         db:f4:9f:b1:32:e3:a3:30:ec:8b:79:39:fe:9f:f0:de:26:7c:
         c8:9b:05:c6:9b:94:0b:5c:37:a7:09:90:9f:45:33:61:5d:24:
         df:fb:e8:53:27:c4:e1:58:71:cc:e6:1d:ea:9e:3e:6a:bc:4a:
         d6:71:20:1d:8e:34:dc:97:de:8a:ce:be:05:75:aa:72:e5:c7:
         de:6f:ef:51:60:f8:e6:36:de:c9:8b:e0:06:77:a1:9a:16:fc:
         2e:01:57:08:35:f5:63:bc:bd:ec:0c:0b:f3:8a:da:4e:c6:91:
         c0:a4:75:59:92:8f:31:46:28:6b:44:8f:dc:ed:47:d0:b8:93:
         a4:16:1d:9a:56:12:90:bf:fb:55:2f:c3:1a:9d:a7:b4:55:66:
         ec:6d:14:44:d9:3a:ae:00:c5:b0:ae:9d:a7:a4:97:97:b5:96:
         30:8f:7c:25:60:55:da:f9:e9:69:d6:ef:68:80:c7:72:4d:5d:
         1c:11:fa:7d:de:24:b7:a0:0f:73:06:44:63:45:00:cf:ba:b4:
         d0:a9:a2:05:17:5a:bf:98:2f:d6:f7:3b:6e:e7:ee:f3:9e:5f:
         3f:3f:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:58 2025 by rpki-client