Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File:                     rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier:          Pmd06+qwdzEqZgvpxNpCrpm4BNVuP3Rt4HoENTuLRCs=
Subject key identifier:   59:8D:23:A1:9B:97:24:C7:1F:9D:38:F0:67:08:2B:AD:44:B2:6E:FF
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer:       /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial:       0198496571E2F117D3838463DACC703497C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number:          0846
Signing time:             Sun 27 Jul 2025 01:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:41 +0000
Files and hashes:         1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: sb3gtxmOrOBslucWLORnlwIlZjfcq6Cs9aR0RupFyKc=)
                          2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:71:e2:f1:17:d3:83:84:63:da:cc:70:34:97:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
        Validity
            Not Before: Jul 27 01:00:41 2025 GMT
            Not After : Jul 28 01:00:41 2025 GMT
        Subject: CN=598d23a19b9724c71f9d38f067082bad44b26eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:d9:d4:49:68:55:87:b6:f6:48:f9:29:17:
                    e4:a6:29:51:1d:d5:6a:53:08:7d:36:3e:3d:a0:13:
                    0f:cc:eb:65:47:03:c5:cb:bd:af:dd:50:4e:85:97:
                    97:f0:84:53:37:3c:e0:f2:14:70:82:e3:56:6e:7d:
                    8c:db:b1:ab:00:18:42:03:74:95:d1:db:bc:e6:d2:
                    eb:5f:19:bd:42:a3:a8:44:df:dc:84:5d:f6:3f:3d:
                    a8:59:80:7e:26:1b:01:9c:bb:34:38:a8:74:bd:26:
                    85:35:47:cd:6e:4b:a7:95:45:33:46:e0:fb:a4:d8:
                    71:15:08:b5:6d:c6:5a:9f:78:a5:9f:00:69:35:1b:
                    aa:58:c6:9c:6e:f4:39:52:a8:f9:e6:d5:a0:cb:43:
                    24:83:14:0f:57:88:4a:e4:98:6e:36:60:f5:ef:a9:
                    96:70:49:cb:37:a1:5c:c3:2a:c5:f5:d0:aa:ee:b6:
                    41:b1:49:d6:c0:18:89:ba:ce:a1:84:d2:04:b5:4f:
                    c9:7c:c8:1e:a4:a2:09:d6:c2:24:73:c1:4c:9a:56:
                    c6:6d:8e:cc:0e:8f:cf:59:c5:f6:93:5c:de:0a:a7:
                    fd:f2:2e:d3:36:7a:ad:16:fd:11:bc:39:46:fe:86:
                    06:5a:da:b9:69:3d:7c:eb:4e:70:4a:37:aa:07:ba:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:23:A1:9B:97:24:C7:1F:9D:38:F0:67:08:2B:AD:44:B2:6E:FF
            X509v3 Authority Key Identifier:
                keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:58:c7:24:81:c7:87:9d:9a:9c:06:2c:7f:67:69:69:47:a9:
         58:fc:e4:a9:7d:28:4b:e8:35:f8:ec:e2:a5:2f:12:ae:b3:9e:
         0c:98:17:86:8e:1a:70:ab:4a:8e:4b:1e:3a:6d:63:84:f1:eb:
         9b:d2:a2:5a:15:0d:a8:c8:a5:0f:8a:3e:d3:dc:dc:62:a4:e8:
         06:ea:40:64:2e:d1:78:34:e6:98:51:a2:55:f3:3e:b5:c3:b7:
         24:39:52:71:94:fc:c6:50:25:ee:f2:68:4b:58:e3:52:8c:68:
         8a:d4:a1:b1:ec:ca:eb:53:a7:7a:08:96:5d:09:03:a1:59:c5:
         b9:66:7e:a6:64:6a:0d:f7:b5:c6:7e:31:2a:11:3b:07:73:18:
         cf:55:e2:c5:ff:44:69:cd:cf:4b:cc:34:0b:1f:b3:3f:45:db:
         b5:c1:3d:19:0b:76:3b:ce:ac:44:b4:54:09:eb:07:f1:ef:a0:
         d6:42:56:ad:bb:bd:0b:fb:e1:ab:a2:fc:59:a0:98:77:e0:c0:
         2b:ae:1e:97:84:a5:ec:ff:7b:6f:7b:1a:e9:48:36:cf:e4:a3:
         83:8e:e3:f8:11:3b:b8:f9:28:ec:04:19:a0:ad:dc:3f:c1:80:
         06:c6:c9:92:37:30:be:4c:b4:64:9a:93:31:0a:cf:e1:12:4a:
         0c:83:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:22 2025 by rpki-client