Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          cLaFR3qyTXDSJSBO2yQ5y3p4rGtD8AikGeof6KrxfUQ=
Subject key identifier:   C1:D6:9E:E5:F5:4E:87:3D:E2:23:74:2E:3E:77:3A:EB:17:25:AE:6C
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       019916F5D58B7A985D68CBAD4D304F7F0718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1673
Signing time:             Thu 04 Sep 2025 23:00:33 +0000
Manifest this update:     Thu 04 Sep 2025 23:00:33 +0000
Manifest next update:     Fri 05 Sep 2025 23:00:33 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: s7Z3IBHgwUytDCdJ6ZXy2h3Z0YgoPNptPDTlAJCs8sA=)
                          2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f5:d5:8b:7a:98:5d:68:cb:ad:4d:30:4f:7f:07:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Sep  4 23:00:33 2025 GMT
            Not After : Sep  5 23:00:33 2025 GMT
        Subject: CN=c1d69ee5f54e873de223742e3e773aeb1725ae6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:66:6b:c4:67:36:d2:43:4a:9a:77:c2:c2:
                    72:40:59:01:0f:91:8c:33:b3:c0:58:3f:d3:a6:10:
                    57:1e:82:89:2e:d1:a3:78:3e:f1:db:67:88:87:64:
                    59:7a:54:64:83:35:ad:61:80:8b:11:91:e0:01:26:
                    e7:a8:fb:48:b7:ae:5c:c7:6d:24:9e:95:7f:59:ee:
                    ea:ab:67:1e:9b:4c:25:01:16:91:3c:d3:53:a1:56:
                    5e:67:54:c8:bf:00:b7:2d:f7:61:55:56:77:4f:56:
                    61:04:87:83:25:90:0e:da:ac:cd:02:5c:a5:0f:3f:
                    bd:e1:50:14:8b:03:ec:c0:82:9c:bc:ce:12:b7:8f:
                    1d:4d:66:c8:b3:11:92:7c:25:5d:74:84:de:69:7f:
                    96:9d:00:72:f0:7c:d3:90:83:87:64:46:ca:43:a3:
                    31:d9:56:5f:ff:53:66:7b:36:98:d2:f9:91:0a:b3:
                    43:7e:15:0c:70:a2:78:f7:69:af:94:93:02:9a:41:
                    db:26:8f:78:7d:b8:4f:c0:8c:d1:91:90:41:28:85:
                    54:59:6b:87:1e:aa:6f:0e:72:01:8d:29:49:b6:03:
                    f4:4a:7e:23:28:19:56:e3:90:8c:f7:83:ee:75:29:
                    26:9d:ec:37:9b:61:46:02:f5:04:78:de:7e:76:91:
                    83:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D6:9E:E5:F5:4E:87:3D:E2:23:74:2E:3E:77:3A:EB:17:25:AE:6C
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:74:28:c9:22:aa:71:64:80:28:ba:26:b7:50:ff:47:08:ff:
         b1:ee:8b:8f:94:dd:43:44:f1:9c:a2:d9:4a:e8:35:c4:a6:63:
         b7:91:54:cb:5d:a5:8f:f3:3c:14:08:85:ba:3e:f2:18:62:8d:
         52:e5:3b:67:4f:13:e2:17:32:1f:30:16:3a:10:2f:40:90:8f:
         16:bb:47:4c:40:95:7e:a2:ff:a9:9b:02:7b:91:f9:e8:9a:bc:
         22:97:25:ea:46:5c:49:6a:ee:0b:0f:c3:14:39:46:a5:88:c4:
         ce:b1:4a:14:2f:a2:77:40:d9:c6:2a:31:e9:9a:5e:3e:47:dc:
         8c:13:b1:40:b7:96:49:48:47:47:9d:11:49:56:9e:a7:ec:67:
         08:8f:74:31:c8:37:93:08:54:78:59:64:45:4b:5f:ce:33:32:
         33:6b:c0:51:3b:8c:3c:ea:a4:12:cd:50:52:5e:9a:9b:5d:22:
         b6:f5:9d:fb:95:db:1b:46:89:60:39:7b:7d:0c:f2:35:ee:f4:
         ec:6a:72:a0:9d:34:30:48:42:57:e3:b2:a5:6f:fb:75:b9:9b:
         a9:a4:14:0f:31:b0:92:62:ee:8a:4b:da:fa:b9:63:ea:ce:2e:
         ed:87:a0:63:d6:18:c1:6c:16:f5:74:44:19:e5:54:4c:91:36:
         f4:1b:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client