Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          5ke/lLyvMCAX6HHjd11wnDmx8BTeHaDKNJme/mnkIZw=
Subject key identifier:   49:F3:C4:75:E7:9C:17:34:D4:D5:AB:FA:63:EF:D0:14:76:B1:A4:10
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       0199228C2415379285ED052AF0894274AA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          1673
Signing time:             Sun 07 Sep 2025 05:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:33 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: Zzuh3mj728n52F7jJj5SxDmZCns1v1CX13TzfFh3fcY=)
                          2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:24:15:37:92:85:ed:05:2a:f0:89:42:74:aa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Sep  7 05:00:33 2025 GMT
            Not After : Sep  8 05:00:33 2025 GMT
        Subject: CN=49f3c475e79c1734d4d5abfa63efd01476b1a410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:31:5f:28:df:79:91:ab:6c:8b:d1:10:90:
                    7d:7d:66:1c:cd:f8:1d:f0:69:19:6e:c4:ee:40:e7:
                    af:2b:a3:e5:88:15:dc:1a:90:75:3e:1b:ee:00:f7:
                    cc:7c:7c:f1:c3:18:cc:71:83:ff:f6:1b:eb:ad:ae:
                    a2:d1:9f:87:2a:10:93:b0:36:99:22:ad:bc:57:0e:
                    14:d6:9b:eb:20:eb:1e:93:e8:64:69:a2:fd:b5:87:
                    4b:fb:ce:e6:94:46:4e:bc:7d:8e:c7:4b:8f:60:d2:
                    af:0a:38:e2:39:58:55:f8:4a:c8:7b:d0:71:28:00:
                    c1:55:49:5b:8c:4a:c1:31:1f:72:78:90:a0:7f:4e:
                    a4:67:06:28:a9:32:97:1f:e1:5c:42:19:10:44:bf:
                    90:c6:f0:c6:f6:07:9c:bf:96:b0:00:e4:f5:84:bb:
                    9a:b5:ec:b1:12:fa:bc:ec:70:64:da:9a:16:14:ea:
                    51:62:e4:a0:56:3e:64:11:b8:86:95:77:10:d5:eb:
                    10:e4:98:3e:ce:1e:06:41:cd:96:63:68:87:c1:93:
                    ec:b2:7a:20:5a:53:9a:3a:6c:65:47:28:80:8e:76:
                    47:fc:e5:db:8d:fa:d8:eb:9b:28:08:1f:e3:85:a2:
                    d3:24:11:6e:cf:ab:04:fc:08:d4:37:7c:99:12:90:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F3:C4:75:E7:9C:17:34:D4:D5:AB:FA:63:EF:D0:14:76:B1:A4:10
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:13:fa:2c:90:d7:8a:03:a2:46:e2:a1:dd:a8:b6:3d:60:fd:
         56:97:1d:cc:1b:f7:5b:e3:d0:92:56:75:88:9e:1b:60:8e:6a:
         44:a9:55:a4:33:9f:f7:42:41:85:78:8d:8d:7e:37:6a:02:dc:
         49:d6:b0:6e:50:ed:37:15:e3:9a:f3:4e:6b:bb:28:48:d4:a3:
         e6:94:3c:6e:15:1f:75:28:f6:91:e5:9b:d1:8c:2c:2c:f2:58:
         26:2d:b6:09:b5:31:b5:3d:1a:5a:23:64:1e:b1:4a:4a:7c:5c:
         26:6e:85:49:99:7f:68:a6:27:84:ab:cb:32:e0:ec:26:aa:20:
         bc:c2:5d:5c:38:38:4e:14:2c:a6:ad:89:d2:dc:9a:4f:98:0c:
         8a:84:30:15:f2:dc:bb:e3:36:56:41:35:99:91:97:0e:ff:f5:
         24:d4:85:4d:e8:74:1a:04:3d:e5:b7:96:7a:82:3f:d5:49:00:
         22:76:d2:85:18:60:0b:e7:4b:6b:e4:8d:26:e2:73:23:1f:f6:
         71:eb:bb:c1:d5:27:6a:c6:ca:75:62:28:a2:ba:1e:5d:e9:5e:
         31:7a:a9:06:37:45:74:02:df:24:83:b1:92:3a:3c:68:09:27:
         25:01:af:fa:2d:2c:4c:6e:b3:01:52:76:b8:83:78:70:d6:8e:
         6e:02:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:32 2025 by rpki-client