Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File:                     B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier:          2BsR5FpX9YBBeKw8Ja7nwYRclysg23W6ruVotfEa8k4=
Subject key identifier:   E2:17:91:4D:73:01:C4:15:B5:89:8B:2E:FC:E3:6E:6B:F6:AC:7B:21
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer:       /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial:       019849652A7FB15F1A4AF30D429641068C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number:          0865
Signing time:             Sun 27 Jul 2025 01:00:23 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:23 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:23 +0000
Files and hashes:         1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: ONIL+DkLH/iGkzNU04QTirRZoSNZn/VVFEDIakGOL5c=)
                          2: YF_8BljowlmU3n9MOrd56EKDy3I.roa (hash: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:2a:7f:b1:5f:1a:4a:f3:0d:42:96:41:06:8c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
        Validity
            Not Before: Jul 27 01:00:23 2025 GMT
            Not After : Jul 28 01:00:23 2025 GMT
        Subject: CN=e217914d7301c415b5898b2efce36e6bf6ac7b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:dc:9a:3c:18:78:7d:26:0b:e6:18:da:8c:
                    2f:d4:e1:94:35:27:cb:43:d5:a0:b7:f9:45:b9:69:
                    34:3b:88:b0:e8:32:8c:01:77:a5:62:78:2c:cf:cd:
                    e9:20:92:6d:25:90:f9:b2:f9:89:4c:aa:50:44:0c:
                    57:22:48:9a:35:9e:28:a9:24:c4:14:a0:69:54:7a:
                    4d:bb:2e:67:15:19:ee:cd:56:63:b6:c7:9b:7e:c2:
                    b8:76:99:b7:c1:a7:d7:54:52:bf:95:25:c5:74:60:
                    e4:de:8d:ec:ad:e6:1e:c1:20:b5:c0:ac:17:08:ce:
                    35:7c:72:8d:86:df:82:e7:b9:3d:52:8b:00:9b:13:
                    55:0d:ea:27:93:a8:d2:e2:5b:0f:f2:8f:46:b7:48:
                    80:17:e0:25:83:6a:39:5f:42:0a:30:97:88:79:8a:
                    22:cb:38:32:dd:f8:56:0a:d4:fe:00:0a:1a:a7:2b:
                    c1:23:33:99:7d:84:dc:65:36:21:6d:61:99:d9:c7:
                    74:03:2c:cc:27:81:25:58:76:d8:88:62:e3:ec:36:
                    98:20:ca:5a:16:0f:69:97:7d:6d:fd:10:03:05:a5:
                    6f:41:dc:f2:95:2a:fc:30:a7:1e:74:c9:79:e1:02:
                    04:a2:bd:7e:3d:61:60:83:c2:94:7d:ae:c8:8a:aa:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:17:91:4D:73:01:C4:15:B5:89:8B:2E:FC:E3:6E:6B:F6:AC:7B:21
            X509v3 Authority Key Identifier:
                keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1c:56:53:cb:31:23:3e:88:de:32:ea:a9:c7:27:e9:56:8b:
         0d:c7:ec:57:bd:ad:c7:36:d0:dc:a3:82:53:1b:9d:8a:de:e9:
         34:cc:2e:c4:ae:23:b2:8b:5e:78:7a:d6:1e:e7:b2:81:ad:71:
         e7:c7:09:1c:f8:4a:fc:a9:c1:6c:38:49:0f:6b:bf:f2:9d:20:
         da:0e:78:88:ce:c8:6f:f2:e8:78:fd:16:19:a4:69:6a:40:34:
         3e:98:29:42:54:41:7a:0f:d3:98:e0:fb:7d:56:6f:df:54:4b:
         20:51:6e:d1:8e:71:5b:96:3c:16:e5:54:23:ef:35:f6:98:84:
         34:0e:2a:a8:95:fd:da:e8:0d:cf:34:95:3f:d9:47:a5:11:5c:
         25:0e:10:22:89:06:1e:17:8e:71:75:16:5f:19:0a:ec:ff:49:
         19:92:2b:20:30:02:82:25:52:9f:d2:ba:0e:6f:e5:d6:56:3c:
         33:bb:ef:22:dd:c5:87:00:97:32:2e:7f:cb:4e:df:c6:09:66:
         87:51:b3:a1:cf:fc:ce:63:9a:dc:39:28:62:fe:3c:45:0c:69:
         dd:08:e2:eb:9d:17:ef:60:ab:20:7f:45:48:3c:0c:21:f6:97:
         22:bd:f2:1c:44:9f:78:68:3e:2b:45:01:e0:d1:e9:3a:80:e0:
         15:a1:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:52 2025 by rpki-client