Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json)
Hash identifier:          0NFND+vXOMx9+VSgQ97qMoqyesFkVSunLYUCJkOoE60=
Subject key identifier:   1E:51:8B:B3:8B:C8:5E:B8:C3:1A:6D:04:95:17:5E:0D:7F:05:0B:1C
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Certificate issuer:       /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial:       0198D960504AB45CEFF2657F77DA667E7AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
Manifest number:          13F5
Signing time:             Sun 24 Aug 2025 00:00:24 +0000
Manifest this update:     Sun 24 Aug 2025 00:00:24 +0000
Manifest next update:     Mon 25 Aug 2025 00:00:24 +0000
Files and hashes:         1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: oxOlDlgt5CFcHp50ir9zPr0Thx8Re4TV3EzgZXupDsA=)
                          2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:60:50:4a:b4:5c:ef:f2:65:7f:77:da:66:7e:7a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Validity
            Not Before: Aug 24 00:00:24 2025 GMT
            Not After : Aug 25 00:00:24 2025 GMT
        Subject: CN=1e518bb38bc85eb8c31a6d0495175e0d7f050b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:5d:ad:01:16:11:09:a7:55:6b:09:20:e8:
                    56:29:cc:4d:57:10:37:16:dc:bd:02:53:e8:b0:d6:
                    9e:fc:cc:cb:25:9a:9a:2d:fd:2d:c2:00:cb:07:d9:
                    4c:0a:b3:7b:e3:fb:79:d9:bb:0c:af:21:40:6b:cc:
                    1c:31:88:36:e1:c2:8f:c5:f7:69:ac:41:fd:ad:6c:
                    ba:88:36:39:78:6d:13:01:cf:a9:6a:a7:31:e6:6a:
                    8d:59:b8:22:07:0b:df:ed:7c:f9:1c:81:eb:24:33:
                    10:41:a1:a8:63:31:64:48:27:2f:18:a3:e7:d3:56:
                    85:8e:e5:08:c2:54:56:5a:ad:7e:bb:64:ac:76:dd:
                    75:db:0e:6a:9e:6f:f0:c4:97:49:b3:89:56:db:3b:
                    c8:81:27:31:11:9e:b6:b3:e3:e0:e3:e6:3e:e1:ff:
                    7d:23:69:a4:63:d0:e5:9d:e6:9f:87:f6:bd:4c:0b:
                    2e:ed:0a:29:d7:5f:72:4c:f3:71:ca:3a:52:e0:70:
                    97:48:f8:b0:5c:17:ab:ab:fe:6a:58:9f:da:70:e7:
                    a3:2b:50:aa:b7:0a:fe:06:10:15:7b:b8:59:b8:a7:
                    82:0e:8f:0f:f2:5e:db:fc:ef:08:06:03:0a:bc:89:
                    c1:b0:41:c1:06:46:d9:2e:ee:a2:7b:e1:28:14:4c:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:51:8B:B3:8B:C8:5E:B8:C3:1A:6D:04:95:17:5E:0D:7F:05:0B:1C
            X509v3 Authority Key Identifier:
                keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:06:e8:e5:ad:8c:89:12:ff:7b:27:60:1f:39:b8:dd:42:fb:
         e6:69:c3:14:7b:e1:6e:98:f4:42:1c:05:b3:90:be:74:56:3f:
         29:41:26:5f:b5:c3:0e:2e:2a:7a:80:96:5b:97:ec:60:6a:04:
         6c:6c:87:08:aa:58:a0:65:02:9a:73:e2:21:7f:b0:30:08:c2:
         2a:be:ec:4e:6e:ff:71:b8:dc:51:95:28:40:1f:3f:93:a1:e0:
         17:a3:53:97:1c:72:93:56:44:15:e9:d3:2c:4f:43:71:52:4d:
         51:6b:02:b4:12:de:15:02:75:83:0a:1b:b6:1d:c1:cb:6f:fd:
         cf:b7:9d:b9:36:5b:e4:71:78:85:58:ee:65:52:81:86:be:89:
         3d:56:d0:0d:fd:95:66:9c:9c:13:8c:29:b7:39:ff:73:b1:33:
         fe:83:2a:f0:85:9f:a3:3a:e9:26:0c:f6:59:c6:ed:64:2f:5e:
         40:28:8e:5e:b9:92:d8:36:cb:21:cf:fe:0e:85:2a:90:9e:bb:
         6c:f1:07:85:43:f7:37:2e:96:3b:df:1c:2a:dc:17:f8:5c:a7:
         74:6a:3f:df:3e:48:3d:fd:fe:c9:42:a2:21:a1:82:5f:33:cf:
         fd:99:3b:89:86:37:da:52:d6:ee:3c:1c:36:65:b7:8a:43:31:
         4f:60:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:52:34 2025 by rpki-client