Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
File:                     Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft (raw, json)
Hash identifier:          h1U1DkPEzj0gVSklXRvM3VLtDNiUKe5SAeYmV5B9SkQ=
Subject key identifier:   D2:ED:FA:41:62:6C:E1:AF:1A:71:F6:64:13:0E:FD:B6:58:68:8B:98
Authority key identifier: 4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61
Certificate issuer:       /CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
Certificate serial:       0198D69877267D49639F0EC2DC12CAB02E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
Manifest number:          017A
Signing time:             Sat 23 Aug 2025 11:02:52 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:52 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:52 +0000
Files and hashes:         1: Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl (hash: fJ0pWYWZ2HAIUoN+JNX7D8JJwmmZSb4DSUcuMeRKVME=)
                          2: jzdzn8fNPZYhsNzLFvnNEAiNqfQ.roa (hash: CgAcBMHOHIF/zsicGTopucDznqKVIIzdoQQgNx76Mfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:77:26:7d:49:63:9f:0e:c2:dc:12:ca:b0:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a883e94aa1451ba748d6a5bf175a43fe816e661
        Validity
            Not Before: Aug 23 11:02:52 2025 GMT
            Not After : Aug 24 11:02:52 2025 GMT
        Subject: CN=d2edfa41626ce1af1a71f664130efdb658688b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:d7:68:a9:25:92:6e:ca:ef:c9:d6:da:81:
                    c3:46:b0:c1:03:4c:ad:f2:6d:be:95:fe:3d:65:97:
                    39:74:88:9a:98:22:5b:1d:d7:2d:c2:4e:cc:5f:97:
                    04:de:45:73:3f:10:fe:73:12:50:9a:36:2b:bf:26:
                    42:b8:4f:fa:2d:23:f7:c5:0d:f9:54:cd:95:64:b2:
                    40:61:d1:26:82:73:ec:40:3e:ac:3f:08:94:49:ee:
                    68:8d:7f:a8:e7:63:03:e3:ac:69:2c:a8:f4:9a:57:
                    56:5a:06:6f:00:20:0c:1c:8d:d4:01:c6:87:83:5d:
                    84:74:81:61:7c:cf:3f:cc:c6:4a:0e:d5:9a:ef:47:
                    2b:b0:37:79:13:d1:38:ad:56:38:4f:4c:da:07:bc:
                    a9:40:52:b8:2c:78:06:7d:1d:79:06:c8:93:6b:06:
                    a8:b8:8a:ee:9e:27:de:a4:cd:90:0d:b2:b2:47:d6:
                    3e:70:f1:a3:5f:63:94:fe:9d:09:88:0c:b8:c0:ea:
                    b1:46:93:bd:4c:a4:99:fc:16:45:75:f3:a7:62:d2:
                    61:88:a7:d0:21:d3:69:fb:4c:9a:fc:9e:56:61:cd:
                    60:81:38:18:b4:8f:ff:e6:9d:6c:3c:f5:b5:82:b6:
                    94:62:42:cb:70:0e:4e:99:01:e8:93:1f:4f:60:3b:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:ED:FA:41:62:6C:E1:AF:1A:71:F6:64:13:0E:FD:B6:58:68:8B:98
            X509v3 Authority Key Identifier:
                keyid:4A:88:3E:94:AA:14:51:BA:74:8D:6A:5B:F1:75:A4:3F:E8:16:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sog-lKoUUbp0jWpb8XWkP-gW5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/917828-7c40-49ce-8703-9d37026f51b4/1/Sog-lKoUUbp0jWpb8XWkP-gW5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:f7:de:59:94:53:51:f3:45:33:16:30:22:58:22:c5:0c:
         75:81:18:a6:5b:84:52:3b:e1:8a:b7:83:38:c1:a6:1e:43:29:
         4d:a8:ac:e4:60:e9:50:d6:a7:a4:e4:c2:8e:c7:f3:bd:07:ad:
         8a:87:fd:9c:75:da:a5:81:9a:09:a5:cd:87:40:23:ab:bc:1c:
         88:cc:6e:40:14:c4:62:ca:e3:0a:05:52:03:7d:5a:99:ba:94:
         3c:95:75:39:57:3d:bb:3a:69:b6:ac:2b:79:ab:d0:93:46:a9:
         92:5a:33:34:39:bf:82:76:61:24:24:79:fa:3d:d0:be:e3:c4:
         06:44:fa:ac:a7:1c:8f:9e:9e:03:70:42:45:d1:0c:34:d2:fc:
         61:06:e0:2e:44:de:ae:3d:0f:af:42:b1:e5:9b:4c:68:65:c0:
         d1:63:f1:70:c3:f4:9f:43:22:cb:93:c9:90:83:87:63:e6:b6:
         06:9c:83:63:01:46:ac:28:3b:dd:d4:10:9f:ba:c5:84:6e:7b:
         8e:49:49:7b:4f:5f:07:b3:93:9e:66:69:72:b5:fe:08:36:ce:
         76:91:81:b1:37:6e:e8:b4:3d:ed:5a:0f:57:0f:d1:6c:a2:da:
         5a:d0:0b:f2:0b:fc:19:f2:78:85:12:08:a4:a0:b9:c8:c7:e6:
         f9:52:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:17 2025 by rpki-client