Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File:                     rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier:          KCb7WG2/VtQPUhgTrDTM4iWYz3jvjhAeYWqFkxm8OKo=
Subject key identifier:   DC:57:91:4A:1C:76:C7:8F:36:9C:9B:6E:19:3B:01:0B:F2:C4:9C:15
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       0198D4E0DB5B4CA7846D74183F741D653ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number:          1152
Signing time:             Sat 23 Aug 2025 03:02:42 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:42 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:42 +0000
Files and hashes:         1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
                          2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: vHfZktO3M1HsWPBg8QNfW1CGF2Jn6CkMv4Skw/IS6LI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:db:5b:4c:a7:84:6d:74:18:3f:74:1d:65:3a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: Aug 23 03:02:42 2025 GMT
            Not After : Aug 24 03:02:42 2025 GMT
        Subject: CN=dc57914a1c76c78f369c9b6e193b010bf2c49c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:d9:6a:18:3a:58:61:aa:77:f6:41:eb:ae:
                    34:1f:c3:af:86:4f:5e:e0:c3:61:3f:c3:89:c1:b8:
                    a4:7a:cd:43:e7:52:48:3a:5f:5e:ce:c6:5c:12:04:
                    b7:18:38:5d:25:1a:6e:93:b6:71:22:d2:45:c1:8f:
                    c2:29:67:19:0c:bd:08:92:80:2e:fe:da:a3:e7:e4:
                    38:91:72:d0:fc:90:12:00:f5:3c:69:dc:7f:7b:b2:
                    4f:a3:33:36:60:cc:1f:17:11:18:34:4e:dd:ee:5e:
                    e1:8d:74:48:82:51:b5:bd:0b:59:18:7b:12:2f:02:
                    f1:5a:6e:c0:05:2b:5d:db:ce:fc:8a:58:bd:43:e7:
                    76:08:d4:ce:ea:ff:c3:70:c4:a2:7f:98:2a:35:2c:
                    01:7c:5a:b7:61:83:de:c4:00:e6:2f:8a:fe:c5:8b:
                    ae:fd:c9:1e:27:eb:aa:41:75:51:a7:79:e4:39:83:
                    2f:c8:2f:a1:95:66:65:40:40:69:d0:73:f0:fc:38:
                    62:ef:5f:37:d4:3a:2f:d4:9c:93:34:76:f8:70:83:
                    02:21:24:4a:3f:d0:a2:24:be:58:a5:4e:b5:06:3a:
                    57:58:3c:02:d2:1b:a2:ea:8f:da:c1:e8:e0:75:9f:
                    75:24:66:d2:a9:86:94:b5:3d:90:58:14:ed:3b:f9:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:91:4A:1C:76:C7:8F:36:9C:9B:6E:19:3B:01:0B:F2:C4:9C:15
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:c3:a9:95:6d:b7:90:e2:1b:5a:f2:9a:8b:c4:f3:80:2d:
         e5:05:93:39:90:84:f2:8a:ce:9b:19:a3:0f:c9:c1:17:22:4b:
         49:cb:7e:81:3c:4b:b9:ed:42:71:ad:92:19:7b:2f:13:e7:50:
         af:7b:5b:71:8a:28:56:24:ee:f2:85:55:39:63:f1:6d:0b:17:
         a3:ba:89:91:65:39:86:b2:a9:1f:7b:2c:76:f3:34:80:7e:38:
         d3:69:26:37:5a:27:80:fa:ee:2a:cd:1d:0c:bb:ce:1a:e2:d3:
         8d:8b:b1:4a:8e:ac:96:c9:78:d9:59:4b:83:ea:97:f4:35:12:
         95:98:a4:78:cc:49:86:88:c4:f0:11:64:c3:a1:43:0a:18:d6:
         47:41:3c:7d:45:c4:45:40:f0:83:c0:74:f0:91:26:2d:1f:cd:
         70:5b:d4:3a:ff:29:8f:14:c9:95:a3:ee:1d:e4:3f:93:26:d6:
         77:e9:0f:82:e0:ab:54:ba:59:ca:ba:ce:1e:b4:f4:5b:15:3d:
         08:35:dc:04:8e:b7:de:b1:e5:f2:58:cb:94:76:a2:67:61:48:
         64:f8:51:a8:98:38:9f:f6:d8:0e:d0:c0:6e:62:d8:8c:0c:0c:
         2b:6c:27:5d:75:86:25:d0:01:9d:bf:fc:3d:55:07:1b:cb:2b:
         53:4f:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:54 2025 by rpki-client