Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File:                     AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier:          HccErD80wSYazhk2v/JmTF9CnEUy5lu4sg9ksmmG9+o=
Subject key identifier:   29:56:95:C5:FF:F2:4D:BD:19:3B:16:32:B3:96:90:10:25:11:06:E3
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer:       /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial:       0198D4E066272213AE1DAEFF2515A4E0209C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number:          0790
Signing time:             Sat 23 Aug 2025 03:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:12 +0000
Files and hashes:         1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: rE8YdSxA7ikgko0VuvYOJlHiyIlGkpEUpVzEzcEWN5M=)
                          2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:66:27:22:13:ae:1d:ae:ff:25:15:a4:e0:20:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
        Validity
            Not Before: Aug 23 03:02:12 2025 GMT
            Not After : Aug 24 03:02:12 2025 GMT
        Subject: CN=295695c5fff24dbd193b1632b3969010251106e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:7c:46:38:d3:2e:9b:1b:d4:b2:a7:ba:3e:
                    57:5d:f3:c4:18:44:5f:c3:27:ed:17:48:1e:28:5a:
                    01:91:c3:e0:d1:cf:12:30:48:e2:e6:03:29:83:5f:
                    f1:d9:2a:f0:c3:86:b9:e9:61:5b:b6:db:a0:96:07:
                    34:cc:1a:a0:8d:15:ce:fa:b9:fc:7c:31:d6:08:40:
                    9c:af:1c:99:3b:a3:df:5e:81:ff:be:79:ab:50:07:
                    50:90:cc:7e:00:96:f2:82:2f:23:26:5d:a8:6a:de:
                    7a:1f:05:ce:ff:e6:b8:b2:7d:a0:b7:74:12:13:5d:
                    04:ba:6f:c7:22:5b:47:10:77:34:75:08:b3:43:b0:
                    e7:91:68:bf:86:29:91:0f:da:4b:e3:08:a9:a7:d6:
                    ad:4b:0b:58:ac:9a:63:10:bd:b1:f0:63:29:f7:36:
                    fe:3e:a8:45:17:97:eb:59:71:32:2c:2d:d0:94:ff:
                    81:75:a7:6c:b9:9e:05:42:84:2b:94:25:db:6e:26:
                    1d:03:52:25:31:e5:ee:27:81:bb:a5:a7:5f:0a:b2:
                    48:6e:b2:bf:4e:28:b2:09:9b:20:fe:d8:fc:2f:b7:
                    26:4d:77:7b:5a:77:d9:c3:3c:d7:14:b3:fb:40:76:
                    94:f3:6b:83:30:59:1f:6f:56:ae:bd:d0:00:70:04:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:56:95:C5:FF:F2:4D:BD:19:3B:16:32:B3:96:90:10:25:11:06:E3
            X509v3 Authority Key Identifier:
                keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:05:cd:22:da:e1:32:47:fd:7a:0b:0e:ba:ee:18:b8:d5:
         cb:32:98:12:b1:22:21:59:dd:cd:e4:5c:0d:8c:96:3f:de:13:
         74:7e:a9:ce:7c:99:1b:b9:49:3b:cd:a0:93:bb:92:48:d4:22:
         9c:70:b4:03:bb:f2:31:7f:a1:40:7a:53:89:d5:93:f4:84:0a:
         f9:a0:88:5d:6b:4c:fc:04:ca:03:eb:be:07:b2:a6:06:11:19:
         78:93:2d:46:76:fb:da:ba:c6:e3:02:37:89:d5:15:5c:92:64:
         7c:54:16:ec:14:25:c6:fa:a7:85:06:79:26:45:72:df:3b:78:
         ee:9a:c7:5c:bc:ab:23:65:53:9c:c7:37:a4:74:73:c4:89:1f:
         1d:e3:08:15:8c:c3:fd:23:16:27:ce:66:e9:0d:3d:8d:78:4a:
         c7:6d:7e:82:ab:88:8d:03:53:82:69:bb:94:30:bf:c9:c1:e7:
         bb:11:3b:4f:0d:22:b8:38:5f:07:f8:c5:1d:09:fc:d7:e1:4f:
         13:fc:6f:37:8a:3f:ef:17:ca:40:ab:14:6f:35:37:f1:24:54:
         ee:d8:65:fa:d3:94:30:15:a7:12:08:5a:08:a7:3f:3c:cd:a1:
         31:5c:93:58:e3:30:e8:e5:29:45:2f:c5:ec:70:91:d0:e4:76:
         b4:cc:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:54 2025 by rpki-client