Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          cQFrckCtRlDcC9jF9n/S1IcLV40Y1UCCAH8Zbq9qzRY=
Subject key identifier:   F6:75:AC:F3:3B:22:A2:3D:00:65:B7:37:D3:35:57:AF:2E:95:35:10
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       0198D70598DCE356406629833BB8AE81B7A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0B90
Signing time:             Sat 23 Aug 2025 13:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:04 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: W2mHaymIA0Dx7FytuFOrs9J191Lmr4r6wQgJYzYdPwY=)
                          2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:98:dc:e3:56:40:66:29:83:3b:b8:ae:81:b7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Aug 23 13:02:04 2025 GMT
            Not After : Aug 24 13:02:04 2025 GMT
        Subject: CN=f675acf33b22a23d0065b737d33557af2e953510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:56:c0:cf:48:48:4e:ce:1c:c0:c1:06:a8:
                    ec:ce:18:20:6d:b4:45:39:d6:49:6b:3b:a0:00:6c:
                    64:21:71:9d:5c:3c:c3:75:ed:99:f1:4a:c6:a3:30:
                    9e:da:d7:c8:2a:91:4b:a7:35:3b:84:9e:98:cc:e4:
                    58:6c:82:da:97:cf:75:2a:52:7f:43:4f:b2:35:67:
                    d0:bb:04:24:a6:36:5e:dc:a9:2a:36:33:49:77:1c:
                    be:e6:3d:d6:0e:e6:ea:de:04:3e:05:ab:e5:78:fb:
                    60:60:4b:17:44:ed:76:da:e7:d9:ba:97:95:e6:cc:
                    42:c9:4f:96:df:c9:f8:21:67:70:59:b4:23:e2:bb:
                    21:e5:d6:3f:fa:db:29:70:6f:1b:7c:d2:16:33:3a:
                    9c:3a:eb:51:f5:15:39:94:34:31:90:ed:9c:b5:52:
                    3c:de:d7:fa:e9:8a:08:6b:71:59:9c:bd:32:59:4a:
                    be:64:c7:59:32:f5:2d:88:1b:5d:f2:8c:e4:50:ae:
                    1e:ed:99:72:ec:43:d7:5c:ec:8b:bd:2c:15:6e:fe:
                    76:1d:d5:4b:3a:b6:56:63:9d:6e:81:40:03:b9:de:
                    41:71:01:fd:db:b3:da:9c:37:9e:21:05:74:c7:37:
                    c5:e2:4e:14:e7:28:0f:9e:cd:73:58:6f:13:24:81:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:AC:F3:3B:22:A2:3D:00:65:B7:37:D3:35:57:AF:2E:95:35:10
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:66:00:8a:d9:5e:cd:b5:d2:fb:00:1d:a8:f1:7d:33:7f:38:
         72:d7:c0:32:17:0e:db:f1:df:ba:8f:79:8d:42:ff:84:fc:8f:
         30:ef:a5:10:46:1b:d0:74:31:e4:f3:29:96:74:ac:04:81:80:
         0f:79:9e:69:c9:ae:f8:b2:b7:a7:c9:49:d3:5f:ca:74:a5:96:
         58:8a:68:d1:fa:89:46:de:4c:11:87:87:45:3d:94:d6:51:16:
         ef:5d:db:8a:5c:3a:12:53:01:69:b4:30:27:33:1c:78:07:53:
         19:15:52:03:a5:a7:19:54:18:40:5d:12:1d:65:4b:2b:96:6d:
         4b:b3:94:99:f7:4f:98:4a:a9:aa:2e:8a:3c:59:06:29:9d:21:
         23:c6:ed:f9:62:bd:ca:1a:08:42:c6:75:ac:09:89:60:8a:39:
         d9:d4:ae:68:d5:e7:be:27:72:36:d1:9b:fc:85:d4:be:43:f4:
         ae:ff:2d:ea:8c:b7:1a:73:54:e7:7f:ef:05:88:95:5f:5e:8f:
         da:d3:a9:b3:b6:03:c5:21:75:ea:e5:b8:dd:c5:d2:85:01:b4:
         4e:e1:73:bf:0f:4e:db:b7:a7:15:54:73:87:66:ca:b8:3e:e3:
         68:ea:30:18:10:57:0f:90:d8:fd:b5:e9:28:cc:10:74:62:3f:
         84:cd:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:05 2025 by rpki-client