Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File:                     SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier:          r0IbDYqmlWtXxiiHoOaF5grGO8Zx7YTBfLF3R1aISl4=
Subject key identifier:   15:77:4A:6F:F6:51:73:B0:54:47:41:F4:48:7F:2C:53:BF:AF:A2:08
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer:       /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial:       0198D5BC1870547EC5E312E5B3253EFC9C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 07:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:10 +0000
Files and hashes:         1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
                          2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: 1iLNJWS9JCivPZdko57bBUm8zaXW4sw/75SCd03vxMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:18:70:54:7e:c5:e3:12:e5:b3:25:3e:fc:9c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
        Validity
            Not Before: Aug 23 07:02:10 2025 GMT
            Not After : Aug 24 07:02:10 2025 GMT
        Subject: CN=15774a6ff65173b0544741f4487f2c53bfafa208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:b5:29:89:7f:a9:bb:02:25:d7:80:40:28:
                    e5:02:d1:33:83:61:cc:df:a2:32:af:06:f4:0a:8a:
                    7d:56:1c:32:ad:08:27:59:5e:e0:69:27:8d:db:1a:
                    bb:49:dc:96:2e:c9:be:89:9a:3f:49:70:e4:5d:62:
                    65:24:ff:23:08:41:9b:02:ff:dd:4a:73:16:bd:3e:
                    ae:45:22:ae:d6:60:98:48:6e:68:91:2e:a3:25:d2:
                    05:a3:4c:72:1f:63:c2:33:ac:f0:c4:3e:55:eb:80:
                    9e:29:14:80:78:0c:a6:aa:b1:ee:a4:53:e2:d7:9d:
                    ea:1a:9c:ba:ce:7e:18:26:43:9e:19:67:ef:dc:9d:
                    e4:a4:2b:62:ca:3c:15:ee:e5:e0:3c:f3:2c:84:30:
                    f3:31:e5:87:58:b9:19:47:68:08:e6:c9:66:d4:b3:
                    15:c5:1d:63:b0:ae:8a:38:1c:ea:69:fb:1d:08:22:
                    1e:bf:2f:fd:46:ae:69:c2:e5:67:f0:43:6e:91:6a:
                    c8:e1:73:ea:57:27:e4:5c:a8:3a:3c:03:8c:95:6c:
                    a0:b5:5e:5c:c6:ea:3b:90:7e:1e:90:e1:7f:b5:18:
                    cc:1d:95:53:0b:75:d1:47:f9:d0:eb:38:c8:0d:e0:
                    45:08:23:3d:5a:8b:62:9f:37:70:75:8c:53:cf:5c:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:4A:6F:F6:51:73:B0:54:47:41:F4:48:7F:2C:53:BF:AF:A2:08
            X509v3 Authority Key Identifier:
                keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:ca:cf:f3:99:2d:03:bb:7f:70:d8:7d:0a:00:3a:df:f6:
         82:10:ab:db:94:c6:68:e8:bd:67:07:9c:e4:94:6f:01:80:03:
         88:23:3f:c7:17:fe:18:b7:ce:65:1d:c1:54:6a:5f:92:53:df:
         01:41:78:fe:b9:08:db:3b:bf:17:3f:8e:7d:0a:40:6b:4c:76:
         3b:f3:78:12:47:30:01:d0:5c:21:a7:ad:67:ed:dd:ad:ea:66:
         98:6f:c0:58:ea:b6:8d:71:08:6b:c9:f2:6c:d8:ce:c1:48:50:
         27:18:b8:cf:ce:d1:33:db:34:47:79:c4:9b:ef:71:f8:1a:3e:
         39:09:c6:2e:cf:a9:96:c8:1a:59:e4:e2:ac:bc:74:51:20:68:
         a5:9f:04:16:66:f8:2f:58:c5:e1:cb:d5:45:cd:58:42:f7:c3:
         b9:58:34:78:19:8e:ce:be:a1:a3:03:20:a1:8e:c7:7e:a8:6c:
         51:49:b2:a9:ad:c8:8a:80:7a:93:d3:7e:bf:75:7f:16:0f:ec:
         3e:b3:c1:49:b7:08:3e:91:83:4e:e3:d3:98:c1:5a:dd:92:a8:
         81:9d:45:58:ac:7b:5b:b4:d0:d6:64:a2:f8:c8:cd:37:24:a5:
         1f:93:35:7d:18:b5:83:39:cf:0c:a5:71:c2:d4:31:4f:39:bf:
         6c:a8:73:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:58 2025 by rpki-client