Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
File:                     9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json)
Hash identifier:          BRu3ETm22EbLZlf/45C4xfMSXJgZZ4jPJ0sUyMbk8Hs=
Subject key identifier:   ED:A0:00:8B:DD:17:17:44:A4:52:8A:E6:94:AA:F3:BD:18:7A:B2:CA
Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D
Certificate issuer:       /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
Certificate serial:       0198D473DF0B290B578C9AAF5EEA41BA0490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
Manifest number:          04B5
Signing time:             Sat 23 Aug 2025 01:03:40 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:40 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:40 +0000
Files and hashes:         1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: I/l9WR2/Ti+l4jqpyZwTP2+JrJAcQ4sbw4GEgufByLc=)
                          2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:df:0b:29:0b:57:8c:9a:af:5e:ea:41:ba:04:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d
        Validity
            Not Before: Aug 23 01:03:40 2025 GMT
            Not After : Aug 24 01:03:40 2025 GMT
        Subject: CN=eda0008bdd171744a4528ae694aaf3bd187ab2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:0f:e8:01:65:fb:89:1f:8a:d3:a8:3c:61:
                    f5:11:6a:86:6c:95:21:3d:0c:93:9d:90:9e:c6:ea:
                    12:7b:18:b3:57:26:65:c1:62:09:60:20:cd:ce:2a:
                    8e:b1:c1:b1:bf:a2:d7:d7:a5:12:55:5a:24:54:3d:
                    4b:ad:46:10:e5:f9:e9:9b:b0:7c:e4:75:36:ac:4b:
                    f6:ff:21:19:f9:99:4e:fd:29:54:31:db:83:04:6c:
                    87:e2:3e:92:7a:d7:e5:fb:5e:f3:02:ea:27:4f:8a:
                    cb:96:1f:df:e9:dc:4e:b5:d8:ad:1b:03:c4:fb:b4:
                    76:d8:fe:82:e7:24:4f:74:9e:30:fd:0e:34:31:55:
                    2b:55:7c:2b:20:f0:64:38:46:d0:38:fd:b3:ae:12:
                    40:ea:a4:19:5f:5f:cd:35:5e:19:25:86:71:e5:48:
                    9c:12:f3:8a:96:e9:7c:53:4f:1c:59:af:22:37:c3:
                    ac:ae:15:cc:66:cc:2f:d9:d5:65:52:f0:3b:1b:c1:
                    0d:df:de:6b:56:7a:d5:14:70:af:45:16:54:aa:fb:
                    01:d9:e5:99:87:72:79:0a:4c:23:d3:5d:8f:76:47:
                    d3:a9:3c:94:87:e7:da:3c:92:7b:57:7e:e4:72:cf:
                    2b:3d:96:25:ca:d7:07:53:55:7b:94:35:94:77:ec:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A0:00:8B:DD:17:17:44:A4:52:8A:E6:94:AA:F3:BD:18:7A:B2:CA
            X509v3 Authority Key Identifier:
                keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:97:52:81:5c:ea:1e:9a:26:1d:f5:39:6a:53:a9:bb:66:b7:
         d3:f4:80:9e:7a:7d:e6:51:bc:16:c4:ec:67:39:91:bd:48:f4:
         1e:03:fa:03:15:bc:e4:d6:14:38:8f:1c:70:19:e4:c4:af:27:
         1f:00:e1:e7:96:6b:13:ca:e1:46:2d:b2:1c:ca:17:c9:da:39:
         99:d4:b1:9d:57:b4:5b:d1:70:0e:88:76:5f:7b:86:2a:28:17:
         df:dc:83:e0:25:45:83:2f:22:87:e2:9f:89:ce:75:8f:f9:be:
         57:a5:eb:3d:24:08:7d:69:cf:47:b6:9f:61:a4:69:02:75:3f:
         c3:16:01:02:0c:7b:22:d2:f7:61:8e:4e:13:cb:c3:73:77:0a:
         72:b1:4e:d8:7c:09:15:f0:fa:e8:14:a9:fe:fa:cf:cb:25:e4:
         8e:1c:fa:b0:74:cb:e9:7b:af:d7:fd:e5:d7:e8:7e:a8:8a:8f:
         da:66:3c:01:f8:fc:a7:8b:dc:06:0e:5e:9e:7d:ed:5a:e7:6a:
         a6:94:42:dc:5f:0d:95:b3:ae:5c:30:37:26:3f:5c:c0:0e:4c:
         06:3f:cf:2e:3f:3a:5a:a5:9d:a4:94:b9:21:3f:11:98:be:de:
         02:2b:85:82:53:1e:89:20:87:a7:75:a2:de:31:c4:a4:33:4d:
         48:01:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:43 2025 by rpki-client