Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          ReBd2OjHnJ84M2X41AOib6SrEIoPxZwvtmhxAcyWIVA=
Subject key identifier:   2E:CF:FB:43:94:6F:ED:DB:18:76:B9:62:10:BE:F4:D3:0B:88:C4:FE
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       0198D515AC2AE7F8D32D9AEA1D5B05270E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 04:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:23 +0000
Files and hashes:         1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: t1Kknrf17I6+Mqv6IZDCGl2dl+k4lxK2qCY53TSuT4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ac:2a:e7:f8:d3:2d:9a:ea:1d:5b:05:27:0e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: Aug 23 04:00:23 2025 GMT
            Not After : Aug 24 04:00:23 2025 GMT
        Subject: CN=2ecffb43946feddb1876b96210bef4d30b88c4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:a5:58:fa:8c:e6:a2:e5:0f:88:a4:88:b0:
                    79:d6:26:b3:a9:f1:f1:ff:41:52:d1:45:87:3e:63:
                    17:a4:d4:eb:e3:20:f9:24:21:12:01:ed:f8:c7:f2:
                    22:67:db:45:35:9d:f1:b2:b0:d5:ef:6a:f3:cb:4b:
                    03:90:7d:ed:52:bd:09:e4:a0:c4:63:12:90:5c:32:
                    7a:f2:06:7c:57:f2:aa:70:3e:67:02:45:aa:35:b3:
                    24:59:a1:d1:b4:57:2f:3c:56:36:16:02:b3:7c:da:
                    88:56:20:c1:81:28:89:c8:7b:7e:8a:e5:ef:60:a3:
                    9f:50:6d:98:a2:2f:fb:ef:b8:3f:03:8f:3d:e5:31:
                    1b:1b:fd:c7:3b:43:fa:8f:90:c1:ed:52:c8:fb:09:
                    33:52:b2:ac:0c:e3:52:4d:54:85:ab:0b:99:7c:05:
                    53:7e:44:81:91:58:11:55:ab:42:e1:5b:98:ce:18:
                    80:65:fa:46:49:1d:a5:3e:e1:2d:e2:a0:39:6c:58:
                    a8:37:82:1c:7d:f2:04:4e:e3:f3:8c:53:92:77:33:
                    7d:b4:ac:6b:93:0e:38:97:ad:9b:62:e5:cf:cb:de:
                    c9:3c:f0:54:6e:76:bf:29:e1:cf:0b:a8:95:67:d8:
                    67:58:04:bc:9c:b6:22:f7:32:76:ea:31:c7:2b:95:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CF:FB:43:94:6F:ED:DB:18:76:B9:62:10:BE:F4:D3:0B:88:C4:FE
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:70:de:b2:e3:93:2f:ce:e3:af:81:8a:dc:30:2c:b1:b1:1d:
         9f:02:04:ce:e6:c6:e1:71:91:c1:14:d4:5f:7b:56:91:9b:b3:
         94:82:d2:80:53:18:58:d2:ca:78:26:4a:52:06:81:5b:b9:84:
         e6:20:0d:67:61:85:8c:aa:55:ee:3e:13:f3:cb:dd:f5:e4:18:
         b8:b2:3b:35:c5:3d:d9:de:a4:7a:2c:5e:30:83:c7:ac:cd:6c:
         cb:22:78:3d:a1:6b:96:8f:70:57:a4:e2:3e:ce:b5:d5:fb:76:
         1f:77:d0:1b:64:ee:9d:42:e3:f7:6d:45:9c:ac:5d:9c:dc:14:
         f0:39:70:15:89:bf:49:5c:86:1c:0d:6b:ef:33:46:e2:36:76:
         88:36:4d:b3:ff:6c:d8:d1:1c:43:17:f0:84:c3:e3:3e:e1:84:
         27:25:02:0b:79:2d:cb:b9:29:15:54:a4:65:da:97:bf:56:a8:
         c7:09:c8:fe:9d:22:cf:ab:9a:42:ce:d1:6c:e7:24:8a:ad:63:
         01:16:d1:b4:95:23:a4:99:b0:c5:61:93:04:50:06:2a:af:76:
         a9:e3:c5:05:5f:c5:17:55:30:da:ae:45:58:67:12:a7:32:7e:
         9c:ca:17:03:ed:62:55:ac:67:73:5a:92:e1:17:c8:55:9f:af:
         58:87:c1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:20 2025 by rpki-client