Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File:                     cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier:          ljnujFuzjgJS9BuERLVdnuQcUcPaMX+oBQYA2SBgUeo=
Subject key identifier:   28:DF:9F:A0:A8:1B:F9:A6:CD:A5:52:50:C1:9E:6F:1D:C5:41:BC:FA
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer:       /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial:       0198D660712ADD2C5C0E2138EAA208BB274C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number:          072D
Signing time:             Sat 23 Aug 2025 10:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:41 +0000
Files and hashes:         1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=)
                          2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: 2xJT1zym0YO4suhNeHIeZQPljllUYYflo+iwjiIO+g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:71:2a:dd:2c:5c:0e:21:38:ea:a2:08:bb:27:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
        Validity
            Not Before: Aug 23 10:01:41 2025 GMT
            Not After : Aug 24 10:01:41 2025 GMT
        Subject: CN=28df9fa0a81bf9a6cda55250c19e6f1dc541bcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:e9:62:5d:a8:bd:23:6c:f3:b6:cc:a4:5b:
                    d3:4c:eb:b2:c5:fb:9d:ad:a2:8e:d1:e5:58:d3:ea:
                    ac:36:09:4a:51:a0:ad:17:f3:91:b2:fd:4a:d8:c3:
                    2e:94:86:d4:c5:8c:16:8c:4a:83:b5:03:0e:d2:e6:
                    59:6f:ff:83:7a:49:d4:52:a6:b9:06:f1:f0:47:a8:
                    20:28:d3:9c:29:c1:5c:8e:98:a8:1d:16:32:f5:15:
                    08:96:cf:1f:d5:6c:ca:e0:7c:1a:ff:2a:f4:26:df:
                    25:20:da:d7:36:f7:b9:ca:5e:13:85:e1:71:8b:02:
                    b6:fb:54:fd:f3:d5:40:ef:9b:1a:74:40:aa:1a:4e:
                    72:1f:60:4b:61:61:66:fd:0c:a7:9f:0b:5b:b0:17:
                    5f:9f:cc:2e:3d:9a:88:16:09:9a:c1:6d:fd:41:ee:
                    22:f4:b8:d5:aa:98:58:af:9e:e6:b2:14:a1:29:d8:
                    a9:91:c0:32:98:e2:ef:59:37:46:9d:d0:27:1e:3c:
                    85:ec:ca:9d:82:e1:d9:58:ee:16:54:18:4b:0a:e6:
                    e4:86:3f:2e:64:81:c7:e4:b9:6a:a9:1c:3d:c0:e1:
                    93:aa:e8:1d:21:c5:0c:14:3b:e9:e3:52:54:18:cd:
                    c1:bf:ae:a7:07:61:56:3c:3e:d6:40:f0:9d:85:64:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DF:9F:A0:A8:1B:F9:A6:CD:A5:52:50:C1:9E:6F:1D:C5:41:BC:FA
            X509v3 Authority Key Identifier:
                keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:90:17:77:c5:8d:ef:c3:1f:4c:7a:f2:d4:b4:88:45:7c:6b:
         e3:ed:33:96:f0:d2:7e:74:b3:0c:dc:86:19:af:57:4e:91:b9:
         b9:58:a9:6c:bc:b8:fc:52:5a:da:8d:42:5d:71:27:ed:96:30:
         0a:8b:cf:8c:82:d8:16:02:f9:bd:25:55:18:13:32:42:f5:09:
         a7:f0:68:9f:05:97:6e:31:2d:c9:db:1d:c3:e4:5a:e7:1c:87:
         c0:db:62:f8:8e:1e:4a:90:2a:cb:e7:4c:be:e9:03:13:1b:5d:
         1e:8b:bf:f7:ed:bf:2d:5a:4a:d2:a3:30:c0:04:15:ae:2a:bf:
         da:d2:68:0b:af:ca:6f:97:9f:72:10:6b:2e:35:6d:a8:7d:6c:
         17:64:ee:34:12:e2:1b:5d:a7:50:4b:a4:20:49:a9:99:8b:96:
         e8:4b:5c:b7:31:ac:c4:10:11:9a:bd:fa:5d:19:92:d8:af:71:
         a9:90:87:78:be:a7:26:2d:90:37:c6:93:e9:97:7f:00:b1:a1:
         f5:d2:70:e1:dd:21:41:b0:2d:79:42:1b:7d:f0:af:9d:dd:ad:
         6d:88:c8:d0:ea:a4:a4:95:4c:fd:dc:81:01:0f:3d:9e:57:7f:
         cb:7d:49:2a:a7:98:38:60:89:76:24:34:c2:8e:65:6b:34:03:
         d0:f8:b8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:37 2025 by rpki-client