Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File:                     0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier:          BBMEITOF2B74O8TIlkJXu8AAiQR/rZs25BhcA/1WBD4=
Subject key identifier:   19:D2:99:75:39:A7:3A:0E:C3:69:91:A5:F7:FE:EF:68:ED:16:4F:C4
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer:       /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial:       0198D6CCD4396C95E570584F6A63BAD16996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number:          0AAB
Signing time:             Sat 23 Aug 2025 12:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:04 +0000
Files and hashes:         1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: nOT6hZaWJsyIIbkKoHaRoKyRHUNq0UPvzlkNX8q/cZQ=)
                          2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:d4:39:6c:95:e5:70:58:4f:6a:63:ba:d1:69:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
        Validity
            Not Before: Aug 23 12:00:04 2025 GMT
            Not After : Aug 24 12:00:04 2025 GMT
        Subject: CN=19d2997539a73a0ec36991a5f7feef68ed164fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:c2:5e:7d:43:5b:7d:50:e7:2a:1b:84:d5:
                    a9:27:6e:e5:ee:dd:95:93:25:03:32:e9:ae:da:94:
                    cc:fd:2b:58:1b:2f:ac:b6:78:d5:ef:0f:9f:63:e6:
                    80:aa:17:c6:e8:73:94:d7:77:c6:93:d2:13:df:ff:
                    09:a5:b4:97:5e:e0:e6:5b:aa:e0:40:75:2e:39:d8:
                    32:e0:5b:fa:a3:3a:71:db:63:4b:60:42:16:c3:25:
                    5f:94:f2:3b:46:f8:d4:aa:97:18:97:4f:73:c9:68:
                    dd:c9:6f:be:a6:c4:74:30:42:6b:20:b8:5f:eb:c0:
                    2b:d2:c4:f2:59:18:8e:8f:e5:7b:e0:9d:c9:85:82:
                    a4:c2:63:13:7d:2b:38:c0:d5:64:3c:99:f4:85:82:
                    e8:f8:df:60:0f:70:a6:ec:32:2b:a7:1f:7b:00:5a:
                    a3:40:9f:6e:b3:22:01:98:80:96:b1:9f:a9:58:03:
                    96:2d:e9:4c:59:3e:f6:78:ea:a2:6a:ba:f0:f8:13:
                    1c:de:00:51:e6:a5:22:a9:f2:26:23:4a:d7:be:d7:
                    c2:78:06:99:ba:82:dd:0d:ba:5f:88:88:1e:76:eb:
                    ff:28:7a:a4:21:72:53:7c:b7:b9:f4:c5:2e:23:63:
                    6b:3e:a1:b0:da:da:8e:ab:3e:48:66:98:23:4e:34:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D2:99:75:39:A7:3A:0E:C3:69:91:A5:F7:FE:EF:68:ED:16:4F:C4
            X509v3 Authority Key Identifier:
                keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:04:5f:9b:59:fc:30:ce:5a:f9:b3:8e:32:90:80:38:42:39:
         b9:6d:2b:5a:ae:d3:7e:d2:3a:4d:e2:04:25:0f:3f:ee:95:02:
         e0:ee:ed:ea:57:87:13:d6:78:c4:b5:e2:df:9b:e9:d9:4b:f4:
         6f:e5:2d:93:e0:16:8f:8a:16:ef:74:68:de:5c:c5:2b:7c:7c:
         a4:25:a6:1a:9f:f8:c9:4a:ac:70:ad:f0:0c:e8:8f:c8:0c:08:
         dd:49:c2:85:ad:de:45:e9:52:e2:98:f5:f9:f9:cf:1e:fd:4f:
         c8:b8:ef:3c:df:7a:f8:65:8c:09:a5:c9:fc:a7:24:28:fe:5a:
         aa:37:42:6e:e3:10:4f:52:5b:42:16:0b:72:23:f9:78:e9:e1:
         61:37:88:7d:99:a5:6d:fc:44:d4:36:67:a2:d5:7e:7b:f7:09:
         47:a4:d3:f9:ac:47:1b:60:5e:d4:c7:02:0e:4c:20:ca:ee:45:
         97:b7:ae:0c:5e:8c:b2:ef:43:c0:c6:78:67:4b:00:38:56:3a:
         59:11:81:34:96:06:50:2d:8f:c9:80:e3:3f:76:cb:17:ea:6f:
         e0:23:64:2a:69:9c:a7:5f:d8:cf:85:bc:c8:dc:6b:2b:87:9b:
         9f:1e:3e:5a:df:41:95:20:d7:fc:81:77:ac:25:12:61:48:90:
         a9:71:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:09 2025 by rpki-client