Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          yscACMZsht8tf9aNa7kmt2YI/JXd4dK/+d3ekE3JWwE=
Subject key identifier:   7D:0C:AD:36:52:F0:36:32:1D:05:11:31:5E:2B:CC:05:BF:A3:AD:25
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       0198D73B6C2E9BC4D7AF207903FB9E830CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          04E6
Signing time:             Sat 23 Aug 2025 14:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:52 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: 5Rx6djk3KFKbyZzFa4yr7EuoxrinDdkwzb7vMgntMQk=)
                          2: bdIq5nOBWGITXlJ9zml2Pg0QFbI.roa (hash: k0q9hqwpfMQ2WeyDd3IadaGT9hLdAeghDeVvZBVh6H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:6c:2e:9b:c4:d7:af:20:79:03:fb:9e:83:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Aug 23 14:00:52 2025 GMT
            Not After : Aug 24 14:00:52 2025 GMT
        Subject: CN=7d0cad3652f036321d0511315e2bcc05bfa3ad25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:bc:a5:08:94:ed:64:7a:23:72:42:d2:38:
                    12:a8:ee:da:79:45:8f:94:0e:62:cb:25:17:4b:ae:
                    b9:ee:0d:8b:36:98:d4:ed:24:0d:e2:81:07:a2:18:
                    2f:91:48:6d:b7:5d:6a:f8:94:3b:70:cd:4b:28:f0:
                    ca:05:1a:c3:a7:1d:ec:ab:3d:29:5d:96:fb:5b:ff:
                    2a:3b:64:c9:b6:d6:88:1e:a3:67:70:7a:3c:f6:9f:
                    93:84:3c:15:34:48:01:df:82:da:e9:7e:fb:25:d6:
                    98:f1:86:4d:b5:14:41:2a:e6:03:83:29:f3:4b:de:
                    eb:0d:25:10:1d:dc:6e:ae:e1:22:f9:82:34:a2:98:
                    1e:57:64:21:f9:7b:be:87:5b:05:d2:d1:33:45:05:
                    f4:8d:6e:8b:b2:3e:d6:a6:22:37:23:05:1d:62:a3:
                    7e:ef:34:e7:bc:3d:c9:a4:19:6d:bf:f7:7c:91:7c:
                    dd:76:5e:e7:3c:22:9d:c4:81:87:ba:e6:a3:3d:f6:
                    20:fe:1c:7f:85:35:89:ea:0f:62:13:0a:2b:25:42:
                    38:5b:f0:9c:d7:67:47:96:11:99:0f:0e:79:d7:38:
                    10:9b:37:db:71:a1:13:1a:92:a7:67:71:cc:1b:97:
                    dd:c8:4d:38:6e:f2:5c:db:b2:0c:c5:e0:8d:02:10:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0C:AD:36:52:F0:36:32:1D:05:11:31:5E:2B:CC:05:BF:A3:AD:25
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:64:d2:55:41:2e:cf:62:82:6f:bc:bb:15:93:58:a0:9f:9d:
         cc:11:f8:ad:b0:d5:96:f4:3f:a6:06:23:0d:c1:4b:c5:79:f9:
         7e:d0:bd:e7:39:f9:a6:86:90:a9:89:1f:95:45:d4:cb:eb:68:
         1d:c4:bb:64:0e:b4:ec:ec:ea:de:2d:34:73:3d:be:ba:b6:16:
         d9:f9:38:b0:58:5c:02:75:97:bb:16:48:0a:8c:34:51:9a:0e:
         ed:80:f5:3e:ab:c8:a5:49:20:f0:ca:d9:15:a5:93:64:ea:d9:
         e8:92:67:0b:73:d7:5d:82:61:73:61:05:cc:86:98:91:2e:b4:
         ff:68:6f:80:03:02:b1:bb:0e:b3:d4:52:be:ce:16:49:4d:30:
         4a:33:75:90:b7:a4:d1:3a:a8:93:f5:5b:af:d4:c6:68:97:df:
         be:e4:b9:5a:95:29:37:2a:01:d5:a7:55:09:3e:ef:c3:ff:fd:
         58:49:e3:89:02:bb:d9:f2:08:e5:83:42:98:eb:9b:e7:9f:f8:
         4a:9f:c5:15:92:65:1f:3c:96:b1:ae:f6:fa:eb:44:ad:36:33:
         14:bc:03:e8:2d:e2:ab:49:df:05:e8:f6:1b:8e:d3:b4:4e:2a:
         ff:35:e3:f3:06:b4:0e:e3:ff:f7:81:d9:90:e0:c4:72:f3:94:
         6e:c8:5b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:22 2025 by rpki-client