Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          M4fX+F5he47ksp2H21A/EAOhZ/4elGxCACJnHuiK6TA=
Subject key identifier:   14:AB:91:5B:43:99:D6:55:12:22:3D:1B:0C:32:81:B4:04:8A:68:26
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       0198D5BC58E5E0C881717274E982D0BE9DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          1510
Signing time:             Sat 23 Aug 2025 07:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:27 +0000
Files and hashes:         1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: d7SiAyaHl5AhOTeQc5OH/ElbsZw0OPe+Kcv73vi0Lo4=)
                          2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:58:e5:e0:c8:81:71:72:74:e9:82:d0:be:9d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Aug 23 07:02:27 2025 GMT
            Not After : Aug 24 07:02:27 2025 GMT
        Subject: CN=14ab915b4399d65512223d1b0c3281b4048a6826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:63:22:2c:9c:ba:fe:80:81:00:08:cc:7c:a2:
                    2e:f1:50:d9:21:bf:61:15:68:c2:11:32:ee:4e:ed:
                    52:cb:b0:4b:41:1d:20:dc:3b:8b:06:05:d8:94:15:
                    a1:35:dd:91:55:eb:ac:bd:bb:6f:2e:c7:b0:c9:57:
                    dd:d8:f1:ef:55:f4:90:1d:db:c8:71:6b:48:d9:5d:
                    43:75:7b:cd:99:9a:39:2e:71:3a:71:fe:00:58:49:
                    5b:f6:dd:7b:7e:41:01:15:fe:c0:f2:6b:1c:39:3b:
                    b9:98:e5:31:d6:3c:90:1f:95:f6:65:67:72:ed:6b:
                    30:9e:11:6b:b5:4e:d0:10:3f:3b:c0:06:3d:ea:37:
                    18:fb:03:e4:66:56:da:b6:6a:f6:59:d9:5c:a9:39:
                    c8:61:9c:fe:7a:32:b2:38:46:0f:8d:b5:46:c5:0b:
                    8f:0b:c3:49:46:2d:00:45:fd:c9:ea:38:d3:a9:ac:
                    bf:0c:57:01:8f:0b:15:29:79:96:c9:ce:58:76:ed:
                    22:64:50:6c:b3:68:06:10:bd:2d:26:84:87:f4:86:
                    fd:b1:47:6d:37:66:44:b6:56:06:aa:dd:c3:0a:5d:
                    04:25:a2:d9:ea:20:29:b9:29:48:69:0b:0c:3d:49:
                    86:6c:87:2f:37:dd:b4:bc:62:5e:53:bc:22:2a:03:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:91:5B:43:99:D6:55:12:22:3D:1B:0C:32:81:B4:04:8A:68:26
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:c5:2d:0d:7c:cf:0b:60:8e:8c:34:1b:c1:56:4b:a2:88:2d:
         2c:c6:b2:1f:c7:a9:61:b6:c3:c1:c7:2a:73:eb:c3:14:a9:ac:
         5a:92:74:e1:ed:45:29:a0:5c:53:24:f9:7c:ad:3e:5a:f2:ff:
         67:40:af:3c:91:31:01:e4:2d:81:4f:47:24:df:8d:2d:8d:c3:
         e1:b7:08:62:81:52:01:d1:7e:6b:88:29:aa:aa:24:35:34:61:
         cc:6f:e0:a9:99:5f:1e:95:1f:1d:fd:99:43:7a:c4:8c:4e:cf:
         a7:77:81:bb:6b:a2:f0:e5:08:7f:4b:37:a1:e1:0e:7c:6c:25:
         6c:84:c5:f9:db:c8:fb:08:fd:a6:5f:c3:ca:09:6d:be:91:84:
         7b:43:4a:53:37:8f:7c:28:69:9b:fc:52:48:8b:96:05:8d:b4:
         0a:f0:ae:01:cd:7a:8e:b3:97:73:04:83:a1:bb:0d:7b:df:40:
         97:89:c0:fa:0a:22:a3:71:bc:c2:83:a6:34:01:b0:cb:8b:7c:
         d0:b6:8f:b7:84:19:f9:f7:7e:95:cb:d2:46:89:80:ef:23:b3:
         80:3f:d4:27:6c:b9:2a:4a:77:01:3a:81:c2:52:5a:62:50:17:
         c2:9a:6d:7b:ae:e2:0b:41:4c:24:93:e4:83:35:81:4d:45:fd:
         5e:71:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:59 2025 by rpki-client