Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File:                     ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier:          d/N8gAHo0mMzkN1qjGCFYlxrRIoj9+NUu7KoWUPUYgc=
Subject key identifier:   45:74:1A:A6:6D:B4:97:A0:BA:96:9F:D6:16:1A:64:B6:77:FE:2F:87
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer:       /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial:       0198D515C4AB2E23FDFF518F92C27B1BF74A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number:          0ABD
Signing time:             Sat 23 Aug 2025 04:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:30 +0000
Files and hashes:         1: 2j_QBpsrLBBxs622BISyOZtEgFA.roa (hash: 32mbR7LJ1AvTIHIxhitKhF6+X6cgHFfdsLG9qjMakhU=)
                          2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: 7Ap8dMy3doTHKdUCGzR7pzdmlgP/X0UQFKcOtETZ018=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:c4:ab:2e:23:fd:ff:51:8f:92:c2:7b:1b:f7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
        Validity
            Not Before: Aug 23 04:00:30 2025 GMT
            Not After : Aug 24 04:00:30 2025 GMT
        Subject: CN=45741aa66db497a0ba969fd6161a64b677fe2f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:99:c5:22:90:18:0d:6c:50:2b:99:dc:80:
                    0f:b1:ab:a9:90:79:37:cb:15:ed:77:70:a0:b1:3d:
                    f2:d3:a3:cf:6f:19:1a:57:53:ee:44:65:63:ca:da:
                    12:f6:af:9b:bd:84:95:37:4a:36:21:6e:3a:d0:81:
                    cb:9e:4c:17:a0:5b:f3:15:22:20:40:3e:84:99:13:
                    4f:6d:42:61:ff:a2:71:ea:2a:a8:94:31:88:b5:dd:
                    26:f0:b2:d1:cb:6e:a4:f8:6b:fc:88:9b:99:ce:c1:
                    df:cd:93:3a:29:1e:cc:6d:10:2a:f7:47:63:a8:d8:
                    40:be:a5:07:be:17:41:29:7f:82:cd:6e:c6:62:8f:
                    f8:7e:03:0c:8b:a9:73:cd:0e:a3:79:ec:7b:c6:9d:
                    4c:cb:49:57:71:9e:e5:0b:25:1a:f3:21:05:7e:fb:
                    12:fd:a6:54:d7:cd:12:78:8a:f5:df:03:c4:f6:36:
                    31:5c:fe:3a:ec:3b:6d:d5:46:b6:d1:e6:83:3c:46:
                    5c:f3:56:f9:50:38:a5:6a:5d:da:46:c2:2b:93:c2:
                    1b:55:7a:5a:d5:ca:b5:99:21:ce:4a:c9:2e:02:9b:
                    a4:78:36:bf:12:c4:c5:20:11:bc:84:d0:54:dd:88:
                    34:df:d8:33:7c:83:58:ca:cb:a0:20:5d:b4:75:42:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:1A:A6:6D:B4:97:A0:BA:96:9F:D6:16:1A:64:B6:77:FE:2F:87
            X509v3 Authority Key Identifier:
                keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:60:53:a8:02:cc:d3:57:a3:bf:1f:fa:18:cf:89:47:7a:
         c2:cb:77:e1:36:85:ac:44:e4:ac:45:61:22:26:d8:64:b3:c1:
         69:b7:19:90:1d:9c:58:71:b5:20:97:92:64:46:7e:f7:c3:03:
         64:f0:25:86:d5:6d:7a:8c:46:86:f3:fe:b7:1f:a3:1d:22:ad:
         0d:4f:13:40:35:34:76:df:a8:de:1f:5c:4b:e6:a5:db:f8:a7:
         89:5d:13:2c:57:5e:26:b1:5a:3b:3a:67:a8:d7:07:42:10:9b:
         33:f2:48:c4:06:09:bb:43:76:43:be:4c:7b:65:36:cc:4e:0c:
         de:d0:99:5b:16:f2:56:38:d8:fd:8f:50:38:c5:3d:79:3f:e9:
         8c:6e:21:dc:f6:62:1a:ac:4e:aa:f7:08:8b:04:66:af:9b:ae:
         13:2d:6f:ab:ce:76:13:f9:80:1e:2b:c2:12:c9:c5:18:2c:ef:
         f3:af:48:9b:33:61:f7:9b:2f:b7:e4:29:93:fd:5a:2b:63:77:
         50:67:06:55:80:3c:a9:b0:0e:95:da:e0:ae:b5:3b:91:f8:49:
         49:a8:83:03:f4:aa:10:ad:75:1c:c3:94:f6:b7:f6:60:3e:00:
         99:1c:dc:b6:7e:f2:6d:2c:8a:a7:fa:29:49:f1:5d:c5:7a:50:
         18:89:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:45 2025 by rpki-client