Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          lKgTuAXF7WCZSY7uIA/GoNoRIYSHy68+CeZ1QcTC/h0=
Subject key identifier:   B2:75:7B:F9:45:13:BA:2D:18:DA:AD:BC:0C:09:4B:5F:CB:3E:7F:BF
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       0198D5F118FC41ECDD1EFB93104B49EF5370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 08:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:04 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: B4xF5S89Q7uJ9dv/1SUGnc3/gWjGWBNt21FzCrCwkDI=)
                          2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:18:fc:41:ec:dd:1e:fb:93:10:4b:49:ef:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: Aug 23 08:00:04 2025 GMT
            Not After : Aug 24 08:00:04 2025 GMT
        Subject: CN=b2757bf94513ba2d18daadbc0c094b5fcb3e7fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:e5:66:63:fe:c7:83:0d:ee:27:d0:8b:73:
                    94:01:e9:f3:ff:3f:b4:7a:c8:7b:64:02:d0:36:65:
                    14:d4:59:4e:48:c9:fb:b5:a5:b7:ca:a3:4a:ec:f1:
                    80:f0:1d:c0:41:75:81:12:18:7a:e4:0f:b4:c6:7f:
                    1b:7b:cd:ed:df:90:2d:c3:a8:57:92:d9:a6:c3:c8:
                    dc:0f:bb:41:8a:19:50:35:af:48:7f:78:72:45:64:
                    ca:93:4a:6c:da:60:ef:0a:7c:4c:73:f7:8e:1f:82:
                    63:00:09:a9:8a:76:62:11:4e:7c:18:31:53:65:6c:
                    6e:10:be:3d:19:a2:0b:39:38:77:89:2d:ac:d2:6c:
                    65:6c:81:0c:8d:7e:07:c0:0f:1f:eb:64:1a:be:95:
                    5c:f5:32:37:43:1f:20:fb:34:33:a6:8d:63:c2:61:
                    f6:ee:21:4b:0d:d7:50:cd:25:87:67:fa:f5:04:53:
                    26:05:0e:f0:83:86:aa:8c:6b:b6:1a:de:a1:48:50:
                    db:a3:5b:6b:47:9f:fe:be:10:6d:33:15:aa:72:17:
                    db:32:7a:ab:07:1e:3e:00:38:23:b2:14:24:0d:61:
                    10:bb:50:1b:15:14:ea:bc:1b:bf:48:82:c7:e9:3b:
                    8c:5e:d6:20:fa:62:d2:d6:44:db:2b:fe:2e:4c:3a:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:75:7B:F9:45:13:BA:2D:18:DA:AD:BC:0C:09:4B:5F:CB:3E:7F:BF
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:f5:54:55:17:e9:7f:f8:39:67:61:e8:2c:c6:46:3e:bc:
         fa:63:d8:74:ab:61:1a:ab:c1:3c:bb:d7:39:a5:23:22:35:96:
         7c:cb:08:9f:7f:7f:f5:5f:1d:00:c8:9d:7d:07:fc:e3:32:ff:
         06:73:30:96:f5:d8:1f:a2:35:21:6e:81:5c:62:40:ea:86:dd:
         36:30:a4:88:df:84:86:d7:ef:7f:0f:86:9b:cd:88:3a:71:25:
         e8:0c:57:95:be:39:f7:73:c5:f4:01:4d:1c:6d:f3:7b:8a:6e:
         e8:44:90:00:45:3c:ae:cc:a6:b6:70:6b:e5:1a:f5:2d:37:ac:
         5c:ef:6f:7b:77:4a:0f:61:46:56:52:08:fe:5e:92:1b:a7:e2:
         71:88:32:f5:4f:c0:d9:00:17:75:04:0c:1c:52:21:d0:d6:33:
         4b:a0:e7:9a:22:87:94:be:f8:c8:85:65:3b:29:ac:18:4c:6c:
         0b:b9:85:5a:32:4c:5a:1b:11:f9:ac:2b:76:e2:2d:1c:20:da:
         fd:90:e5:dd:c5:3c:0f:55:38:27:32:ec:8a:e6:96:0d:c8:a1:
         a5:f3:89:40:6b:55:36:c5:85:bd:5b:57:88:84:ff:77:8e:38:
         cf:13:39:0d:2a:04:9f:b3:61:03:26:16:15:bd:01:30:3a:37:
         21:d9:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:37 2025 by rpki-client