Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          M4qtw8rhaDVqm4TXDjCO5xioKDltyDeZTu5j9Q9QyKA=
Subject key identifier:   C8:4F:80:67:06:63:7A:45:41:CB:58:B5:C1:39:E1:19:60:2E:49:A4
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       0198D5F162B436E3926730E7196D99D44D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1559
Signing time:             Sat 23 Aug 2025 08:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:23 +0000
Files and hashes:         1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=)
                          2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: V9/Ebob0xm3k1zDnxVkP8TtyAetBqVktHiM3Cp0HOYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:62:b4:36:e3:92:67:30:e7:19:6d:99:d4:4d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Aug 23 08:00:23 2025 GMT
            Not After : Aug 24 08:00:23 2025 GMT
        Subject: CN=c84f806706637a4541cb58b5c139e119602e49a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:90:d5:13:e4:9b:bb:1a:c2:51:9a:25:15:
                    17:a3:8b:bf:2e:bb:79:c6:33:b3:ba:a2:db:8e:36:
                    0f:39:22:f1:53:34:3b:d8:94:d0:35:9f:1e:05:aa:
                    8f:c7:e0:c2:28:f1:47:8a:38:8f:a7:c1:ed:17:b3:
                    c0:23:5b:42:34:92:03:12:95:44:6b:12:97:3e:a4:
                    d3:c2:f3:91:2a:0a:89:35:33:b9:c1:a1:9a:9b:fd:
                    a8:ff:c7:c6:9f:44:12:3c:39:3f:41:4c:e5:ea:76:
                    c7:09:27:bb:48:59:03:72:f8:83:6e:b8:3a:70:0a:
                    b7:e8:6e:2a:c2:a6:20:23:39:eb:c2:15:10:fb:38:
                    23:0e:c1:da:87:12:dc:52:58:cb:c0:b6:a8:bb:be:
                    0d:c6:0a:51:8c:1a:98:e3:a4:8c:1b:6e:65:22:8c:
                    31:da:1e:fd:38:ff:e3:4a:b8:cb:bb:5f:65:cb:b3:
                    f2:77:6c:f9:69:5c:ae:41:a9:82:7a:c5:3b:d2:91:
                    eb:04:b6:c9:56:ea:1b:f0:59:b1:84:8d:3a:33:4e:
                    27:0e:7f:5f:6a:b1:5c:c5:ba:c2:c4:c3:2e:18:1e:
                    e7:7c:bc:ba:42:48:7f:40:c7:19:4e:40:0d:53:8c:
                    4d:2f:4b:bb:94:71:b8:44:78:94:d6:6f:e5:ba:fe:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4F:80:67:06:63:7A:45:41:CB:58:B5:C1:39:E1:19:60:2E:49:A4
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:cf:51:51:46:ed:c7:20:ec:74:cb:37:64:17:12:72:56:
         f8:f0:19:ad:90:27:b1:ca:13:7a:55:f4:73:65:98:47:09:0e:
         bc:71:51:c3:39:03:31:60:32:85:d4:3b:c6:a1:e5:4d:8c:12:
         3a:a4:71:68:b2:3f:23:de:09:fc:7b:98:87:b9:18:e3:3f:9e:
         07:c1:f6:5f:c8:ab:a8:6f:16:7a:b5:75:89:e7:11:05:91:9a:
         ac:a4:69:7f:51:5c:d1:df:a6:43:c8:73:c0:13:20:83:07:c6:
         0c:dc:c2:0b:2f:4e:dd:c6:0f:5e:c1:b8:54:bd:0b:16:e5:ea:
         eb:28:e8:71:a9:f6:12:b9:b3:8f:5b:e7:fd:93:5a:29:36:63:
         ee:97:64:d3:0d:6f:2d:5a:36:1b:c1:61:58:69:d6:7f:da:18:
         40:38:c4:42:ac:71:18:5c:47:a6:fa:6c:4f:6e:d3:2b:93:43:
         dc:ac:01:45:bc:03:14:76:61:ae:95:c4:da:18:de:10:37:00:
         4d:5b:8d:d8:64:d4:86:26:fc:c4:b9:54:c9:d5:a1:30:8d:ee:
         f8:72:a4:0a:ef:4b:72:03:ba:b8:b2:39:de:a0:61:ff:a2:b3:
         f8:ac:65:1b:ba:63:50:70:cd:ab:0b:de:0e:d3:d5:b5:00:ca:
         45:c0:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:12 2025 by rpki-client