Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File:                     Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier:          k0axEkVcQQQNIqmmgo9qpb3HLh3IKWpjjBrTy18Hfo8=
Subject key identifier:   1B:0C:1F:D2:26:33:55:20:AC:00:09:E9:FA:9B:24:F7:BF:E1:2C:30
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer:       /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial:       0198D583E6A4221063CE6F949121CEF59A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number:          033C
Signing time:             Sat 23 Aug 2025 06:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:47 +0000
Files and hashes:         1: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: /nIZ2Dp3L5raTNonDzJLyy0E6ZpfFD5V9KenqtjZ1cw=)
                          2: g8O-LxBDxPemkfnWTYdHDXGwokQ.roa (hash: 62+5Rr40UYD7j7xrWfzQh2M5veljI3mG5KafCJqpdBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e6:a4:22:10:63:ce:6f:94:91:21:ce:f5:9a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
        Validity
            Not Before: Aug 23 06:00:47 2025 GMT
            Not After : Aug 24 06:00:47 2025 GMT
        Subject: CN=1b0c1fd226335520ac0009e9fa9b24f7bfe12c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:24:44:41:e4:c4:84:4a:f4:db:66:3a:9e:
                    b8:0e:3c:91:d5:01:e3:2f:52:2a:17:98:e6:7d:98:
                    14:3d:b5:de:6d:65:08:4a:73:74:13:3e:df:af:fd:
                    54:11:a2:ee:5f:e9:6f:3e:d3:c6:cf:9b:13:77:29:
                    cf:a9:d8:54:bc:14:ef:f6:8b:ff:32:5b:9c:bb:62:
                    e2:1a:c8:2d:ab:3f:82:0a:d7:b7:e7:a7:19:95:5f:
                    67:7a:11:65:9d:bc:f7:ad:1f:58:76:ab:5f:e4:19:
                    54:93:a4:56:b8:f0:5e:d7:e6:6d:be:a7:ef:b6:e6:
                    60:f0:7a:aa:d7:9a:31:3e:4e:df:4f:65:e9:ae:b2:
                    d5:2d:98:99:28:34:42:4c:84:84:0b:00:53:87:b5:
                    b2:05:54:34:db:6c:86:9b:3f:05:7d:c0:d7:0f:78:
                    d2:c4:9d:a8:5f:7a:fc:17:07:07:32:ae:8d:5e:37:
                    bd:29:76:c4:22:3d:31:56:df:dc:31:c7:67:ab:3c:
                    09:94:a7:a9:d0:9b:ba:43:6d:53:3a:42:3e:b3:11:
                    c0:b7:9c:d7:7a:6f:64:25:81:44:0a:17:7f:b1:1f:
                    e3:db:81:d9:77:2c:c0:bd:2f:f2:0c:d7:83:2a:52:
                    95:d8:d0:78:ba:fe:b9:66:75:7f:ae:94:ca:00:53:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0C:1F:D2:26:33:55:20:AC:00:09:E9:FA:9B:24:F7:BF:E1:2C:30
            X509v3 Authority Key Identifier:
                keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:8a:38:3b:23:a2:d9:ea:26:75:ee:64:e5:94:ef:56:a4:
         a8:90:0a:10:a0:3b:91:a7:c5:53:4c:e7:f2:8d:67:72:70:53:
         bc:09:d6:17:d3:dc:4e:f2:19:5a:55:d4:0b:4c:ad:c6:8e:92:
         86:8c:c4:2d:7a:f0:c7:ce:2f:a8:16:db:e9:c1:9d:60:b3:9f:
         db:34:04:01:34:90:02:8f:1b:09:3e:ba:d4:eb:32:f3:90:61:
         c3:6a:65:42:73:f4:7e:7d:63:01:09:0d:d0:b3:be:15:04:49:
         fb:bc:a0:b6:34:b6:66:dc:5b:2b:58:95:b6:fd:4e:12:1e:26:
         74:f7:f6:86:57:5e:2c:51:eb:53:74:c9:22:aa:e2:f1:1f:73:
         fd:00:44:cc:8a:5a:7e:9d:77:b5:a1:64:b6:c7:2a:bf:3c:93:
         c3:fc:9b:45:cb:e5:0f:a2:47:f6:17:7e:e5:60:fe:9e:97:49:
         1f:9c:f6:9d:20:77:c6:e1:e3:c4:bd:ca:3c:35:c6:65:76:7e:
         2c:c3:4f:cd:14:c2:93:33:2f:a1:b7:5d:46:a0:8b:d7:ee:8c:
         d0:de:d9:03:c1:76:6f:89:72:63:61:b9:e7:31:fd:b1:9b:93:
         d7:56:18:f6:14:6c:0c:8b:a5:dd:0c:26:f4:de:e9:5b:13:a0:
         ba:6a:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:52 2025 by rpki-client