Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          9sAiMjJ+srLOBaLy0xh7BIKbp4isIyUTTIC85RcYmig=
Subject key identifier:   AE:03:80:BF:3E:E1:3D:D9:A6:70:BB:7C:8D:70:26:6D:62:F2:C1:5F
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       0198D73AD7AD977BA21C263A07B6E39393E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          0F39
Signing time:             Sat 23 Aug 2025 14:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:14 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: JWZJ6gORcjPOdj+B3s3b/t4cCAypvwf6PxlJf3/6ijM=)
                          2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
                          3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
                          4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3a:d7:ad:97:7b:a2:1c:26:3a:07:b6:e3:93:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Aug 23 14:00:14 2025 GMT
            Not After : Aug 24 14:00:14 2025 GMT
        Subject: CN=ae0380bf3ee13dd9a670bb7c8d70266d62f2c15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:eb:a2:ba:d4:5e:fa:da:cc:a1:9d:f9:de:
                    23:f2:ff:bc:73:5f:8a:af:b9:99:d6:c3:e4:0f:6b:
                    bb:bd:20:1a:74:99:2b:5f:7e:2a:98:fd:40:03:69:
                    d1:7d:3b:e5:13:7e:fc:08:75:6b:8a:71:b4:4a:fc:
                    e0:4c:ca:6b:bb:28:38:c6:fb:45:df:1e:a3:1a:f8:
                    f1:97:5a:3b:2c:b4:5c:44:a5:a8:c5:fe:f0:d6:8d:
                    8d:73:5a:95:4e:1c:49:55:16:de:e5:02:ef:65:35:
                    c6:88:b1:80:31:b6:62:57:48:25:4f:87:4e:08:68:
                    62:f5:aa:68:45:f4:a2:ea:56:7b:83:8c:1e:ef:9d:
                    d5:e4:90:f6:bd:7e:4a:b6:10:a1:9f:ca:3c:2a:fc:
                    9f:16:c6:61:2b:03:c4:2c:1d:1c:95:70:ad:3e:0a:
                    29:8e:9d:6a:d5:eb:4f:34:47:18:8c:d5:64:e3:e9:
                    f2:98:ec:e8:20:1e:a2:a3:bd:85:29:07:4c:ed:cc:
                    2b:82:95:3d:f0:e5:d9:c1:f5:2d:a8:ae:90:8e:f2:
                    5f:e4:a9:03:e9:8c:df:dd:81:1c:fc:09:e9:58:3b:
                    d8:2f:f0:bf:7c:eb:e9:a0:f5:2c:21:db:53:10:35:
                    dd:22:bc:fa:f8:dd:1f:33:bd:af:05:b5:e4:6d:33:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:80:BF:3E:E1:3D:D9:A6:70:BB:7C:8D:70:26:6D:62:F2:C1:5F
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:8c:f7:bc:be:cb:7e:dd:c6:09:65:44:c7:76:2d:75:73:a8:
         fd:27:1c:b3:c0:2b:45:12:d4:82:8b:d6:0f:cd:da:51:a8:c3:
         4a:f8:7f:93:ef:37:78:bf:3a:17:99:8f:19:2b:44:1e:8a:03:
         55:6f:1f:0f:1b:a3:00:85:57:b4:04:6e:71:76:3f:67:b9:f6:
         da:c7:4d:ac:be:33:e7:80:10:68:11:2a:fe:1b:d0:de:b8:67:
         4a:06:ae:c7:ef:01:2c:32:f1:28:19:71:22:c4:f0:0b:d4:a2:
         38:3f:c7:33:ab:a4:40:4b:ca:a7:e1:1c:8b:b2:a7:8e:57:f6:
         00:32:08:2c:ca:6d:41:11:ae:10:c7:8e:ad:88:9d:e2:40:c6:
         54:70:90:53:c1:18:06:45:28:3b:41:c6:34:b0:92:25:c2:25:
         e1:d7:82:b5:84:bb:1b:66:d6:12:4e:e0:87:0c:36:77:a3:56:
         c7:dd:4a:d6:f1:e4:b9:9f:f2:1f:4b:b9:25:21:4b:b8:32:96:
         80:d0:a8:97:ee:93:d5:7b:46:2e:2d:fa:0a:bf:97:ea:52:d8:
         52:b4:de:92:0c:28:d8:31:d8:ad:9c:49:5c:be:74:7e:92:d9:
         ea:36:73:e4:2e:47:60:79:32:7e:b1:03:81:43:27:bb:50:fc:
         84:3c:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:10 2025 by rpki-client