Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File:                     1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier:          4RogP0uZWj0yRV1mNhElWbUWO/tpK+LrOru3ZBZJdyI=
Subject key identifier:   01:05:0A:B6:F7:3B:43:40:AB:56:AC:A1:AB:D9:59:A6:17:30:2A:4C
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer:       /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial:       0198D4E04E9E58D1DDE2694D21ECAFE1A1E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number:          0D1F
Signing time:             Sat 23 Aug 2025 03:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:06 +0000
Files and hashes:         1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: tyG9xHEZ/7xmyNO1LzITLLOgeSG4BDBrwRvzK3fOe3o=)
                          2: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (hash: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:4e:9e:58:d1:dd:e2:69:4d:21:ec:af:e1:a1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
        Validity
            Not Before: Aug 23 03:02:06 2025 GMT
            Not After : Aug 24 03:02:06 2025 GMT
        Subject: CN=01050ab6f73b4340ab56aca1abd959a617302a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:22:e5:a9:10:da:88:1b:49:e5:9e:89:72:
                    0c:4b:a1:97:05:40:75:bf:dc:cd:b3:07:87:63:17:
                    b9:42:27:f8:bb:2c:9c:30:46:00:c4:03:d7:5f:b5:
                    1f:e5:48:f5:73:9f:f6:2c:ed:8b:85:89:94:32:e8:
                    47:32:9f:6a:5d:dd:4c:be:86:bf:c3:00:2b:5f:0f:
                    c4:03:3b:05:62:04:ed:da:a0:25:25:3e:80:57:00:
                    50:b4:a3:59:4e:29:af:23:ff:3f:57:c0:7a:ae:ea:
                    0b:57:28:be:3e:13:86:0b:a7:a7:04:a7:9c:40:e1:
                    70:ac:1d:c3:bf:f3:b7:bd:a5:78:11:3d:aa:d2:41:
                    6c:4b:44:13:60:1c:f3:8a:1a:b8:2c:ee:1d:11:b8:
                    54:44:84:d1:48:d2:5d:ba:5d:1b:c7:ba:23:c8:bc:
                    20:3e:a3:43:d3:c7:b3:e3:84:ac:57:68:e6:12:7c:
                    39:b8:e3:c4:ee:cc:1d:d7:1d:9c:26:1f:5c:d1:36:
                    04:33:76:d2:d3:47:eb:c2:be:06:c9:43:9f:db:6e:
                    83:e1:6c:e9:26:4a:4d:9c:05:14:34:6c:e0:ae:e0:
                    bf:2a:4a:31:02:9f:1c:99:19:54:4b:79:45:4f:29:
                    4c:18:8e:d3:2f:64:72:07:e0:7c:3c:31:f0:76:23:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:0A:B6:F7:3B:43:40:AB:56:AC:A1:AB:D9:59:A6:17:30:2A:4C
            X509v3 Authority Key Identifier:
                keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c2:dc:18:91:4c:12:b0:15:3e:06:39:46:0b:24:48:0f:ab:
         41:51:7a:c1:40:c3:fa:50:b1:ec:b9:c3:28:c1:00:1c:39:d4:
         24:d2:70:98:7d:d0:64:64:b2:40:cb:7c:db:03:f4:e7:3a:84:
         8c:b4:f2:84:12:71:8a:d9:6e:42:1e:81:19:61:79:0c:9c:7f:
         78:fc:aa:6b:21:23:1e:fb:ea:bf:c8:16:07:ae:ad:4c:fe:34:
         27:61:57:da:6e:9a:e1:4e:ea:f0:c7:83:6f:59:e4:a2:c9:9e:
         e4:b4:ab:77:f9:22:5d:ff:e2:69:21:6b:3c:42:fe:ff:b0:a0:
         6e:57:22:36:50:d1:ba:ae:01:31:68:f4:a8:87:bc:75:82:1d:
         41:3c:57:ed:07:f0:f6:69:08:1c:88:f6:06:1e:b5:5a:e8:77:
         92:34:73:5a:62:46:34:2c:d8:19:6b:88:ae:30:03:db:70:cd:
         32:5c:57:19:fb:5c:c4:1e:b9:a2:d4:d4:4b:c4:97:75:75:e9:
         ac:0c:a1:87:57:fa:dd:95:d8:6e:e9:db:a2:d5:43:ab:8a:db:
         40:f8:8f:6f:ac:55:77:2a:bf:82:8c:38:a6:b3:1a:0a:53:a5:
         b6:61:60:b3:50:24:4d:41:85:86:1f:c1:40:4a:06:2c:58:80:
         bb:02:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:06 2025 by rpki-client