Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File:                     1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier:          P1wrFTvLUkk6gF4C9/FFmArJYwLtX8Ru/fsv2r7t8iE=
Subject key identifier:   20:3D:9F:AC:4D:2F:CE:59:43:89:DA:EC:53:F0:E8:54:D1:90:BF:8F
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer:       /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial:       0198D5F1A0CE46BE25F714E3D74C1C6F5A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number:          0A95
Signing time:             Sat 23 Aug 2025 08:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:38 +0000
Files and hashes:         1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: W+Do3EUSFa7d7X7ieAZa/hNnssXD1zINaSnjDXgmI2U=)
                          2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:a0:ce:46:be:25:f7:14:e3:d7:4c:1c:6f:5a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
        Validity
            Not Before: Aug 23 08:00:38 2025 GMT
            Not After : Aug 24 08:00:38 2025 GMT
        Subject: CN=203d9fac4d2fce594389daec53f0e854d190bf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:a2:f9:dc:3a:d7:b1:1b:5f:4b:a0:1e:a3:
                    39:9b:bc:1f:b1:9a:1d:be:4c:a0:7a:aa:58:79:44:
                    93:1c:78:a7:87:07:c8:a2:11:45:e6:b2:1d:f4:16:
                    ed:0e:a2:94:2b:cb:59:a2:8b:00:10:c4:84:36:52:
                    b4:70:e8:01:01:9e:46:d0:8d:c7:26:6a:34:58:79:
                    f5:14:a3:d6:67:ce:a2:81:cd:56:d9:54:f1:0d:ed:
                    a3:cf:d8:16:8e:7b:08:33:fe:a6:e0:48:84:3f:12:
                    60:f5:32:d5:ac:c5:36:94:6e:4b:91:76:28:cd:f8:
                    ab:dd:1d:a3:9e:bf:de:66:84:aa:ac:66:cb:39:b0:
                    ca:47:ac:5b:13:16:8e:ce:aa:dc:3e:71:9e:bf:ed:
                    f4:7b:a3:11:8a:0a:32:22:0f:fc:3a:78:34:4a:50:
                    df:32:c7:d1:58:17:31:78:e0:d4:98:44:72:5f:e6:
                    5c:a8:e7:97:79:2a:64:b6:c4:22:dc:ff:70:06:7d:
                    89:f5:02:f6:c9:e9:a3:41:46:68:23:14:0b:12:93:
                    96:b0:14:58:db:26:22:d2:67:b8:f2:4f:68:da:d8:
                    64:25:99:14:d4:47:74:27:dd:aa:18:9a:10:35:18:
                    e3:b8:ad:d3:72:87:f7:d0:50:01:56:78:9d:e2:95:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:9F:AC:4D:2F:CE:59:43:89:DA:EC:53:F0:E8:54:D1:90:BF:8F
            X509v3 Authority Key Identifier:
                keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:69:b0:f3:64:a9:7a:34:e0:bf:70:11:a2:cb:6d:dc:bb:
         fd:a5:75:83:75:14:3e:4d:46:96:9d:ea:d3:3c:57:b4:12:97:
         33:55:2e:69:2e:68:9a:c1:b6:4e:fe:73:dc:a3:57:67:69:f7:
         11:16:14:62:40:16:6b:b1:e4:8c:c0:6b:c1:ee:5a:39:f1:bb:
         56:0a:03:4a:c9:40:56:53:ed:a8:46:e2:16:ce:72:d0:d7:94:
         39:1f:d3:e3:1f:ea:eb:e9:60:c3:72:9b:05:ec:ae:d8:41:2c:
         e3:3d:25:86:14:29:f3:85:4c:65:53:44:87:76:78:15:ec:c1:
         b3:e8:f0:41:dd:59:a3:7b:44:5b:5d:cd:ac:56:8d:d0:52:e0:
         58:09:a6:ba:ba:8a:6b:8c:85:96:92:1c:63:93:06:dd:9b:83:
         96:41:42:4f:be:a7:fe:57:e8:71:84:ad:7f:3d:25:04:35:78:
         84:e4:df:f9:c0:72:20:19:99:c6:2a:9c:3a:a8:16:08:dc:f0:
         af:3a:cf:9b:bc:8a:99:96:c5:45:62:3a:da:9b:a8:60:92:9b:
         eb:0b:43:4f:a1:d3:ae:b1:f5:0e:36:8e:5f:c4:d5:d0:86:46:
         25:9b:ee:58:2e:91:cc:69:a3:4b:cc:c8:36:8f:c9:d5:ce:92:
         8d:35:05:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:49 2025 by rpki-client