Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File:                     jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier:          MBcMkW1PnbULQkHSG1oMgHqgX31+VjZT7zIQYcGwRIs=
Subject key identifier:   0A:41:50:0A:76:B4:7E:BE:A1:87:3F:61:79:96:B2:04:68:ED:54:02
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer:       /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial:       0198D6CCF9F840B71EA434ABADD488D5ABF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number:          10F0
Signing time:             Sat 23 Aug 2025 12:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:14 +0000
Files and hashes:         1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: hTl3syyYOW/vxTDzL5LVxAo2C56AXYICJ5m/IxXgWLY=)
                          2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:f9:f8:40:b7:1e:a4:34:ab:ad:d4:88:d5:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
        Validity
            Not Before: Aug 23 12:00:14 2025 GMT
            Not After : Aug 24 12:00:14 2025 GMT
        Subject: CN=0a41500a76b47ebea1873f617996b20468ed5402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:30:37:4c:08:50:0f:5b:65:f0:17:12:95:
                    33:8c:2c:0f:cd:5a:bc:0c:1b:58:c1:27:84:fb:82:
                    8e:26:8e:7e:d2:12:65:8c:c9:5b:c8:6e:37:c6:84:
                    d9:d9:a6:d0:11:78:81:07:9c:cc:51:6a:59:f4:8b:
                    72:3c:4f:1c:a9:9e:29:cd:36:6e:6b:cf:61:e2:79:
                    ca:36:5d:fc:c1:56:80:b0:24:03:df:00:97:55:b9:
                    8f:74:5e:31:bc:7f:8c:28:5f:37:96:4f:24:4a:90:
                    75:51:16:bb:2d:20:46:50:6e:4b:4b:69:f5:ba:d6:
                    a4:36:33:dc:42:db:17:23:c7:09:06:4c:9d:7a:c2:
                    18:54:48:df:bf:b9:c8:74:a1:41:c4:4a:97:9e:c8:
                    dd:20:b0:45:ef:88:d7:d5:8b:a1:ef:f8:55:19:35:
                    8f:ad:e8:77:70:0b:96:95:5a:5c:44:8c:17:52:6a:
                    67:56:19:f1:9e:1c:99:56:89:61:22:bc:35:83:62:
                    cd:20:50:c4:ab:03:70:df:19:44:31:6e:12:10:e1:
                    5a:49:d9:8d:1b:e2:d7:d6:fa:f1:ce:2d:2d:af:66:
                    95:e0:35:3f:f7:a7:79:8e:1e:fc:c9:2f:31:ae:8b:
                    99:56:d6:e8:ef:f4:1f:32:3c:30:e8:f1:bd:5f:40:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:41:50:0A:76:B4:7E:BE:A1:87:3F:61:79:96:B2:04:68:ED:54:02
            X509v3 Authority Key Identifier:
                keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:14:24:a5:6b:37:94:9c:f1:9e:77:d9:e8:5e:30:87:a1:
         62:78:80:35:3d:57:4f:dc:5f:ec:75:20:1d:45:f9:4f:4b:61:
         a6:f2:42:7b:a8:a5:dd:a0:ad:bd:3d:58:77:c1:b7:3f:6d:bb:
         a4:5e:4c:b4:3a:38:3a:67:92:f0:e1:da:c1:de:1f:54:71:6f:
         55:9a:ae:0e:06:9d:8c:10:1b:44:db:73:86:d3:a7:6a:c1:e2:
         6c:91:8f:a6:be:06:82:37:88:fd:3a:c8:be:b4:a2:f1:d1:b8:
         94:b0:cd:35:c9:6b:af:f1:d4:e7:58:e7:14:49:c2:a9:a0:66:
         5e:73:fd:e7:3c:a9:10:f5:a0:1f:02:50:5f:c8:94:75:28:25:
         6f:66:a7:3d:61:73:d6:a5:68:0b:37:7a:26:61:19:a1:5a:97:
         f1:42:06:ca:96:62:dc:57:bf:1f:fb:86:01:8e:94:54:24:15:
         ab:b8:32:0f:93:9e:fc:29:a0:68:75:58:2a:c0:2b:6d:cf:06:
         c1:05:e3:73:66:ce:f7:77:b6:d7:7f:da:de:b5:9e:a7:83:45:
         14:97:1f:de:35:33:c6:22:27:7b:43:3b:e8:62:81:60:e4:1b:
         01:0f:a1:0f:49:37:e5:da:0a:79:19:e4:7e:b0:9d:0e:19:fe:
         13:4d:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:55 2025 by rpki-client