Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          lCqpRsXwB3krfm973Xk1zLockYIyr6NJ2SXxKfl0D2Q=
Subject key identifier:   BD:D4:13:89:C5:22:83:F5:5E:F8:82:D5:E3:95:A6:B4:BA:01:DB:51
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       0198D4049639ABB804C1FBE7C5A12B159920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          0F0D
Signing time:             Fri 22 Aug 2025 23:02:06 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:06 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:06 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: V3xEc203hMtUb3Yp2yIpt/O8ng+ylh17+6O8SASAt24=)
                          2: Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa (hash: LlENaZaigA7zDM+CDaj8xvJ6snfd5fy4W4jHwPOvoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:96:39:ab:b8:04:c1:fb:e7:c5:a1:2b:15:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Aug 22 23:02:06 2025 GMT
            Not After : Aug 23 23:02:06 2025 GMT
        Subject: CN=bdd41389c52283f55ef882d5e395a6b4ba01db51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:a1:ae:a0:61:bb:86:47:18:5d:7c:13:9d:
                    36:ae:37:40:a7:50:8c:64:06:ed:6e:17:62:7e:af:
                    fb:b1:82:dc:1c:13:2e:8b:df:a6:48:81:0b:99:f3:
                    3a:1d:d7:5e:cc:04:ff:52:42:06:4c:d6:09:77:89:
                    bc:1d:46:de:98:97:e6:cd:0e:64:ff:4c:e7:5d:fb:
                    5c:34:5a:ae:45:bd:69:a1:fb:1b:ae:d3:a3:46:56:
                    e1:80:8a:7f:57:83:cc:79:9d:ef:5b:ed:dd:72:47:
                    35:21:b4:c6:3a:20:33:c6:e9:0f:60:fc:e7:6f:37:
                    4c:d1:46:fd:9c:2b:30:e4:39:ef:b9:16:db:64:8f:
                    03:f1:bd:c9:7a:52:d7:ca:0e:08:56:3c:95:d9:93:
                    d3:3c:b8:a8:f3:43:cc:7e:c2:62:7b:0a:d6:bf:0e:
                    20:5e:ae:09:09:ed:43:d9:c4:4f:17:97:77:08:c6:
                    1e:44:4a:3f:f4:b5:08:f1:1a:6f:86:a8:ed:32:79:
                    dc:29:82:4c:5e:85:62:5a:0a:c2:17:ae:cc:40:ff:
                    52:fb:30:1e:bf:be:59:c4:84:25:92:95:d2:c8:1d:
                    3e:71:2f:a9:94:01:06:a7:00:e2:1e:56:6c:6e:7e:
                    0d:1d:16:24:a8:30:e6:a7:9c:fe:ab:a2:9b:64:46:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:13:89:C5:22:83:F5:5E:F8:82:D5:E3:95:A6:B4:BA:01:DB:51
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:49:ae:33:ed:f8:b6:18:7d:04:5d:e9:66:9a:f1:ba:ae:59:
         d8:74:9c:c3:d2:9e:16:f3:3e:93:ca:3d:88:f4:92:d5:e0:21:
         00:72:e4:79:38:7b:18:76:cc:66:1a:17:91:75:a3:b6:ee:b4:
         bc:4e:ef:5b:29:12:c7:40:72:2b:ba:2b:71:9e:77:7c:f4:a7:
         f5:59:9b:e8:7f:f4:f1:37:d5:d8:c7:47:f6:d7:1f:7e:f7:01:
         79:62:4f:cf:b3:87:d7:fc:93:12:0c:89:cc:92:16:62:60:76:
         58:93:26:d0:ae:80:c8:d8:f5:41:88:28:3e:7f:b5:6f:d8:07:
         12:7c:3d:d0:ce:9c:88:a0:1d:61:52:58:04:c0:9a:be:d3:21:
         17:dc:31:f4:ce:ba:a6:d1:d6:f4:5b:93:0c:73:78:f5:76:fe:
         cc:3c:31:2b:e0:74:4f:2b:1a:94:7f:78:16:70:14:43:a9:b0:
         76:d1:a4:49:74:88:a4:5d:33:14:45:6c:0b:c2:e6:7a:89:0f:
         df:99:37:1b:8b:f2:0b:5d:f4:67:cb:e2:e2:4b:79:89:f3:3e:
         7b:04:5e:d4:d8:c0:88:d9:65:16:4d:91:3e:5b:35:6b:0d:28:
         7f:8d:aa:bd:9a:6b:ba:39:bc:07:56:dd:3a:a9:e8:82:fd:20:
         a7:7a:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:43 2025 by rpki-client