Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File:                     1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier:          OxlFI07CqHqzndnauoRlUp6TZ8CBpy4xkpv7K8N4HR0=
Subject key identifier:   32:33:B4:11:48:5E:6D:47:14:B2:42:54:28:D9:0B:17:97:2C:37:A4
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer:       /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial:       0198D5F184C166CF3BB97927B3901805D71B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number:          1295
Signing time:             Sat 23 Aug 2025 08:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:31 +0000
Files and hashes:         1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: WE0iqn/COwutHxAzDQYM85eAlIJ4foRyy4K0ova44G0=)
                          2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:84:c1:66:cf:3b:b9:79:27:b3:90:18:05:d7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
        Validity
            Not Before: Aug 23 08:00:31 2025 GMT
            Not After : Aug 24 08:00:31 2025 GMT
        Subject: CN=3233b411485e6d4714b2425428d90b17972c37a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:d1:f3:d8:7c:78:f5:06:c6:b3:b8:85:b4:
                    b5:5d:e0:43:0d:5a:a7:cc:e6:22:14:b5:32:d6:3c:
                    f6:30:09:48:43:a3:77:4f:32:5f:19:88:6e:8d:f1:
                    c0:56:b8:72:1e:cd:7e:c6:fb:03:c9:f8:1f:d5:2b:
                    56:61:5d:9a:39:f9:63:1f:81:67:cc:b9:18:ee:a4:
                    ee:72:46:44:38:d8:46:74:eb:10:7f:c7:96:ad:6c:
                    e2:92:11:21:ae:ec:3a:ff:31:2f:23:44:84:ee:e1:
                    2e:24:f4:cf:80:01:e6:d4:b6:da:06:cc:80:45:9f:
                    dd:c6:2e:0a:5a:4e:a5:67:04:a2:d6:13:ba:a9:13:
                    b1:b1:bc:44:96:6f:eb:3d:f4:05:b6:02:cb:96:c7:
                    ab:89:2f:77:bb:da:f7:73:9f:3a:fc:e4:00:8d:d2:
                    07:d6:9e:07:9f:86:cc:58:af:38:ec:8e:34:5f:d1:
                    1c:f5:fe:cc:ea:55:bf:27:90:c0:4c:70:54:7e:23:
                    6c:58:11:68:97:88:50:52:7d:d4:11:38:86:b8:66:
                    af:36:81:73:e7:eb:1f:26:cb:6e:63:c1:32:a1:3b:
                    01:02:0f:cb:12:d7:b2:3f:69:9a:7a:5d:8a:9e:af:
                    e3:0d:33:51:ef:d8:4b:f7:66:6b:e8:6a:3f:7d:e0:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:33:B4:11:48:5E:6D:47:14:B2:42:54:28:D9:0B:17:97:2C:37:A4
            X509v3 Authority Key Identifier:
                keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:ea:96:72:87:8c:e5:00:7f:a7:e8:49:c6:93:3b:0f:c8:
         6c:47:5e:23:59:99:a8:92:f8:62:f2:0c:f3:e8:8e:a1:dd:5c:
         44:c5:98:87:59:3b:f2:9d:36:3a:da:d6:95:27:f3:96:db:4f:
         37:c1:39:87:9f:ef:d9:4c:31:7b:fb:3a:3a:76:53:a4:a6:4c:
         59:bf:6e:de:bf:3f:b6:69:5e:a9:83:56:7d:99:66:ea:e6:d2:
         cc:5f:9c:7d:61:36:d8:7a:df:bb:82:58:09:48:5a:4b:31:80:
         92:61:26:89:5b:ee:76:33:f3:14:54:72:88:e1:39:fc:ce:ae:
         92:9e:ab:1c:ec:76:e2:d0:aa:d4:ea:16:80:f7:91:21:53:1e:
         fd:80:06:12:f3:a1:88:bd:40:aa:27:53:3d:e2:a8:e9:bf:93:
         c5:4b:b0:7c:29:dc:cc:82:33:0f:71:ab:16:fc:96:1a:63:48:
         76:f5:2e:57:61:96:d9:a7:1b:ce:bf:d1:0e:8c:c2:98:47:cb:
         57:ea:67:c7:08:2e:ca:82:4c:d5:77:ca:35:02:05:75:0b:c8:
         ab:69:3f:1e:2e:2b:bd:3a:ee:66:64:1b:6a:af:ee:ab:cd:8a:
         54:4b:bf:f9:93:7c:ef:a7:52:0b:86:52:b8:70:21:b2:83:9a:
         dc:f0:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:03 2025 by rpki-client