Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          Eg6pCzTvP0uIkpHFCyHY4fozQdLPPD0SJYcAmxU9fBo=
Subject key identifier:   CA:FD:BD:93:0F:DE:23:08:FE:33:CF:EE:C4:0A:66:EA:02:0E:4F:F3
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       0198D47323B31193141DA8623CC6E5B223FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          08B0
Signing time:             Sat 23 Aug 2025 01:02:52 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:52 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:52 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: sCkb7n3+EGOZP3nyVoZIGcNyAP+cAxoiFl09PhMyzBU=)
                          2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:23:b3:11:93:14:1d:a8:62:3c:c6:e5:b2:23:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: Aug 23 01:02:52 2025 GMT
            Not After : Aug 24 01:02:52 2025 GMT
        Subject: CN=cafdbd930fde2308fe33cfeec40a66ea020e4ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:b4:ce:4d:72:9b:2b:c7:45:63:5d:b0:b3:
                    a8:71:4f:a1:b8:f9:07:1a:f1:e9:13:a8:63:b8:ed:
                    b3:9d:e4:e5:41:a9:20:ae:11:49:0f:a4:c0:c3:2e:
                    1b:e1:d1:e6:9c:fa:ea:b9:d2:51:a6:64:fd:c9:0b:
                    18:1c:20:8d:fb:ed:1c:cd:ad:37:0e:c8:25:2d:4d:
                    3d:1b:5a:50:7f:9d:52:68:42:fd:db:57:c5:12:e6:
                    30:62:69:d4:4d:42:65:ea:21:19:a2:46:97:e1:03:
                    07:92:14:02:15:60:fc:f4:c1:f9:ab:68:50:9e:cc:
                    bf:31:93:f1:a2:f0:6a:7b:68:bb:50:10:f2:e4:db:
                    d9:0b:1a:e8:40:dc:ff:ef:a2:f5:16:a2:41:78:96:
                    32:30:f9:f3:dd:28:e2:b0:cc:67:ab:2c:8b:35:b3:
                    ff:f0:be:9b:dd:33:fb:db:06:d1:d4:2b:78:25:28:
                    e5:e4:ca:b0:17:3e:46:60:69:78:c1:6a:10:bd:a5:
                    2b:0a:13:43:cc:e9:1d:e7:3f:70:bb:e9:5d:25:67:
                    d5:e9:09:8b:c8:23:2a:69:00:a7:cd:0b:5b:bc:a5:
                    15:47:82:fe:c0:22:dc:f6:d0:12:e4:88:3e:ea:0b:
                    e6:f2:af:27:26:a4:b6:e1:9f:4a:65:a9:44:37:c9:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:BD:93:0F:DE:23:08:FE:33:CF:EE:C4:0A:66:EA:02:0E:4F:F3
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5e:fb:96:4d:b0:c6:5d:9b:8f:a5:b3:7f:07:53:ba:c5:56:
         20:5d:15:6c:18:52:99:8e:25:8c:cb:4b:5c:0b:24:4e:1f:00:
         a4:cc:83:33:93:3e:5c:7f:c8:d0:75:dd:96:f9:ca:68:a5:0e:
         5e:61:7f:6c:3c:21:e2:d1:bc:1a:e9:67:cd:65:c4:eb:9a:d2:
         96:04:42:7f:e5:cb:ea:50:60:05:f1:6a:1b:e8:cd:02:ea:b2:
         ab:d3:ba:f2:6d:d6:43:a5:b0:0c:c2:33:d0:cf:89:58:8a:29:
         38:1a:fe:ba:8e:fe:23:89:72:fb:88:96:4e:c2:c4:f6:26:7d:
         88:94:09:31:db:d4:12:e5:dd:cb:87:ad:68:b6:85:a2:36:54:
         95:e6:ec:66:45:06:9f:35:97:a0:37:7e:71:44:a4:de:e5:f0:
         86:c8:e7:80:1e:13:d9:4a:29:c9:d8:d1:42:b2:7b:5d:84:a0:
         74:82:6c:44:e1:ea:1b:97:0c:90:32:6d:f8:f2:65:10:36:43:
         56:59:88:67:fd:2d:7b:35:19:c6:1f:92:78:72:f1:0d:ec:57:
         19:d8:62:eb:34:06:44:8b:6a:d9:12:a0:f2:ce:ab:c5:0b:36:
         1e:bc:0a:12:37:22:db:e1:48:27:e8:a3:f0:58:4e:83:28:e2:
         73:73:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:51 2025 by rpki-client