Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
File:                     aBzk2Zuo67kaeUq_y90VveCcmfg.mft (raw, json)
Hash identifier:          sePOERkSEANuvvjBJmg4+GUlJuxjS4Cr6pwCzsofbu0=
Subject key identifier:   51:4B:15:95:5C:C1:B8:5C:E7:36:0F:A0:29:CB:D4:95:39:6E:FE:DA
Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8
Certificate issuer:       /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
Certificate serial:       0198D4DFCE54F4134BC0C4B283ED4EAF17F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
Manifest number:          1656
Signing time:             Sat 23 Aug 2025 03:01:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:33 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:33 +0000
Files and hashes:         1: NUwDMl0uceCiZ1NG2N5fFGq-BY0.roa (hash: W5ChUYN7fI8J46aNSrBpqKGe97TpyG1Z0u4eXPpkx48=)
                          2: aBzk2Zuo67kaeUq_y90VveCcmfg.crl (hash: cE1TV5q9Y0HXOl7xprn4WtlFaHr7m1FiQedO1uOwu4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:ce:54:f4:13:4b:c0:c4:b2:83:ed:4e:af:17:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8
        Validity
            Not Before: Aug 23 03:01:33 2025 GMT
            Not After : Aug 24 03:01:33 2025 GMT
        Subject: CN=514b15955cc1b85ce7360fa029cbd495396efeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:e2:b0:70:f5:a0:7d:59:5c:c8:3d:e3:76:
                    c3:55:08:dd:ae:ba:d5:e5:52:a3:f2:fe:e8:99:be:
                    0c:88:aa:d3:3b:5c:f4:57:78:6b:3a:0d:08:97:96:
                    56:d9:e0:2a:de:4e:ce:20:ca:15:45:b2:2b:60:e3:
                    5d:85:21:d1:8b:90:ca:a1:aa:be:f7:47:a1:81:68:
                    e5:ea:c9:1c:43:3a:2f:9e:53:2e:80:e5:8a:fe:f2:
                    86:01:15:7f:bd:8d:bf:50:52:7b:fa:d5:87:bb:62:
                    5f:3b:7c:ef:02:4c:53:32:37:15:77:35:c5:85:40:
                    3f:68:65:6c:7e:8e:dd:bd:03:5c:af:ac:cb:91:16:
                    b2:b3:42:5c:57:40:1b:98:99:9a:53:89:22:23:55:
                    b2:dd:72:30:bd:07:1a:4b:cb:b9:d6:38:24:e1:fa:
                    60:cb:10:af:02:6a:c5:71:ab:b0:7f:30:38:d2:fb:
                    12:da:9d:38:b4:a0:17:f9:18:5f:88:85:d8:2f:4b:
                    1a:bc:81:f6:7c:72:34:29:24:e1:f4:45:63:26:ad:
                    4b:4e:1d:a9:dc:93:83:dc:b2:c9:86:87:97:77:fa:
                    02:e4:33:db:e8:41:e7:2b:2b:49:6a:8c:74:bf:3c:
                    68:3e:3f:b0:7f:14:4f:1b:31:98:35:85:b8:7b:d0:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:15:95:5C:C1:B8:5C:E7:36:0F:A0:29:CB:D4:95:39:6E:FE:DA
            X509v3 Authority Key Identifier:
                keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:9e:19:e5:ea:2f:2c:71:a4:3d:ea:76:0c:57:99:8d:64:
         e4:fd:f3:d9:86:dc:06:a2:8f:e0:eb:33:16:97:79:8e:3e:e2:
         e0:7f:f7:1c:f2:42:85:c0:08:8a:ee:a5:40:2b:0c:52:c2:c1:
         89:31:df:2d:b7:af:f1:51:34:86:f8:8a:1a:da:a4:45:dc:bf:
         16:19:61:0d:8d:33:d4:46:f5:f2:bd:4a:f5:86:86:ed:bc:1a:
         97:06:2b:df:e5:9e:b3:0b:e4:6c:a9:80:3e:43:6d:44:26:df:
         f9:22:82:30:db:49:2f:41:67:b5:ac:b5:c0:f4:da:7d:0e:54:
         77:42:01:0b:f7:b1:42:c1:f4:d9:10:b9:3c:1f:2c:0a:db:8e:
         20:31:33:3a:21:07:a9:98:49:4c:09:41:69:2d:8d:3e:45:bb:
         48:2d:52:54:d1:c0:da:fe:be:75:04:4b:6e:9a:59:78:5e:d0:
         b4:55:89:7c:f2:ef:10:42:d7:02:71:3d:f4:06:df:f5:26:d7:
         81:37:b3:d2:bb:30:5c:26:c9:a8:43:3b:ae:14:36:42:fa:54:
         a9:38:57:55:6f:38:bd:97:09:8f:cf:43:16:7b:45:33:ae:12:
         56:12:1a:72:26:4d:ad:02:ff:cd:1b:bf:fd:4d:f3:ad:6b:78:
         86:f0:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:58 2025 by rpki-client