Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File:                     puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier:          qglFJ1OmeAYoEyRTqG9qw361xDhtV6fXUTQ0OrIRJ80=
Subject key identifier:   57:F8:2D:C2:8A:1B:37:09:6B:0A:F5:BA:39:94:54:2C:BF:16:3C:2C
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer:       /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial:       0198D65FE4260A21191B2DCC72B1F478D991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number:          15A4
Signing time:             Sat 23 Aug 2025 10:01:05 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:05 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:05 +0000
Files and hashes:         1: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: zo11B8XJZvBtMureYWI79kxe5OtzBlrs7VQSqRwG02w=)
                          2: wEf0XFewVLDEH498_3ycA_iLwpA.roa (hash: jj8EG5dFJudLiKXib9hP+9XTMUS6HXp2GHHzc8cEo24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:e4:26:0a:21:19:1b:2d:cc:72:b1:f4:78:d9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
        Validity
            Not Before: Aug 23 10:01:05 2025 GMT
            Not After : Aug 24 10:01:05 2025 GMT
        Subject: CN=57f82dc28a1b37096b0af5ba3994542cbf163c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:69:07:f9:ed:2d:66:2d:09:0a:ac:14:7d:
                    42:65:88:32:ff:33:a9:f9:3f:97:90:f1:f8:a3:b5:
                    c6:af:b5:1f:20:51:a7:a1:fe:22:4f:15:82:56:a3:
                    b5:8e:cc:79:70:df:10:dd:db:2c:bc:d6:4f:8e:46:
                    9a:98:d4:cc:c0:24:28:f3:7b:f4:64:b2:99:a7:71:
                    8f:2e:e4:9d:d7:c5:f7:ce:81:3f:c1:bd:86:78:a4:
                    e3:27:c3:18:9c:00:bc:8b:c2:8e:69:9f:a7:67:cd:
                    75:7a:58:ad:6c:a2:a8:f0:76:2f:2f:ff:1a:68:82:
                    17:fe:24:22:b0:2d:5a:99:6b:e8:86:3a:3c:ce:0e:
                    cf:47:d5:20:5a:01:ca:df:43:68:4f:38:c4:ec:0a:
                    e6:a0:05:4f:23:32:9f:3a:7f:e2:78:9f:1e:bd:87:
                    62:19:95:d2:ec:c0:60:2f:e9:6e:be:89:b5:16:85:
                    49:41:89:34:35:7f:61:51:74:f3:97:ed:b7:56:09:
                    f1:79:e5:a6:87:bb:96:15:94:6f:d3:19:ae:25:34:
                    c6:21:90:30:a2:3f:da:a9:d1:de:58:83:ac:c6:37:
                    e7:25:d7:3e:ab:c4:54:bb:a6:de:e1:f9:66:8d:d3:
                    d7:45:a9:94:26:66:0d:53:c6:f0:7c:bd:59:fb:e5:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F8:2D:C2:8A:1B:37:09:6B:0A:F5:BA:39:94:54:2C:BF:16:3C:2C
            X509v3 Authority Key Identifier:
                keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:33:2e:f7:55:bb:e2:a8:26:10:34:16:41:1f:32:b3:96:bb:
         97:14:3b:38:7b:4e:bf:41:fa:ad:d8:e2:69:cd:0d:53:fa:5b:
         1e:2a:eb:ed:7b:8c:f1:c6:06:fc:a4:f9:2d:ff:67:d3:95:c9:
         9c:13:5f:e5:52:92:8e:db:fd:bc:f1:d6:c1:e8:c5:96:21:be:
         7f:86:74:c8:39:00:6b:ab:34:62:59:ae:69:eb:11:d0:95:e4:
         44:b1:0e:9c:59:17:e5:0f:fb:9a:ce:26:c6:d2:a8:ef:15:c5:
         74:31:9e:3d:5e:86:b7:99:31:d6:67:8b:0d:c1:fe:06:49:92:
         3e:de:1b:9f:72:71:b6:9d:16:88:60:5d:c9:98:50:bf:62:c3:
         59:e4:85:6d:3a:7a:21:8f:3d:38:a0:62:b4:10:d2:60:f8:9a:
         1c:8f:89:ff:4c:c3:a9:d4:73:01:31:c4:7a:60:b0:1c:c7:3e:
         89:69:50:be:b2:7a:15:44:11:4c:9d:97:c7:c6:83:68:90:df:
         b9:0a:f9:fd:29:02:b0:6c:b3:55:7e:8d:35:c9:e8:0f:3a:6b:
         5b:b1:c8:57:b9:5e:f3:27:1e:e5:c1:3e:c6:2c:a8:4b:64:be:
         14:b9:c8:fb:d9:8c:d7:c3:36:95:a5:16:de:fc:ba:68:b5:18:
         65:66:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:00 2025 by rpki-client