Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          6RQlPm/8vVmwQ2tl2iQg+m5zzObUsBAnOyZOPtCqlnM=
Subject key identifier:   12:F1:5A:F7:7D:0B:F2:2B:63:08:03:8E:7A:94:BA:94:1B:86:18:5A
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       0198D5BB8535622752675880640FC2973780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 07:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:32 +0000
Files and hashes:         1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
                          2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
                          3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 4CFtfhmkPCkCiJTRZN/dKk7E6wIOrAnk/p/XotUQutk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:85:35:62:27:52:67:58:80:64:0f:c2:97:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Aug 23 07:01:32 2025 GMT
            Not After : Aug 24 07:01:32 2025 GMT
        Subject: CN=12f15af77d0bf22b6308038e7a94ba941b86185a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:ed:10:f2:bc:c3:67:cf:39:9e:15:76:16:
                    58:96:9c:5d:01:ab:9e:aa:dc:8b:49:fa:4c:fd:f5:
                    ce:76:33:1b:ec:c5:29:ab:5c:95:59:e0:5a:00:b1:
                    c3:8d:27:72:40:f7:fb:11:76:8b:e9:4c:73:f9:da:
                    75:09:fc:b4:cf:62:c3:5e:39:d4:c7:4e:b5:80:e5:
                    7e:bd:fa:31:28:30:cb:7b:6b:a8:0b:e6:21:97:22:
                    aa:19:88:a3:b2:dc:b5:d0:f7:62:42:d5:31:aa:e0:
                    c2:2f:2a:e7:61:10:05:d1:6c:ba:f0:d6:a9:9b:7e:
                    c3:05:3a:6b:bd:03:54:ce:d2:1f:45:98:d5:d0:4a:
                    f9:13:ec:f9:30:9a:42:60:5a:1a:af:7a:02:09:2b:
                    c8:9f:db:de:58:6e:6a:fb:82:49:6c:f6:eb:3c:aa:
                    4b:04:08:cd:69:e6:d3:e2:2c:7f:38:e4:d8:2c:12:
                    2c:49:50:f0:6d:71:e9:e6:ad:8b:ca:ac:f3:0a:b4:
                    e7:4e:7a:d8:1a:e2:c2:62:23:7b:01:ea:5b:0c:3e:
                    57:63:a9:c1:e3:e1:ea:a8:69:51:1e:43:81:af:9a:
                    ff:3b:39:7a:e9:5a:bd:c1:e1:2e:09:ad:2c:e3:96:
                    53:42:50:e0:56:78:29:9e:1c:41:49:57:f8:59:9d:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F1:5A:F7:7D:0B:F2:2B:63:08:03:8E:7A:94:BA:94:1B:86:18:5A
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:35:41:82:67:91:35:7e:a7:c8:b7:48:63:8d:df:55:1a:58:
         3c:d6:12:94:ad:16:41:6b:1a:a8:6a:85:d7:a3:4d:59:2d:57:
         40:74:7b:1f:30:ee:e2:a9:28:47:8f:e8:39:bc:c7:2e:eb:2e:
         51:a9:25:87:b6:b1:a0:97:23:8e:89:29:7d:fe:5b:cf:3a:0d:
         49:06:98:53:95:fb:d4:3f:ac:ad:44:36:97:c2:8f:ec:dc:7c:
         9e:fb:01:ac:c0:57:25:1c:74:38:4f:c7:29:e6:b1:4f:32:24:
         e8:eb:92:16:79:43:30:ed:e3:1a:83:13:68:89:41:45:78:03:
         37:a1:4c:8a:00:e9:a0:e9:eb:c4:25:94:9a:08:07:a9:eb:52:
         b2:ca:be:5d:59:84:ff:3d:b1:1c:9e:71:92:21:4d:2a:c3:9c:
         88:19:ff:bb:cd:6c:f8:e3:8c:af:e7:f7:75:9c:ad:d7:7d:be:
         e5:6a:ca:36:74:a9:c7:de:0b:60:bb:6a:e8:9d:4e:9b:0c:70:
         7f:b5:9c:0a:18:21:8e:dc:f5:94:71:ff:f0:e0:2f:f3:a8:f3:
         4a:6a:1d:70:ac:83:b4:c7:00:b1:f8:56:59:42:29:ac:75:cc:
         1b:51:7b:31:42:44:51:eb:54:a6:18:17:cc:14:5b:a6:06:fd:
         8f:c3:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:13 2025 by rpki-client