Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File:                     iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier:          Y1Xi0Rt68XvFR1sybt4CaLkf1xANpduXG7MogeUenT0=
Subject key identifier:   A4:B7:E3:6A:80:08:75:AA:35:6A:D6:87:5B:6A:74:13:72:41:3C:7C
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer:       /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial:       0198D54E509812CFF56A9770A494CE97FA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number:          0A57
Signing time:             Sat 23 Aug 2025 05:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:16 +0000
Files and hashes:         1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: EgoJtavzErpRZzZ8xhNWPSawXXtRj0UJjmCk4wOz9Dc=)
                          2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:50:98:12:cf:f5:6a:97:70:a4:94:ce:97:fa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
        Validity
            Not Before: Aug 23 05:02:16 2025 GMT
            Not After : Aug 24 05:02:16 2025 GMT
        Subject: CN=a4b7e36a800875aa356ad6875b6a741372413c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:bd:2f:f5:aa:38:76:e0:2a:54:dd:9c:17:
                    e8:ad:08:ba:96:63:56:0a:51:64:85:4f:9f:3a:e3:
                    01:bf:f4:77:35:dc:87:b1:be:ad:f0:ca:85:c0:c6:
                    b7:ef:c7:91:ac:71:0a:bc:7b:a6:75:c6:a4:f6:f2:
                    61:89:a2:e5:f9:eb:26:07:ee:a2:ad:a5:d6:f1:e6:
                    b7:2e:e2:9b:cf:f9:85:c9:e1:99:0a:2d:53:6e:3d:
                    56:f4:bb:52:43:f2:45:f0:ef:aa:40:12:68:b8:28:
                    7e:11:7a:2f:ec:26:86:de:33:a7:66:9e:f2:b7:04:
                    ae:84:df:50:1e:af:a5:ea:d6:66:da:b3:1f:01:b8:
                    94:5a:ea:41:e8:88:67:69:26:6a:7a:e1:f7:e6:c2:
                    31:3a:5c:20:02:86:07:c0:59:b6:1c:3f:c3:5b:31:
                    80:5f:2a:76:66:fb:95:96:36:bc:e2:aa:f3:9e:a6:
                    f4:2b:1e:d3:40:2a:27:d0:42:59:3a:59:19:10:3c:
                    17:28:fc:5a:f8:58:1a:69:de:a4:a1:69:df:ae:17:
                    70:9f:d7:a9:1d:d1:82:b5:10:ae:40:a2:78:13:5a:
                    2c:d4:62:22:5b:0d:d8:57:de:1b:5a:a6:64:60:fd:
                    00:c1:5e:89:9c:6e:f4:78:d5:f1:01:97:00:2e:27:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:E3:6A:80:08:75:AA:35:6A:D6:87:5B:6A:74:13:72:41:3C:7C
            X509v3 Authority Key Identifier:
                keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:4c:96:ce:89:e6:5d:1b:b7:d3:a0:6f:18:30:65:4b:0a:
         2b:69:0a:0e:e2:ac:d1:b9:0e:66:66:b1:58:67:b9:42:26:56:
         53:7f:63:55:a3:ec:f0:39:f2:a7:a5:b5:81:98:4f:97:b2:7f:
         4c:8a:52:35:89:6c:10:20:ec:0e:ed:b6:64:7f:50:b8:b4:7e:
         67:1c:0c:8b:df:3c:26:4b:55:72:7c:b5:42:fd:dc:83:df:3f:
         d0:c9:a9:b4:a3:d8:a6:b8:8c:dd:94:46:4f:64:e5:c3:f2:be:
         d4:93:b8:42:40:14:73:a4:e6:5e:c8:a1:c1:aa:86:7d:c9:2b:
         fb:ef:2a:6b:b6:99:57:b0:78:f4:18:fa:37:ce:ae:bb:bf:a3:
         c4:85:e4:5a:af:d2:1f:04:5a:e8:2b:d1:80:10:a7:7c:14:04:
         4a:dd:2b:23:55:25:3c:b9:80:75:9c:45:2c:a8:d6:81:9f:76:
         58:ed:31:e6:21:eb:64:e8:23:ce:e1:86:02:64:5b:a9:c6:af:
         3c:da:77:b6:7b:97:27:76:23:75:12:08:76:e3:4d:b9:6d:c2:
         41:39:d0:6f:bf:f6:85:bf:1d:b3:e2:71:37:e3:bc:44:c4:00:
         c5:bc:2e:8e:28:28:ed:d0:e5:fd:e5:02:2f:c0:ee:8f:7a:3d:
         2e:0d:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:37 2025 by rpki-client