Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          WMXBPmZEJTlS+j5KAiAPnavGxoW+e0rxHk3M5er92pE=
Subject key identifier:   97:3B:0E:F5:5E:9D:F2:66:7A:3A:4A:5C:5B:DE:1D:A1:BA:65:11:C5
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       0198D54DE8E68B0C4CB8A4CD4D21D8745E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          1387
Signing time:             Sat 23 Aug 2025 05:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:49 +0000
Files and hashes:         1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: KU+47CoChlAA6lwutbIblcAYDd8SfykcYyiMPsVD3uM=)
                          2: uZb6h7TLe1-lJihPhirYKpDZ4mY.roa (hash: aDykphD+aoMx3Jh78ZAzXroKL36r82PVvsKm3+s85wA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e8:e6:8b:0c:4c:b8:a4:cd:4d:21:d8:74:5e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: Aug 23 05:01:49 2025 GMT
            Not After : Aug 24 05:01:49 2025 GMT
        Subject: CN=973b0ef55e9df2667a3a4a5c5bde1da1ba6511c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:9d:bb:1c:db:5e:33:75:fb:89:86:aa:99:
                    7f:3e:21:f0:db:52:b7:e1:30:c8:c5:d1:fd:ed:f8:
                    d8:0a:4e:80:ca:1a:98:7b:b6:89:d5:ec:b6:97:0b:
                    10:a6:ad:a9:f1:ad:ea:0b:fc:1f:ff:f2:c5:9e:ce:
                    a8:31:98:73:f9:6c:fe:8a:e4:9a:39:9d:22:ef:47:
                    31:e7:ea:fd:e2:23:c3:8f:10:ab:f2:39:ce:63:76:
                    c9:32:ed:b1:1a:1a:e3:ec:88:69:3e:a7:d0:ef:31:
                    b3:ae:02:b9:25:62:7a:0f:db:8c:78:43:0d:1f:e5:
                    d1:72:d3:ed:98:a4:85:43:73:e3:74:c6:e2:46:7f:
                    f0:fc:0f:d2:be:6f:35:00:cb:93:a6:ab:df:f6:23:
                    e5:35:78:80:44:d0:3d:6e:8e:96:58:be:2a:bb:9e:
                    a6:3d:45:c4:fb:95:59:8b:17:d2:38:32:f4:2c:0c:
                    66:cc:83:5e:96:ec:7e:2d:65:14:38:db:43:88:86:
                    96:e1:88:17:ba:0b:7a:3a:c5:31:da:2f:f3:10:7c:
                    06:99:ae:89:57:c0:55:cd:d8:12:2f:45:31:49:58:
                    b6:8c:fe:99:cc:68:94:25:6f:10:8b:c1:58:40:14:
                    0d:02:64:c5:04:9e:72:ae:24:81:e7:f3:b1:96:33:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3B:0E:F5:5E:9D:F2:66:7A:3A:4A:5C:5B:DE:1D:A1:BA:65:11:C5
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:27:b1:8a:f3:9d:8a:ee:77:26:80:ed:59:f3:dd:a6:d3:57:
         c2:47:31:f0:00:d6:9e:23:74:67:62:e7:e1:da:2a:63:a9:f8:
         30:1f:71:93:83:fe:2e:e0:e6:d7:d9:d9:36:5c:4f:1c:67:ab:
         a5:b5:58:36:3a:d9:ad:f6:28:2e:53:75:56:70:ad:e6:8d:9e:
         84:9b:1e:16:01:3d:60:ef:5f:7c:90:f6:b6:8e:80:e2:ef:bd:
         b5:70:df:19:a1:b4:bf:83:1f:02:af:d9:48:e3:34:45:02:d1:
         cd:23:27:e1:36:af:11:ed:ce:e4:21:77:40:5c:bd:66:26:26:
         a7:60:2f:90:80:29:cd:95:b2:30:16:72:23:d2:e6:d5:d4:e9:
         97:2b:a3:7d:30:3f:bc:d1:ac:a5:d7:e9:0d:af:a6:30:ca:0f:
         f3:cb:33:2c:0b:5b:19:e5:af:df:e3:aa:48:fa:eb:2d:0f:70:
         de:64:1d:76:90:b9:f9:ca:13:72:c9:7b:af:ae:e7:bf:e6:d7:
         01:28:9f:d6:e0:bb:09:30:03:b9:bd:6d:bd:45:1f:bf:81:f5:
         de:b6:df:e3:5b:1b:71:5f:a0:20:0f:74:1a:cd:6a:af:51:e6:
         db:89:6b:3d:b0:7b:63:a6:63:19:0b:18:53:4e:0f:77:2a:e3:
         9c:64:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:33 2025 by rpki-client