Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          bVYztVmzTHnrZFgBfnEMBCXn/EPgVHM0a1PjEeMpYhw=
Subject key identifier:   D1:D8:5C:BE:DE:17:00:30:44:91:B6:AE:63:62:B3:B1:1F:92:42:C1
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       0198D47405E1E5CFE725115842458854AF90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          0CBD
Signing time:             Sat 23 Aug 2025 01:03:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:50 +0000
Files and hashes:         1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: qxny2pDkoSffIP9fxAXC4ZxCMiKoWIkHnOeaxxMd1Ds=)
                          2: _GSW-DelEaPKU0jnYZYgZjzHWbE.roa (hash: pkcF+nXYhLnPPj/p92wHFinmwHpFMLg3KgigTAMrKPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:05:e1:e5:cf:e7:25:11:58:42:45:88:54:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Aug 23 01:03:50 2025 GMT
            Not After : Aug 24 01:03:50 2025 GMT
        Subject: CN=d1d85cbede1700304491b6ae6362b3b11f9242c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7f:f0:9f:a4:31:6c:4c:41:cd:2c:f2:0d:bd:
                    7c:d5:7c:fb:ea:87:1d:b9:f0:20:9c:5a:c3:a0:c7:
                    e8:a1:c7:78:7c:45:91:dc:f7:eb:9c:2f:94:f1:58:
                    ce:b5:b6:4b:8d:97:19:05:c7:8b:29:3e:c7:4e:c2:
                    7a:f3:23:e0:6f:f2:39:d1:19:5c:07:f6:ab:0a:12:
                    d9:72:81:78:ef:25:8b:bb:10:0e:1f:ba:98:b7:0d:
                    a5:d7:ab:d4:db:33:de:6d:4b:4a:e2:92:46:d3:05:
                    84:16:1f:27:64:1d:7f:f9:a6:73:b0:b9:6a:17:77:
                    cc:b9:9d:57:b9:12:93:b2:5e:13:34:8b:37:34:f1:
                    81:4a:b9:94:dd:3c:a0:0e:0f:3f:e6:d9:7d:1a:d7:
                    1c:12:df:6d:3f:20:e8:f3:56:85:5a:09:a1:7d:ea:
                    50:53:27:91:ff:be:2c:c5:10:d1:cd:ab:7d:de:18:
                    96:d3:f1:46:c9:69:82:fe:2f:aa:9e:cf:da:2c:be:
                    f2:84:3a:95:87:a8:be:52:a3:9f:1c:10:55:e1:de:
                    1c:4b:96:3f:1e:65:b4:bf:06:c5:a3:87:14:59:da:
                    15:28:9f:68:31:2e:eb:de:4c:f1:75:bc:24:3c:73:
                    29:e8:71:41:30:a2:d5:3f:fd:20:64:6c:f9:a4:c9:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:5C:BE:DE:17:00:30:44:91:B6:AE:63:62:B3:B1:1F:92:42:C1
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:a3:aa:82:1d:f6:49:d9:c5:58:08:a4:59:35:75:98:24:
         53:79:bf:87:0e:c1:7c:69:78:e8:3a:ca:bd:d0:60:b7:91:9c:
         95:64:4a:51:97:6e:65:4d:2e:d1:62:aa:9e:6b:af:fb:a2:9d:
         75:da:e1:03:a2:ca:fe:b3:2f:87:8a:a5:6d:3c:52:eb:c8:fc:
         e9:2b:bf:e1:51:fd:65:b8:d7:f4:15:e3:12:58:ea:89:10:78:
         d1:b4:9d:dc:0e:71:10:65:77:d8:f1:d1:33:c0:74:b7:e4:c8:
         6b:53:61:8b:3d:ba:5d:02:8c:22:29:b0:4d:f0:e9:74:45:89:
         5e:3b:60:c9:04:62:8f:d4:e0:31:5b:2e:c3:01:7e:5c:9b:cb:
         ab:67:96:c0:a5:50:ea:a7:ef:fa:8b:2c:e2:e8:7b:22:dc:ab:
         af:63:01:38:01:bd:c4:15:30:b4:8d:63:d6:b2:54:6f:86:87:
         6a:5f:7e:ac:98:c8:a3:df:dc:db:b4:84:77:8d:f4:ab:a4:87:
         18:06:6b:af:8c:93:17:ce:ff:a6:10:22:bb:28:06:1a:c6:c6:
         7f:29:5f:3d:93:10:39:7c:02:cd:1d:7c:05:b4:af:a0:5c:67:
         69:e2:9d:1c:4b:d1:ef:2d:42:cb:c8:1d:d1:aa:e8:4d:ab:33:
         4c:e5:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:53 2025 by rpki-client