Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          mhBIokSDiFxC3fxtbkEmT7R6lHz6mdEtS0lplL3TxBM=
Subject key identifier:   BF:BA:B2:E3:A6:34:88:F7:74:CD:27:D9:1D:18:45:47:D9:F6:A4:FB
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       0198D5BB86A440E5FE01418DDF121AB73737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          0A58
Signing time:             Sat 23 Aug 2025 07:01:33 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:33 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:33 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: 37b4i0atjzOxb1vFF4nVoyyf6mzyzeLMnp7vTCJFscE=)
                          2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:86:a4:40:e5:fe:01:41:8d:df:12:1a:b7:37:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Aug 23 07:01:33 2025 GMT
            Not After : Aug 24 07:01:33 2025 GMT
        Subject: CN=bfbab2e3a63488f774cd27d91d184547d9f6a4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:d1:85:ac:6b:26:a0:82:55:22:77:ba:9a:
                    da:a4:f9:23:2e:75:67:4b:44:ed:4c:96:7e:22:e9:
                    b5:b6:57:0d:21:bc:67:4c:8e:89:8b:7a:9e:f0:e3:
                    e9:52:c0:b1:1e:25:70:1e:3e:4e:72:0e:2a:28:f9:
                    24:37:50:d7:c8:27:63:ee:9f:fd:9d:fc:60:1e:52:
                    0f:66:3f:44:18:4c:0d:5e:6d:5b:97:1e:49:9c:db:
                    9d:f1:b7:c1:7e:31:07:7a:ce:64:e9:f6:3f:d6:87:
                    f8:79:38:37:1e:3b:72:09:fd:86:b0:ba:d6:21:38:
                    8e:28:55:31:53:b6:24:81:e7:5c:10:4c:fc:22:4c:
                    5b:fd:16:a4:50:24:82:8c:a8:43:b6:38:ed:de:ce:
                    66:ee:1a:21:75:d9:0b:4b:bf:55:c2:a3:c2:db:74:
                    f3:a1:47:a6:ca:dc:6c:e2:ad:22:1c:df:fd:68:ab:
                    4e:6e:88:ec:29:a6:8f:3f:a3:a9:e8:b7:b1:a5:b4:
                    ad:37:ad:67:f0:ca:ae:c0:16:de:33:de:3b:13:79:
                    fb:4a:22:ea:fc:68:b9:8e:ca:10:78:46:5c:69:7c:
                    c6:bb:d9:7d:fd:e4:90:c8:4a:67:d2:7e:c3:76:73:
                    f1:65:e8:36:c1:09:60:9f:82:e3:ac:d2:a7:be:a9:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:B2:E3:A6:34:88:F7:74:CD:27:D9:1D:18:45:47:D9:F6:A4:FB
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:b9:d3:9a:5e:e8:0e:bf:d1:e3:ca:71:63:b9:52:ec:ca:
         3a:4c:ce:b0:42:5e:d3:6b:67:17:df:bc:30:b1:ea:69:ec:39:
         27:46:64:aa:3f:ab:3c:f0:76:ed:fa:92:23:14:12:07:28:61:
         1e:e7:43:ed:f2:4f:fd:e2:66:2f:9d:e3:e3:97:00:59:af:aa:
         cb:27:fe:ba:e0:a2:ba:7b:0e:5c:1d:9d:07:66:66:35:f0:57:
         e1:23:cd:f7:6a:97:c0:53:00:6c:aa:50:6c:99:c9:1b:a5:ce:
         92:3b:6c:c6:f9:19:ec:20:5c:10:6c:48:4e:ca:36:78:72:68:
         33:5d:7c:9b:6e:3d:72:a8:74:44:43:5f:2f:c6:25:eb:94:3c:
         5d:52:1e:a8:ae:37:50:60:1c:ce:37:af:9d:0a:5a:07:55:d2:
         12:98:a9:18:58:e6:ac:17:a8:c5:96:9d:96:ff:65:68:d7:8f:
         31:b4:1f:80:38:fb:96:b4:2e:ed:3a:94:3d:cf:ec:30:11:14:
         c6:71:ed:f9:71:c3:9b:7d:0c:9b:04:d4:0f:9c:7e:67:8c:b1:
         5f:ec:cd:13:e2:4f:ef:27:d6:a1:a5:0c:ba:ef:b5:3a:80:a7:
         b1:85:b3:48:ce:51:c2:95:34:15:23:3f:73:81:a2:eb:3c:b4:
         30:a4:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:02 2025 by rpki-client