Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          b5NblD9WBEVgblaHSdTUMKy6a2Qmjj/Csv4v7I6j4FM=
Subject key identifier:   35:52:BB:DA:0E:55:26:81:BC:BB:30:16:5C:BF:2B:51:24:33:0B:8E
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       019881674EE2F1C0260C8D2A369630BC7666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          1565
Signing time:             Wed 06 Aug 2025 22:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:27 +0000
Files and hashes:         1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
                          2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: njo15Qc9n2kTZSizHk64W6GSz4/UI57hJI2TH4IzCd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:4e:e2:f1:c0:26:0c:8d:2a:36:96:30:bc:76:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Aug  6 22:01:27 2025 GMT
            Not After : Aug  7 22:01:27 2025 GMT
        Subject: CN=3552bbda0e552681bcbb30165cbf2b5124330b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:15:b4:dc:b4:49:7f:f8:1a:d9:6c:27:5f:
                    aa:54:52:b8:14:cb:dd:fb:1e:18:c9:61:91:c8:62:
                    3f:91:d9:15:ed:5d:d4:31:5d:c3:bd:9c:96:96:3f:
                    e7:8f:b1:56:22:0e:f8:1e:1d:54:0f:72:49:a7:a9:
                    6f:a7:6b:44:d6:6f:24:aa:e8:2d:3b:86:25:ad:35:
                    ab:cc:77:04:37:7f:72:93:01:4c:b8:20:eb:60:81:
                    d3:25:f1:99:46:4a:27:48:c0:05:83:42:70:0a:d3:
                    48:49:ea:21:d0:17:0c:e8:b2:58:4b:87:ea:96:08:
                    c9:aa:f2:e9:33:cc:15:f8:3c:e5:e3:ee:57:c9:ed:
                    17:5e:60:4e:07:7b:07:3f:00:10:21:62:19:c4:28:
                    84:5f:ac:a0:4f:b4:88:81:03:c5:7c:5c:c7:13:cf:
                    fa:ce:b8:3e:df:12:bb:14:42:24:5d:e7:cb:bd:e6:
                    7d:02:32:9b:80:8b:7b:68:24:10:3c:38:36:ae:44:
                    5c:81:e8:e7:18:8b:3b:81:8a:31:41:05:48:cd:aa:
                    ca:2c:c0:fc:10:48:77:cb:e8:5c:f3:a8:03:d9:38:
                    6f:04:a1:68:ef:ee:22:19:2e:a4:e3:ae:91:f4:1d:
                    65:36:a2:8b:df:ce:5f:34:d8:5e:7b:c5:1b:f3:b5:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:52:BB:DA:0E:55:26:81:BC:BB:30:16:5C:BF:2B:51:24:33:0B:8E
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:01:4a:4b:af:cf:b5:ee:c3:0b:c4:5a:9d:b5:5f:a2:66:b2:
         26:80:c5:62:38:65:13:00:8f:a4:56:ab:5a:aa:d4:6b:48:6c:
         40:e8:b5:6d:3c:38:d6:de:18:c7:01:88:2f:fc:79:9c:cc:58:
         a1:27:76:26:4d:ee:73:71:98:bf:d9:92:a0:ea:17:d0:1e:c6:
         43:7d:a6:4a:36:11:a8:fe:a9:5e:c8:29:9f:10:1b:70:d7:f1:
         23:40:2a:be:79:d9:02:f3:28:af:b4:2d:43:e8:f9:c5:1a:f7:
         f3:28:de:4d:95:9b:c4:3e:f8:f9:94:64:69:da:1c:be:db:d6:
         81:db:1c:05:e8:bf:f6:58:6a:e3:ab:db:c8:b7:c1:6e:b0:e6:
         73:1a:c6:4f:a0:b5:79:cf:12:d4:58:f8:b2:02:ae:cb:1b:b1:
         a0:0d:be:07:5b:29:55:54:f7:ea:f7:5c:e4:47:42:20:83:bf:
         5d:27:c1:98:d0:43:e1:28:22:f3:f8:3e:fa:eb:37:f8:31:c8:
         ba:50:3a:97:7b:e5:52:06:e2:f2:fd:65:0b:45:99:75:bb:bd:
         41:b4:2a:b6:c5:36:b8:a1:f7:95:75:a9:73:82:cf:87:bd:7d:
         35:4b:d0:94:80:7e:b9:fd:d7:fe:d9:a4:6c:bd:bc:ab:b0:d3:
         fd:3e:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:40:06 2025 by rpki-client