Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File:                     p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier:          bafFCnyxT/eSx4HYZC4eJbooTAe/nZ1xvcVWQqXkB3s=
Subject key identifier:   49:44:CB:A9:38:CB:53:F8:E1:BE:3A:FB:90:D0:A6:5B:47:69:AC:14
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer:       /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial:       01988B0FBF02F17A52905B06DDF067272DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number:          1624
Signing time:             Fri 08 Aug 2025 19:02:01 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:01 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:01 +0000
Files and hashes:         1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: p3olqicT1Zc87OSeQpm056aoSWJU4CagFbsc+ac6C1E=)
                          2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
                          3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:bf:02:f1:7a:52:90:5b:06:dd:f0:67:27:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
        Validity
            Not Before: Aug  8 19:02:01 2025 GMT
            Not After : Aug  9 19:02:01 2025 GMT
        Subject: CN=4944cba938cb53f8e1be3afb90d0a65b4769ac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c5:2a:4e:32:24:73:9e:5d:c0:71:d1:41:ee:
                    4d:61:0a:c9:77:18:33:6d:37:9e:82:df:35:6a:73:
                    a1:b2:dd:63:ab:ff:bf:be:89:48:12:67:f9:3a:28:
                    39:3e:a3:33:6d:1b:ac:82:2a:f1:39:48:90:47:f0:
                    a7:95:ad:d7:67:93:bf:ff:1d:69:43:3a:85:1e:a1:
                    29:69:7e:b2:04:52:e1:9f:55:14:25:83:7f:1d:ca:
                    7b:71:21:30:0b:65:7c:fe:a5:8f:99:6c:3c:ae:ae:
                    e3:a8:12:63:77:25:ad:55:e6:d3:e2:dc:81:f2:bc:
                    e4:e5:52:47:84:10:a6:52:2b:0b:c4:9c:f6:12:9f:
                    cc:da:a5:84:a7:1c:41:0f:e1:4a:7c:46:e1:7a:c0:
                    86:37:2f:1f:a5:af:97:d7:70:9f:52:89:22:51:2f:
                    17:fc:59:57:ba:f7:5b:cc:39:90:dc:ab:52:a2:6c:
                    d0:9c:d9:92:87:34:95:14:c7:50:71:9e:1b:2c:f4:
                    d0:05:52:49:ef:b6:71:db:b5:37:15:46:5b:e0:67:
                    1f:1a:fc:b6:ff:de:68:c3:94:ed:05:ed:b6:2e:0c:
                    03:ae:ab:3e:af:8d:22:c9:ca:d2:e1:88:81:e6:d6:
                    e6:6f:81:93:c9:7a:42:5b:99:db:66:52:09:0e:7a:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:44:CB:A9:38:CB:53:F8:E1:BE:3A:FB:90:D0:A6:5B:47:69:AC:14
            X509v3 Authority Key Identifier:
                keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b6:ea:a0:be:47:50:b3:e1:22:61:1f:1c:98:ec:c7:29:9b:
         a8:96:10:eb:18:38:b6:3e:bb:ea:77:aa:b3:fb:57:fe:f6:c3:
         94:2a:dc:02:3f:4a:79:c5:77:db:f6:50:e6:a2:f2:c6:80:92:
         28:64:8d:20:af:16:39:c2:6d:0f:4e:82:bc:78:bc:59:39:ed:
         52:34:38:b5:c3:23:09:a7:bf:11:a7:72:1f:ed:8d:87:a1:15:
         00:c4:82:1f:71:c7:16:52:e2:30:f1:55:51:20:12:9b:2e:60:
         69:d6:a0:75:54:03:1f:4a:32:97:e7:25:68:c7:69:f4:ec:a7:
         f0:80:a8:bf:9e:40:19:41:3b:49:b5:83:f9:1d:0e:42:91:47:
         c8:ff:c0:0e:ac:d7:28:b8:b9:e0:52:ae:7b:9e:5e:74:79:95:
         61:7a:9a:d0:fb:1f:fb:ec:9c:30:4b:71:49:23:b5:63:24:85:
         d9:a0:42:c8:23:ec:92:2e:39:21:b7:39:4f:f2:6f:92:24:35:
         ce:73:2e:77:20:b0:31:a8:43:3f:f8:27:eb:fc:68:c5:f6:2b:
         1c:7f:8e:a8:30:e5:a3:3d:15:ca:13:d2:62:c2:ad:85:af:c0:
         fd:f7:ba:43:50:06:67:d8:24:fa:4d:d7:00:6b:4c:b8:d3:33:
         9c:a7:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:53 2025 by rpki-client