Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          nkMzEYs0oY8KXoSRss+/LeI62nKN9QznRgCD+kRDTbY=
Subject key identifier:   53:EE:03:4D:33:AF:F2:30:52:32:DF:DD:48:25:A2:53:89:A7:1A:22
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       019872CF5AC997B53058407098A268A275EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          0E4D
Signing time:             Mon 04 Aug 2025 02:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:48 +0000
Files and hashes:         1: Mg03f5x9KEwTzrWMVXcY-DpbRQM.roa (hash: gHoeFO+xk1dFoFV2Z9UYHxVBDmrYCHhqpQCvP+8wkDE=)
                          2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: gF2zYcFcNzqqzWdvs72yIX4wvq2/CPUpG0sGrHrlwZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:5a:c9:97:b5:30:58:40:70:98:a2:68:a2:75:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Aug  4 02:00:48 2025 GMT
            Not After : Aug  5 02:00:48 2025 GMT
        Subject: CN=53ee034d33aff2305232dfdd4825a25389a71a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:c8:93:ed:42:e8:f9:d9:04:03:ae:fa:80:
                    6f:b6:6b:5d:f9:dc:d3:7d:1c:9d:0c:d7:cf:c9:10:
                    a7:2d:e0:a8:30:4d:13:b5:52:15:f1:b5:8a:fc:0a:
                    f8:e8:e7:27:65:cf:89:2d:2c:52:db:be:01:f4:b7:
                    de:28:28:f3:50:b5:5c:92:ca:23:64:50:36:3b:34:
                    11:d0:d3:e1:1c:3c:06:8f:02:c5:bc:bc:c3:14:c4:
                    d8:9c:20:61:c7:4c:09:8f:ee:ad:34:8d:c5:05:44:
                    0a:2d:d6:50:23:93:bf:bf:58:6a:50:3e:9e:69:3f:
                    02:e8:bf:3e:c9:a3:7b:4c:fc:85:b1:54:a7:18:85:
                    c0:e2:05:ff:eb:95:58:f9:d2:5b:f5:2a:41:f6:b2:
                    31:e0:cd:14:0d:75:3e:fb:2f:ac:aa:fd:5d:f1:f7:
                    33:53:c5:e4:36:dd:ae:d1:8e:34:2b:1a:27:fb:63:
                    06:b8:30:82:2f:93:3f:b2:a0:7d:2b:4e:2e:f9:6b:
                    25:60:bb:62:a7:22:96:a5:88:6c:87:14:11:55:6c:
                    f5:6c:73:8e:e8:94:33:10:52:97:3d:fd:39:47:ef:
                    58:25:eb:a4:5c:9a:45:31:b3:11:e7:b0:7e:87:45:
                    8d:33:82:25:1f:40:50:d6:7c:ca:c5:1d:73:83:f9:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EE:03:4D:33:AF:F2:30:52:32:DF:DD:48:25:A2:53:89:A7:1A:22
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:60:36:e6:7c:f2:74:5a:eb:91:68:e8:a3:05:cb:20:78:64:
         25:f9:d2:65:a9:5d:e7:fa:e1:34:cc:ec:ad:51:fa:16:a6:a4:
         4c:6e:e2:1e:48:19:62:44:d3:71:f8:d2:b7:d0:2a:ba:ba:78:
         40:ee:32:33:68:72:71:de:f2:77:50:3c:f9:f6:c8:d3:8f:d0:
         7e:0e:2c:f8:b7:f8:30:ff:ed:35:66:e3:fc:66:f9:c3:89:e4:
         2f:88:e8:c2:50:39:46:3a:b3:db:49:37:8a:ad:f1:40:25:cf:
         01:49:dc:72:8b:4c:b1:f5:f1:71:de:ec:ea:2e:c9:62:0e:24:
         dc:77:9c:5b:76:85:06:27:8e:b9:27:85:ae:8f:69:b6:0f:8f:
         bf:c7:25:da:96:20:c2:86:73:5c:bd:61:f1:fe:ea:c0:43:00:
         a6:4e:9a:77:37:b9:e2:0f:a8:d1:1e:67:ac:3b:9b:a2:31:4c:
         a2:12:97:60:39:51:02:6f:1e:06:e5:cc:8e:99:72:b0:e7:a1:
         7e:0b:78:6b:7c:22:d5:c6:4c:40:37:23:82:00:86:86:d2:76:
         8f:ee:9b:d4:11:bc:b8:d2:45:1a:28:fd:9b:c9:a0:ff:61:d8:
         e2:aa:49:79:a3:89:40:30:d3:50:f4:5e:7a:81:aa:3c:78:33:
         77:4f:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:37 2025 by rpki-client