Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File:                     feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier:          BOxuvo56RmmJR7HnXpBcWSGlnxcWmT6xJz+D/Wps3fk=
Subject key identifier:   3D:B3:A0:7B:F7:62:3B:C5:8E:33:57:6A:AA:01:41:65:E1:E3:00:2E
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer:       /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial:       01988B7D6AC58811C72EF7A852DA8E6B419B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number:          1085
Signing time:             Fri 08 Aug 2025 21:01:48 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:48 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:48 +0000
Files and hashes:         1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: YS2mtddU5mHiz+aY9UkEml3wqM+4basc/ZDscLHJXaE=)
                          2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:6a:c5:88:11:c7:2e:f7:a8:52:da:8e:6b:41:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
        Validity
            Not Before: Aug  8 21:01:48 2025 GMT
            Not After : Aug  9 21:01:48 2025 GMT
        Subject: CN=3db3a07bf7623bc58e33576aaa014165e1e3002e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:24:21:65:99:be:2d:e2:2c:ff:d2:58:b4:
                    93:c6:ce:f1:6b:c9:07:09:64:8e:20:be:ba:db:84:
                    44:78:0e:45:8c:f5:d2:9b:cd:db:4c:50:6b:5b:4e:
                    89:7e:a6:97:a6:71:57:d0:71:84:06:f5:91:02:7f:
                    7e:75:45:8b:a2:f5:be:d9:9f:b5:24:36:af:b7:d6:
                    79:e6:47:bd:73:f5:84:30:50:74:4b:48:36:4f:f6:
                    00:2e:33:6a:c8:b8:14:ce:a3:68:03:34:46:1e:1e:
                    c5:9a:05:55:1a:96:98:af:bf:bc:ed:27:a0:7f:38:
                    81:89:64:27:a8:dc:62:e5:24:d3:8c:18:79:c3:e8:
                    48:cf:ec:ff:64:bf:a7:60:be:d1:d4:1e:7e:ee:de:
                    15:24:c3:f1:91:d6:2a:f3:71:0e:e0:d7:9b:13:f0:
                    e2:74:45:e5:0a:2b:7e:25:2b:4f:bd:57:eb:54:fc:
                    20:e4:65:f4:ae:62:64:cf:05:9f:de:0a:e7:8a:2a:
                    0a:8b:f6:52:4c:d2:d0:b9:94:8c:31:e7:68:61:37:
                    f3:64:90:38:9f:d2:5f:2c:8c:cf:f9:5a:8a:5f:9d:
                    64:d8:5e:42:ad:d9:ec:2d:5b:0e:09:77:89:e7:0a:
                    ea:fe:d4:a6:ee:c7:cc:86:ea:a6:d3:94:e7:be:1c:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:A0:7B:F7:62:3B:C5:8E:33:57:6A:AA:01:41:65:E1:E3:00:2E
            X509v3 Authority Key Identifier:
                keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2c:4f:eb:8b:1b:87:21:e2:77:71:36:d0:c7:42:ea:17:5e:
         4f:e2:25:38:28:0e:d1:54:a0:5b:ca:6d:f2:08:90:f9:d5:ca:
         d6:af:ae:54:d9:c3:fe:a9:4b:51:3e:57:bc:da:29:37:34:ad:
         1a:0a:e8:47:3f:ab:52:5e:f0:5f:86:37:5d:a3:7d:69:7a:ff:
         3b:aa:4f:e3:d9:40:04:bf:77:4a:da:13:03:f7:be:c3:9b:d1:
         48:8d:57:44:95:40:8d:a4:2c:c8:65:10:cc:6d:01:23:99:44:
         93:c9:33:6f:0b:5c:bb:5a:5d:97:40:9c:52:77:5f:10:30:f1:
         07:84:f0:95:0e:0c:d5:c6:db:7d:39:70:24:57:04:c6:f3:cd:
         b6:80:b3:14:08:65:8f:bc:21:1d:c8:4c:68:23:fc:83:8d:d3:
         c0:38:d5:1b:c4:55:f8:74:6a:fe:24:b4:cf:4c:9c:ae:8d:c1:
         37:26:6b:c4:84:f3:1a:a1:ca:e7:98:6d:8e:fe:19:b4:75:29:
         32:90:a6:73:eb:c2:18:5c:3b:79:ea:1a:8b:4b:70:ca:ad:fc:
         a7:a8:c8:aa:ef:bc:bd:86:13:c0:31:e9:94:54:64:6a:34:2b:
         e3:36:4b:b0:28:18:9d:3d:84:4d:90:c0:76:17:54:2b:18:ec:
         9a:27:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:09 2025 by rpki-client