Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File:                     IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier:          w+oucK2iOtR5/oAT6EdW78VZB2GbXQDlc6v5KE452Gc=
Subject key identifier:   D0:03:7A:EC:24:03:CB:D3:66:54:6E:8E:F0:CA:2E:AF:31:DF:92:0A
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer:       /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial:       01987C775B03EFB7F9A41FDEEEE7E1F0B944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number:          0358
Signing time:             Tue 05 Aug 2025 23:00:53 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:53 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:53 +0000
Files and hashes:         1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=)
                          2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: jEIo/0WaFaMghtwSxJB4u58g+TZVjl3XhFHHAgl064Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:5b:03:ef:b7:f9:a4:1f:de:ee:e7:e1:f0:b9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
        Validity
            Not Before: Aug  5 23:00:53 2025 GMT
            Not After : Aug  6 23:00:53 2025 GMT
        Subject: CN=d0037aec2403cbd366546e8ef0ca2eaf31df920a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:0c:7f:1e:b7:5d:cb:f8:78:b6:d9:f6:b0:
                    45:eb:37:2a:a9:c0:a9:8b:70:7c:d1:e8:a9:4b:0c:
                    58:4b:84:c4:59:b4:f2:d6:77:8e:4f:4d:45:1e:ac:
                    64:a5:ee:6a:b4:7d:6c:7a:9f:8d:7f:c3:1c:d6:90:
                    6b:92:8c:49:4f:5b:c8:ca:97:ca:f3:e1:67:97:79:
                    dc:a6:75:76:e4:ad:a8:58:cd:69:e0:1b:63:37:b4:
                    74:89:d5:2d:2d:08:04:f2:2a:04:01:6e:e8:4d:c4:
                    af:b2:50:b6:7a:0c:a7:d3:6a:81:a2:a7:ae:87:e1:
                    2e:f5:16:ec:71:0d:64:72:b1:2a:69:08:5c:6a:bc:
                    fe:4c:97:e9:63:33:09:5c:43:7a:89:fa:bc:bc:88:
                    95:22:0c:29:d1:87:68:0f:cf:07:74:65:dc:35:ca:
                    dd:5b:e6:19:ca:ac:0b:ac:23:44:85:bf:c5:3d:87:
                    4c:62:4c:36:5d:1a:f1:95:57:0d:ea:30:a2:6e:2b:
                    4a:ea:44:ef:57:8e:98:32:88:ce:7d:ed:dd:73:0b:
                    1d:73:be:10:27:7c:13:1c:ee:de:57:db:0f:03:bb:
                    d7:91:03:02:cc:96:3b:7f:59:1d:60:42:6b:85:89:
                    99:78:f4:a7:74:c1:31:50:b6:88:10:f6:af:c0:12:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:7A:EC:24:03:CB:D3:66:54:6E:8E:F0:CA:2E:AF:31:DF:92:0A
            X509v3 Authority Key Identifier:
                keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:02:23:fa:f8:70:bc:48:13:7d:dd:e9:d8:57:ce:c7:86:53:
         de:8b:e2:29:a7:85:90:59:85:04:30:35:e6:b9:42:b7:28:8e:
         85:29:3a:2a:e2:2d:06:92:bf:41:6d:17:76:9f:3c:d9:3a:cb:
         2b:e3:ad:c4:12:dc:eb:5f:19:53:7b:85:1c:f4:5f:9a:05:91:
         e0:56:e6:45:f7:58:70:77:f5:4f:28:f1:d1:ec:a1:fb:55:93:
         bb:14:5c:6b:e1:9a:93:03:73:87:e2:9a:85:1c:e4:f9:42:a5:
         34:f2:1d:7a:74:7a:0f:d8:c9:ea:47:18:3c:d1:30:27:ab:03:
         42:2b:39:ff:ff:34:38:6a:ee:e6:94:ef:9b:41:c2:87:ce:4b:
         6d:82:bd:bf:6f:d7:15:d7:7a:34:d7:33:a7:b2:c1:b7:5e:f3:
         2f:3b:25:cf:5e:f6:15:5d:e9:30:b8:ee:ea:d8:ed:e9:b2:ca:
         25:85:dd:ce:cc:4d:4d:45:32:58:bf:89:bd:3f:31:dc:c0:e6:
         4d:e9:70:4e:3f:d7:16:6c:67:0d:33:c3:7e:ab:35:63:af:23:
         73:01:6c:c1:85:bd:2b:a2:93:95:06:08:1a:cd:24:a9:7c:ac:
         3d:4f:6f:b7:21:d3:95:1b:a4:47:0e:c8:f9:a6:f3:0d:d7:4c:
         eb:bb:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:44:35 2025 by rpki-client