Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File:                     _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier:          eqa6hlW/OgXHL0W/ncU4N64LtVcnxEEr4gRQNRthcXw=
Subject key identifier:   94:23:7C:86:45:BF:BF:9E:F1:CA:A4:86:DE:10:4C:CF:E9:45:C4:76
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer:       /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial:       01987306EB0B58E3B55E8219A1FE52254B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number:          05E4
Signing time:             Mon 04 Aug 2025 03:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:29 +0000
Files and hashes:         1: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (hash: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=)
                          2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: t6c5Sv8jiNRB4c7toyvYfoXXjDPHMJERkW+sSi8Ng0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:eb:0b:58:e3:b5:5e:82:19:a1:fe:52:25:4b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
        Validity
            Not Before: Aug  4 03:01:29 2025 GMT
            Not After : Aug  5 03:01:29 2025 GMT
        Subject: CN=94237c8645bfbf9ef1caa486de104ccfe945c476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:00:bf:90:01:52:c2:7c:53:36:ce:d1:06:
                    7a:c7:a6:c8:39:fa:e6:d8:82:ca:66:1d:70:cf:f5:
                    2e:bd:40:4e:a4:ff:66:8a:8a:cc:ce:92:74:e9:a7:
                    6e:91:1f:fa:b2:32:cc:29:d8:b0:3a:8f:a8:e6:43:
                    1b:20:5b:f8:d3:20:06:b0:7a:0b:e4:fc:67:75:b0:
                    3f:ba:c9:05:ae:34:92:1e:bd:4a:a9:5c:b8:97:a5:
                    3c:8f:64:fb:35:aa:d6:44:7b:1a:48:5d:f5:52:db:
                    37:dc:f5:f3:b3:53:33:fe:67:8c:b4:a8:d0:d4:7b:
                    54:7f:d3:94:1a:3d:9f:5b:d1:7b:0b:ed:2d:fa:2c:
                    07:a7:e4:d7:32:18:a7:84:c9:10:59:63:c1:db:5d:
                    19:bc:1a:7f:00:86:0f:5b:94:9d:87:c2:ea:ca:f5:
                    d5:ba:95:aa:0c:6f:a3:dd:e9:ab:ac:93:fc:fd:fd:
                    2d:5a:54:cb:75:b3:b7:ab:26:a3:4e:2a:18:43:b1:
                    34:d5:2a:23:61:c7:21:5a:2f:2f:1a:3c:fc:09:ab:
                    42:9e:94:0d:36:d9:e2:d6:98:fe:f4:28:3a:34:5c:
                    a6:00:c9:e7:86:b4:c2:bd:81:a0:df:95:c9:20:88:
                    a3:3f:13:cd:e3:b5:e2:1b:90:73:c1:79:06:f1:b8:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:23:7C:86:45:BF:BF:9E:F1:CA:A4:86:DE:10:4C:CF:E9:45:C4:76
            X509v3 Authority Key Identifier:
                keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:df:40:6c:32:9c:b0:37:24:92:2e:a2:2d:fb:a5:d8:64:6a:
         59:5e:85:55:5d:ea:a3:ef:d6:d5:86:5b:4b:68:43:69:5d:c0:
         5d:53:2c:df:5f:ba:bd:f5:9e:c7:fb:51:c4:fe:3a:ba:68:a7:
         2a:c1:e5:0f:ee:5d:95:d7:13:59:97:07:6b:a2:f9:14:b1:c2:
         12:ee:e2:5e:50:ea:2b:95:d4:d0:a5:a7:32:4c:84:d4:a4:9b:
         13:a5:98:71:3b:75:c6:36:82:a1:cb:3d:c3:7c:25:22:99:31:
         fa:ce:e9:6d:04:c0:6b:bc:af:4e:6c:5f:2d:42:02:a3:ce:86:
         1f:83:e4:1f:44:42:30:da:80:92:02:6b:fb:60:80:c0:da:2a:
         1e:bf:ff:fa:d3:19:00:f2:1d:95:da:27:ec:c2:4a:03:a2:80:
         18:90:bc:ac:72:fc:54:8e:0e:cd:18:4a:9c:bb:e1:cc:eb:59:
         6d:a3:a7:c5:f4:cd:22:00:77:59:65:a1:65:b5:07:45:30:17:
         9e:2e:ed:96:85:7e:1e:19:46:a8:62:66:20:5b:b0:25:ec:37:
         2b:e6:ce:f5:94:b8:71:a6:52:ee:0d:75:3d:86:77:5b:ee:dd:
         e6:ba:ac:8c:b1:12:1e:bb:40:9d:4d:0d:48:73:6c:df:f7:32:
         c8:7c:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:28 2025 by rpki-client