Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          TamMfmoXHuTS+d8aDOoraHXpzyDpNqSdUSeCUANTJcQ=
Subject key identifier:   8D:77:AC:6A:EF:FD:53:11:70:97:B8:65:1B:2D:2A:49:2B:B9:B1:F7
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       0198733D598C9DC2EABCCCCC3B59EB922248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          0F9A
Signing time:             Mon 04 Aug 2025 04:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:57 +0000
Files and hashes:         1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
                          2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: sDXg/Vi81eFehO+caKlq2patQ/4sH/ZGmfzpfgCK+gY=)
                          3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
                          4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:59:8c:9d:c2:ea:bc:cc:cc:3b:59:eb:92:22:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Aug  4 04:00:57 2025 GMT
            Not After : Aug  5 04:00:57 2025 GMT
        Subject: CN=8d77ac6aeffd53117097b8651b2d2a492bb9b1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:e0:20:80:9b:e7:57:c5:48:d3:d1:86:98:
                    c1:13:a5:94:55:5b:fd:0f:44:2c:53:b8:98:a2:f1:
                    28:7e:c5:15:30:b8:98:14:d6:2d:bc:06:ac:4c:50:
                    2c:05:1e:07:bd:bf:ea:88:26:ee:bf:a6:a3:da:8c:
                    af:45:cd:63:8e:06:d0:1e:d3:e3:0c:56:9d:ad:36:
                    30:58:b5:be:66:3f:6a:88:74:94:d5:58:97:13:d6:
                    e5:be:f7:aa:73:75:da:ca:18:e9:09:79:f8:23:7a:
                    5a:fa:d3:43:c2:a4:ba:21:b3:c6:6c:e9:36:34:ea:
                    58:ff:6a:1f:f3:78:86:6a:ee:de:75:bd:52:d1:ad:
                    79:92:99:00:ff:2d:75:e7:8b:35:05:4f:6c:24:d3:
                    bc:61:30:7a:50:1c:3e:96:e7:92:43:bd:c2:34:b2:
                    48:01:d7:3f:d1:21:be:ec:74:54:f7:6a:dc:a4:fb:
                    57:ae:5f:82:dd:30:43:ce:57:be:96:14:78:0d:71:
                    d4:f5:35:eb:78:d9:39:5b:06:15:a8:5f:54:cf:41:
                    6c:9d:44:2a:14:58:9f:67:ed:dd:12:e9:f9:9a:b3:
                    db:4c:44:06:93:dc:bd:f0:3c:59:0c:d3:94:83:53:
                    bc:c5:5d:5b:52:aa:97:24:b1:86:a0:0e:4b:3c:d4:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:77:AC:6A:EF:FD:53:11:70:97:B8:65:1B:2D:2A:49:2B:B9:B1:F7
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:95:ae:8f:6e:4a:81:1b:a1:b0:d1:81:c6:23:9b:41:6b:16:
         65:54:b4:7d:b0:51:39:6e:c8:41:20:0a:4d:e2:f1:4e:04:21:
         3b:a7:2c:55:15:6a:a4:bf:bf:f2:f5:ee:7e:e3:48:22:eb:9c:
         b2:c7:8b:57:fe:ef:9d:3b:ae:08:18:1e:17:72:ad:2f:6a:7a:
         62:a6:79:e1:35:17:dd:11:3a:b6:8d:19:dc:bf:1d:d1:2e:2b:
         4a:53:bf:5b:7c:06:82:57:f4:04:a2:67:29:25:47:e1:a8:55:
         bc:4b:27:a1:23:6b:a4:61:53:5e:2c:a5:e9:2a:22:31:15:ba:
         9b:da:59:0f:60:eb:ac:38:cc:c3:cb:e5:70:06:66:e2:76:9d:
         87:83:e2:be:b3:ae:84:1c:60:1d:98:a1:4d:a6:7e:ce:d0:e6:
         24:68:e2:4c:56:13:50:fb:75:f8:7b:8c:32:2b:ff:d6:14:78:
         4f:97:a3:e3:64:bb:26:c5:c1:5c:ee:af:e1:fe:5b:87:34:a0:
         c0:ce:39:6a:84:f3:c9:9a:f4:62:b5:d1:f3:85:24:87:74:a0:
         f7:21:bf:df:82:1a:80:30:da:7c:96:28:f2:6f:eb:0a:72:29:
         38:86:0c:3e:14:65:b6:15:6d:3d:29:74:98:dd:41:06:10:c4:
         1d:23:d9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:46 2025 by rpki-client