Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File:                     A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier:          1u4sEmFrJ/02SHQQakhenBV5QQ75hhUv1PtaIKY1/Sg=
Subject key identifier:   30:39:A6:B5:56:A1:65:D2:83:30:C0:10:0E:8B:07:C2:92:75:DE:A0
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer:       /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial:       019873E2EF229C2E3601B6D9B7525C47E291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number:          04DD
Signing time:             Mon 04 Aug 2025 07:01:48 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:48 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:48 +0000
Files and hashes:         1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: 9NARMpRdTZ+rNUNbf1TXR8ttCcJH3g/codijcqGv4CI=)
                          2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:ef:22:9c:2e:36:01:b6:d9:b7:52:5c:47:e2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
        Validity
            Not Before: Aug  4 07:01:48 2025 GMT
            Not After : Aug  5 07:01:48 2025 GMT
        Subject: CN=3039a6b556a165d28330c0100e8b07c29275dea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:b2:1f:a5:76:78:85:31:12:de:0b:03:f6:
                    6d:96:e0:bb:a6:9d:dc:7a:56:a9:d5:37:ed:0f:a9:
                    10:bd:b2:3d:03:59:c5:ca:1a:c6:ff:5b:29:5d:df:
                    82:57:56:b2:83:c9:e5:98:2f:e6:26:f9:fe:a2:b1:
                    5d:1f:13:e0:3c:83:15:04:e3:d5:5c:4d:20:c1:ee:
                    e3:3d:a2:44:36:49:24:9f:6d:4d:f4:a7:7c:f4:4d:
                    49:95:5e:58:d2:d6:62:9b:cc:58:65:8a:4f:27:ce:
                    9d:9d:ac:d0:e8:20:aa:84:55:86:6e:c6:74:b4:d0:
                    f1:e3:30:ac:2b:ae:a7:15:08:59:f4:0e:db:38:56:
                    36:84:a4:d1:58:c6:a2:a8:56:39:9e:ae:a2:4c:fd:
                    d9:18:40:1c:83:c2:05:76:55:d3:de:c7:cc:65:82:
                    a0:fb:a2:5b:26:cd:c4:de:b3:5e:a5:fc:d6:3b:b4:
                    49:c2:f5:5b:a2:f5:ea:7d:ca:27:f8:46:f1:17:2c:
                    1f:32:b7:b3:da:57:f8:ff:56:14:2c:75:a9:bb:f9:
                    db:c5:99:67:4f:a5:97:90:f0:37:d3:f5:d6:bd:ec:
                    e7:30:dc:11:66:1a:c2:cb:22:67:aa:bb:0e:ba:a3:
                    73:a5:16:42:61:2b:81:e5:39:36:ef:b4:17:a8:3e:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:A6:B5:56:A1:65:D2:83:30:C0:10:0E:8B:07:C2:92:75:DE:A0
            X509v3 Authority Key Identifier:
                keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8c:7f:80:ff:89:c5:44:21:d7:c0:f4:68:4f:75:b7:fe:7a:
         2f:97:09:c7:ca:12:e1:19:b6:22:db:7d:7f:03:23:b1:cf:3f:
         bb:cd:62:b7:3e:67:c7:17:6f:f2:62:62:48:f9:f7:f7:f9:a2:
         5d:89:8b:0f:6a:85:ec:84:25:d7:d6:8e:25:b5:b1:30:47:07:
         d7:75:21:28:e1:fc:e4:da:54:a1:cc:9d:44:fc:28:75:b0:9d:
         88:73:ea:4c:74:06:1b:51:b2:19:90:a7:e2:cb:d5:d7:07:d3:
         15:f9:10:04:a9:69:06:57:b2:20:5f:f8:ef:04:1c:bd:a4:e9:
         ad:51:f0:25:63:9d:54:6c:79:01:38:22:ee:62:68:2e:b3:33:
         25:b9:16:bb:b7:11:ba:3f:b6:1a:84:8b:2b:0a:bd:ae:16:a3:
         4a:4a:8d:ed:2d:e7:f6:b7:8e:ef:19:e5:dd:12:1f:9c:40:c9:
         ca:72:d8:6f:92:de:87:42:83:77:e9:ce:54:59:68:eb:bd:5b:
         e5:50:b7:c0:b9:6f:66:66:6a:3a:a4:55:f0:75:9e:33:98:3e:
         b1:a9:24:b8:f6:29:1e:0e:73:80:15:9d:5e:3b:7d:db:aa:0d:
         5f:e3:7c:c8:76:86:69:60:98:5a:68:72:a8:de:02:71:ea:f8:
         13:4f:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:12 2025 by rpki-client