Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File:                     cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier:          LkuRI8lnUzzL0ausQxIcDmYzJyF/D5XZRMXIprx3XVU=
Subject key identifier:   1D:30:81:B5:09:AE:16:C0:89:DC:CA:96:E0:05:A7:42:9B:DE:FB:BF
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer:       /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial:       01987E9C6948C55A31D145DE021386068261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number:          1615
Signing time:             Wed 06 Aug 2025 09:00:36 +0000
Manifest this update:     Wed 06 Aug 2025 09:00:36 +0000
Manifest next update:     Thu 07 Aug 2025 09:00:36 +0000
Files and hashes:         1: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (hash: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=)
                          2: F98rZRsLL_WSYn3n29uuLg-FPR0.roa (hash: 73uq7x903k93laF4iGlteDX6rFg0Y3etQUcDdi1l7lg=)
                          3: R66tp2YspSa0WKGVVBRpgjOOMSc.roa (hash: vAJd7pQTatYNcNboScZHezKRexmDJyWedTR7sHg29G0=)
                          4: VPHhytFNuubbFjm4tYvAl8Nd2ZE.roa (hash: 6/FzWhj3KyFvDY5lx/pXSGk3g0b0b2s63jOD/2yTOio=)
                          5: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: XB6SOZc2h5sCmI7HORPH7HhrpyIAWNINaGNh7BsQnUc=)
                          6: zMZkIjmJ2QpgvnpDUAinKvhQb1o.roa (hash: Y7E9I/njb2IhcUidLKH3fAcdQ31FJYDtFn4eagm4C1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:69:48:c5:5a:31:d1:45:de:02:13:86:06:82:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
        Validity
            Not Before: Aug  6 09:00:36 2025 GMT
            Not After : Aug  7 09:00:36 2025 GMT
        Subject: CN=1d3081b509ae16c089dcca96e005a7429bdefbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:98:2c:3d:54:a7:12:41:38:f4:3f:32:f7:18:
                    71:8c:d6:3a:c3:b0:bb:f0:99:d7:04:a0:90:de:d3:
                    11:bb:f8:cf:35:9e:6f:65:51:ba:53:e4:9e:20:e6:
                    bb:c6:29:13:1e:aa:f9:d7:20:2e:4d:a6:c2:4b:9d:
                    c2:09:2d:bc:8b:a9:46:64:2f:28:8e:e1:99:c1:f7:
                    e7:31:cf:07:97:f9:46:f6:2e:3d:01:bf:d7:c3:5f:
                    73:ae:25:05:10:3e:72:a0:4e:27:4d:0b:de:e2:a8:
                    b5:58:d8:0c:75:65:0f:77:43:5f:4d:92:fc:17:ee:
                    c3:9d:5b:b1:1e:07:28:36:c6:76:9b:5a:8d:c0:a9:
                    fc:22:27:b8:96:0c:79:43:4d:a5:5e:77:69:22:bf:
                    44:20:3c:10:1a:4c:19:a2:60:db:0b:b1:c5:89:9e:
                    68:c1:1e:ec:26:68:95:aa:96:b3:09:80:1a:1e:28:
                    95:65:d3:3d:06:13:19:49:75:7a:84:dd:07:04:cc:
                    a6:32:d4:d2:9c:26:f4:08:93:0e:4e:df:df:29:29:
                    a8:dc:08:56:d3:39:c6:02:d5:a0:f3:84:e7:08:d5:
                    a8:af:c7:d9:9d:f0:50:38:4a:e0:7f:2b:c8:b2:62:
                    d1:06:6c:c1:93:ca:aa:46:4d:e5:1c:d7:ec:0d:28:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:30:81:B5:09:AE:16:C0:89:DC:CA:96:E0:05:A7:42:9B:DE:FB:BF
            X509v3 Authority Key Identifier:
                keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:14:4c:7f:01:55:8e:9f:cc:d6:76:7f:91:ea:bd:2c:53:03:
         bd:ea:b7:7e:54:8f:08:48:be:98:80:fc:d3:db:46:cd:86:07:
         7b:3d:18:ff:7f:67:6b:ba:a8:38:3d:71:86:37:7f:6a:fe:83:
         ce:47:d6:5d:9a:e8:2a:ad:4c:5b:6c:15:09:6b:74:59:37:61:
         b5:fe:17:45:46:2c:c7:e0:33:15:1d:54:13:e4:db:f0:6f:eb:
         a4:84:ff:3a:37:9d:11:c0:24:4d:79:bb:c2:92:0c:52:89:b8:
         18:00:10:f4:73:c3:8e:ce:fa:ca:94:83:02:ce:96:21:cf:f2:
         0d:57:bd:43:fb:3b:dc:e6:3e:b1:aa:dc:86:46:7d:56:a7:64:
         dc:fd:6c:9b:2f:1b:b4:e2:53:b8:1e:4a:78:35:fa:06:82:37:
         7f:fd:ff:70:4d:af:39:24:68:bf:32:0b:5e:1a:3d:90:39:3d:
         e4:cc:b4:c2:0d:2f:80:7b:41:5c:e2:50:9e:c1:21:7d:a7:86:
         26:14:6b:e8:5a:cd:b7:1d:9d:08:86:b2:fe:e5:ef:05:b1:01:
         42:f5:06:22:b7:e5:f5:e5:1c:44:0e:0f:7f:c6:61:e7:ec:41:
         44:c3:38:5c:18:0a:5f:56:9e:7d:a6:c2:ba:26:7e:85:0b:12:
         16:e8:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:16 2025 by rpki-client