Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
File:                     mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json)
Hash identifier:          li4SooFaOq34AhwzkljC1g6N5c5bH/79MuH93feZvBU=
Subject key identifier:   B9:0D:75:55:9A:F1:B6:06:31:4C:0D:EC:5E:F5:36:10:8E:C4:FB:40
Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Certificate issuer:       /CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Certificate serial:       01989147FC13A1D3365F091EC5A895ABDE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 00:01:10 +0000
Manifest this update:     Sun 10 Aug 2025 00:01:10 +0000
Manifest next update:     Mon 11 Aug 2025 00:01:10 +0000
Files and hashes:         1: BFbItzgMXh2yCZ227Kwfzi1k3ME.roa (hash: 3p3Z55QLOu2JV1kUetHwILYBWmwCeLPU+vcoZy0JMPg=)
                          2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: lukl7+cHXKM9e2XJGhwnIlpXwXRAioiX4zQUXSTsLmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:47:fc:13:a1:d3:36:5f:09:1e:c5:a8:95:ab:de:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
        Validity
            Not Before: Aug 10 00:01:10 2025 GMT
            Not After : Aug 11 00:01:10 2025 GMT
        Subject: CN=b90d75559af1b606314c0dec5ef536108ec4fb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:ca:f4:4b:e1:15:48:de:b7:05:57:7e:5a:
                    a2:b3:10:84:0e:22:d2:90:90:49:0e:a7:60:ee:b1:
                    a5:f3:0e:52:7a:5a:a0:55:31:07:56:f9:ff:d5:d9:
                    3d:f5:8e:4b:96:6c:0a:35:53:d3:cb:08:7b:3f:81:
                    69:01:ab:b6:b1:28:7f:03:fe:1c:58:0c:24:79:fc:
                    b5:1b:fc:0b:bb:d2:9b:8b:bc:bb:c6:39:6f:4a:93:
                    26:fa:d3:9e:f6:d6:6e:fe:89:76:b3:4c:f0:2b:b4:
                    ab:08:fd:b9:12:6e:00:48:b2:6e:3d:3d:28:d2:d4:
                    d9:75:03:45:f0:bc:de:54:e0:21:8f:42:96:66:a1:
                    63:25:88:c1:64:ae:eb:8b:df:d0:8a:06:9b:92:fd:
                    81:cd:e9:c2:54:07:91:b2:fd:9f:f2:41:ed:4d:cc:
                    4e:7f:a1:94:32:c7:6c:78:7e:c5:38:24:54:48:6c:
                    41:2d:5a:85:ca:4f:ee:86:3b:39:f8:fe:48:bf:8d:
                    83:be:ae:de:c7:f4:b9:ef:6a:08:e3:3c:fe:19:e3:
                    1a:48:44:2e:aa:af:c4:57:ba:8b:b7:13:e4:15:d6:
                    4f:86:05:16:fa:58:5a:47:81:2f:c2:ef:4f:e4:84:
                    07:9e:63:44:e4:97:65:5b:9e:03:85:2f:ba:3e:9f:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0D:75:55:9A:F1:B6:06:31:4C:0D:EC:5E:F5:36:10:8E:C4:FB:40
            X509v3 Authority Key Identifier:
                keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:d9:44:2a:cf:30:d5:b7:29:b1:6c:b0:24:48:3d:5b:3d:
         a3:db:21:16:94:f0:2a:0f:5a:e2:3c:cf:2f:88:43:c9:2f:09:
         40:67:20:32:b0:b0:a1:43:e7:13:29:1d:e1:7c:86:9b:85:21:
         77:aa:41:c5:5d:23:7b:80:64:a6:45:50:4f:3d:6b:7c:de:72:
         fb:be:7b:40:de:e6:c3:b9:fe:cc:7d:4b:2e:3c:6d:39:9c:21:
         05:83:ea:45:6b:17:67:46:2e:e1:0c:d6:f6:b8:27:d3:a3:52:
         5c:09:35:74:bf:08:f4:39:9c:a9:63:53:b5:4d:be:99:90:36:
         8b:de:68:e2:23:b4:f1:d6:25:b4:98:88:91:60:4d:c3:66:a3:
         47:70:cc:4c:6f:c4:1d:23:2e:17:ab:a6:f5:97:03:8f:ff:20:
         18:1a:8e:b5:66:f5:90:0e:9d:25:52:93:13:c7:1c:11:9d:98:
         6b:6a:94:12:77:14:09:6e:e2:f1:eb:95:ee:98:62:27:89:7d:
         fe:4a:08:9b:d0:05:de:20:62:9b:a9:c1:42:1a:43:e1:ea:b3:
         b6:0a:71:ae:fc:42:bd:7c:b4:c0:cb:c5:95:23:27:41:8e:08:
         55:0c:85:01:0f:31:ae:66:c2:e3:6e:bf:f9:83:1a:af:70:20:
         ed:0c:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:12 2025 by rpki-client