Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File:                     M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier:          ghMdomKXeJAolUF8oQrGNNOUsbfUj6FBacjR2Rv6Zww=
Subject key identifier:   EB:B6:B9:0E:FA:3C:E9:79:A6:B1:86:51:31:42:FE:0E:C9:AC:20:26
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer:       /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial:       01989592123D4AAACF95028D82E4651A0318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 20:00:34 +0000
Manifest this update:     Sun 10 Aug 2025 20:00:34 +0000
Manifest next update:     Mon 11 Aug 2025 20:00:34 +0000
Files and hashes:         1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
                          2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: fWW6yrmSLeFfDNQtBQsXgxs61gv/n19bqHPv3Evl4IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:12:3d:4a:aa:cf:95:02:8d:82:e4:65:1a:03:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
        Validity
            Not Before: Aug 10 20:00:34 2025 GMT
            Not After : Aug 11 20:00:34 2025 GMT
        Subject: CN=ebb6b90efa3ce979a6b186513142fe0ec9ac2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:76:86:49:57:7c:12:2f:cb:a8:2b:74:75:
                    e3:13:f0:67:0d:55:18:05:3a:86:1e:e0:37:42:d4:
                    74:a5:38:eb:86:32:43:75:8b:11:06:7d:0c:9d:04:
                    95:a9:b1:e4:80:4a:6f:03:e5:ba:a1:53:76:b2:d3:
                    0c:1e:5c:35:66:f7:f7:54:4f:b4:7d:8b:1c:77:7f:
                    a8:5a:48:e6:0d:7e:3d:8e:ef:4c:55:bb:bc:40:13:
                    73:92:c1:c1:1e:6f:c6:69:6c:61:44:82:79:a6:34:
                    5d:b3:6e:5d:a1:27:b4:00:f2:de:77:cf:6b:f1:0d:
                    d2:0b:0d:85:97:92:4d:38:da:48:67:bc:20:0a:f4:
                    15:b0:f9:2a:89:2e:3c:d0:3d:df:99:65:5d:32:c5:
                    b6:af:71:80:42:37:73:c3:52:da:3f:ec:41:d0:d5:
                    53:32:c5:10:5a:45:25:f3:7b:ff:1a:db:82:47:f8:
                    a9:26:e3:3b:b5:86:64:ac:6e:49:de:f7:b8:65:c9:
                    2f:d6:a7:3d:65:c3:b2:2f:37:86:0b:5f:d8:bc:55:
                    4a:1b:1b:be:9f:97:f4:de:a9:fa:8e:04:a4:bd:b4:
                    c6:b4:1d:a5:1f:78:be:67:26:84:35:21:ea:07:7c:
                    60:b7:25:23:5b:0e:19:7d:88:30:18:cc:39:87:2c:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B6:B9:0E:FA:3C:E9:79:A6:B1:86:51:31:42:FE:0E:C9:AC:20:26
            X509v3 Authority Key Identifier:
                keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d5:0a:3c:bb:3e:0a:4d:6e:ef:00:6b:1b:0d:32:23:ae:61:
         50:c6:bf:db:41:e9:cb:80:f2:29:62:3a:5a:97:45:44:f8:d4:
         a5:c0:8b:3e:91:fb:34:d1:9a:bd:1d:75:e1:41:47:de:8c:06:
         c1:68:8b:8a:f5:1b:79:5c:3a:5b:da:b2:37:58:76:3f:11:ec:
         ab:39:16:e2:34:9f:b0:f2:00:8e:8b:49:a9:3a:1f:1f:d9:6a:
         e5:c1:35:c2:53:af:7f:d9:14:71:8e:a4:15:b2:2e:94:e2:12:
         1b:37:03:48:01:8c:96:f1:c6:2e:b6:f9:14:33:35:f5:a4:d0:
         8f:d2:42:55:4e:45:c1:ec:cc:ac:0b:df:72:f3:ab:3a:16:6a:
         d9:4d:6b:c6:a7:f2:ee:02:ae:76:af:6c:93:ff:ea:07:05:55:
         3d:14:8f:48:6c:d0:e4:ad:d6:3c:fc:e6:5b:1d:75:b5:09:90:
         f0:52:07:b1:19:a5:68:91:a0:17:2f:14:c3:81:da:61:24:c1:
         93:4b:b5:08:ff:98:a7:f6:16:5b:11:7e:36:c1:ba:2b:ce:f3:
         4e:1d:24:05:e8:af:7d:9b:2a:fd:41:00:7c:0a:3a:75:b0:f2:
         76:0f:35:74:80:c1:7e:ec:d4:0f:6b:c6:e4:d3:a9:28:fa:0a:
         bb:ad:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:47 2025 by rpki-client