Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          ppBxKNtJVcEWrztd/xT6V8xXfz3JdLQz+VdB7+EW9DY=
Subject key identifier:   D9:9D:EA:FD:42:CE:74:6A:9D:4B:DA:40:44:93:62:C7:21:AF:3E:7C
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019893367D3F9D1688E0E5EAEFF097F67B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          0F86
Signing time:             Sun 10 Aug 2025 09:01:18 +0000
Manifest this update:     Sun 10 Aug 2025 09:01:18 +0000
Manifest next update:     Mon 11 Aug 2025 09:01:18 +0000
Files and hashes:         1: BkC382kbRID_J9MdHf3y_ZWlEf8.roa (hash: ts/8AAif8Jl4mhcHO6WxEGvpSqp2TwktqqlEa+sbGTU=)
                          2: ONKHpYimKuwzn77m9LydYFbzpRY.roa (hash: 8J246+Nt2Y+QpfgD1sKVEVeqnWKlH8aPvihNQisvlT8=)
                          3: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: PCDEcF+TsdHIXxcvjzAH4/5WWh/nhVLmsHeVscgzEjM=)
                          4: k2qVus75QweqwVLaTzgWKFt2l2k.roa (hash: FHRO2hiAAv4cLirtut9emqOb7BfOEUoCLYXrQqlQbt0=)
                          5: kBFDTimH0wXzN6bZHwFh18BZ9YQ.roa (hash: gXdNyTqShsEpC9gTq8XtRziYkmToBDMK/+q0FeGIxLk=)
                          6: utnanlwrMPvqo9oUFO7C-isrnws.roa (hash: hoqvLMB2exZaW3zQIo0VGKfu9n9CN2+OhypTj5cWUUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:7d:3f:9d:16:88:e0:e5:ea:ef:f0:97:f6:7b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Aug 10 09:01:18 2025 GMT
            Not After : Aug 11 09:01:18 2025 GMT
        Subject: CN=d99deafd42ce746a9d4bda40449362c721af3e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:c2:6b:a1:1f:c1:b0:7f:a8:f7:20:6d:86:
                    13:e8:55:1c:76:d4:11:9f:60:a4:fd:65:49:ae:60:
                    45:e5:39:e7:df:80:27:b8:6d:75:25:c8:f7:a0:cd:
                    14:a2:ed:d0:64:e1:f5:90:28:d4:a3:97:ed:c6:5c:
                    29:72:90:fc:8a:73:f6:88:b3:dc:3c:77:b0:69:25:
                    08:b5:21:71:dd:36:40:64:5e:f9:7a:c2:42:52:32:
                    2d:f8:cb:a7:9d:ec:26:aa:c6:2e:82:bf:85:0b:5d:
                    3d:cb:6d:f9:4d:0f:e7:1d:62:c5:1e:c4:4e:30:fc:
                    f8:cf:1b:fd:ad:47:4d:2d:da:41:47:25:08:5a:b0:
                    6e:cf:ee:e7:2d:09:3e:40:4b:19:8b:15:33:b3:d0:
                    e8:fe:7b:5c:92:b4:83:51:75:5f:87:89:9a:6e:2a:
                    57:16:9c:85:32:60:ab:6e:37:50:8e:20:2f:ba:c5:
                    33:bf:06:59:00:da:bb:fa:f3:2d:84:2f:e6:f9:b9:
                    46:6f:c5:fe:ec:dc:43:b6:1d:4b:a5:d2:00:de:bf:
                    32:7b:14:f0:2f:7a:5d:05:02:39:5f:28:30:92:09:
                    66:01:e4:50:8e:c4:b3:2a:bb:eb:4b:d0:9d:d6:dc:
                    4a:c5:88:b4:72:bc:02:ce:a6:73:6c:00:98:19:0b:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:EA:FD:42:CE:74:6A:9D:4B:DA:40:44:93:62:C7:21:AF:3E:7C
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:43:4a:fa:38:b8:b6:13:71:7a:e4:9f:8f:40:0b:d8:66:69:
         38:cb:c4:2d:b3:59:0b:c3:9b:1d:90:cd:89:36:43:0f:5d:34:
         d4:f1:cb:36:bf:a8:2c:9c:4d:66:81:23:94:aa:7e:6b:8e:55:
         8f:0e:66:33:22:26:5e:62:23:1b:cb:b2:d5:a1:6e:41:4a:7b:
         02:ba:a0:4d:31:fa:d0:61:ce:7a:2e:ac:b2:03:2b:c2:95:ed:
         9a:62:45:f2:e8:2d:3a:6a:29:0b:1e:c6:8e:07:75:45:17:f2:
         8d:d5:bb:0b:a8:48:d5:eb:a4:c2:2a:27:13:72:b4:e8:71:3a:
         93:2f:ff:67:9c:a2:97:5a:2e:4c:6b:a1:04:f8:27:27:c0:23:
         02:53:24:ac:b4:ea:f5:9d:75:7f:df:2d:bd:ab:bd:b0:1a:79:
         fb:44:82:4e:e3:e1:14:c8:3b:0e:ae:3b:1e:26:a9:92:e9:95:
         47:98:6b:c1:69:4b:25:bd:8a:74:e9:a0:db:5e:d5:1e:0a:67:
         c0:bf:97:11:a6:da:f5:4d:af:ea:f3:bb:64:aa:ff:8f:b1:c4:
         36:ba:5f:7d:d4:f7:aa:5b:43:90:7f:77:47:28:4c:3d:05:49:
         ac:1d:f2:b3:00:94:6a:32:d8:7f:ce:cb:c8:41:a1:05:a8:d9:
         f5:dd:ab:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:09:41 2025 by rpki-client