Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File:                     Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier:          hhFd4kiHGIgIxn7yUmRUNQO3BrTy2kaH5+1HloPWq5U=
Subject key identifier:   DF:1E:F2:AD:22:5C:30:95:6C:90:C3:8A:28:FA:BC:D9:1E:3A:2E:29
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer:       /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial:       019893DABD2ED4495FC7342BC701C91F6026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number:          079B
Signing time:             Sun 10 Aug 2025 12:00:42 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:42 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:42 +0000
Files and hashes:         1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: OnmQ1VfYy33eCGXklETYW7knTDHvL6kr2NPjRWNsHbw=)
                          2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:bd:2e:d4:49:5f:c7:34:2b:c7:01:c9:1f:60:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
        Validity
            Not Before: Aug 10 12:00:42 2025 GMT
            Not After : Aug 11 12:00:42 2025 GMT
        Subject: CN=df1ef2ad225c30956c90c38a28fabcd91e3a2e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:b7:01:f6:0e:e2:ea:75:45:70:71:a7:c5:
                    a5:b4:ef:63:e0:7a:09:17:e6:3a:a9:b2:99:42:df:
                    cc:ad:7a:8f:c1:96:30:85:63:4d:8d:63:06:ae:b4:
                    fd:fc:ef:d7:5d:79:b3:6f:c0:6e:3f:34:22:17:98:
                    71:92:20:0f:50:3a:b8:74:cb:09:64:a3:f9:a4:8a:
                    9a:e4:fd:8a:97:97:f8:ca:83:b9:1d:ca:fd:d4:97:
                    48:fa:0f:80:f0:7c:0a:d6:10:1e:39:0b:33:05:88:
                    52:7a:cb:f2:50:e4:95:6e:be:26:f4:dd:e6:12:80:
                    94:55:59:d2:77:10:77:aa:8b:76:14:c3:58:73:20:
                    f3:9e:b1:21:84:5d:93:06:cd:29:b2:30:a6:c7:f5:
                    19:01:92:44:16:15:ae:6c:a0:eb:df:f5:f5:cd:de:
                    ce:42:1e:35:60:8f:d7:e2:d9:28:f1:94:d9:3f:93:
                    fd:34:f9:a7:7f:86:db:9f:36:89:89:e9:db:de:df:
                    ca:e1:b4:07:9f:89:f7:52:d3:0a:fe:37:9d:52:a3:
                    a1:8a:b0:2c:8b:0d:21:f9:ab:86:5d:69:2e:ce:1c:
                    66:e3:2b:d2:eb:54:16:0d:7e:ff:d0:6e:27:c7:57:
                    8f:5b:46:4e:f5:22:9b:72:aa:ca:ac:41:9a:77:48:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:F2:AD:22:5C:30:95:6C:90:C3:8A:28:FA:BC:D9:1E:3A:2E:29
            X509v3 Authority Key Identifier:
                keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:b6:34:c8:13:2a:e9:94:60:10:18:c5:be:94:07:45:23:
         32:ce:de:b2:f5:ca:9b:6d:58:45:7c:ea:8b:9d:55:2b:2d:b7:
         cd:ee:87:5a:bd:4d:cb:83:79:cd:39:5b:cd:e1:1a:1a:dd:47:
         b9:7d:0a:a2:07:be:26:f1:ac:72:7c:4d:4a:fe:c6:38:2b:9b:
         fe:01:18:1c:35:1b:4d:b5:75:27:32:19:df:c1:d7:da:da:ab:
         34:cc:8b:70:f6:92:f1:8f:ff:89:13:a8:0c:f0:30:e0:be:bc:
         47:36:6e:d6:d5:4e:0d:7b:1f:b4:5e:d5:af:28:5f:57:c9:25:
         39:c3:d9:f2:2f:0f:c3:12:cf:42:47:ea:65:87:02:f5:39:94:
         44:12:6f:33:ad:32:6a:2a:c4:11:7d:b4:d9:5b:bb:da:ea:47:
         bf:ba:b7:b6:fc:e1:a6:da:36:9e:89:cc:ce:50:a8:4d:11:3c:
         1d:74:0b:73:19:70:b6:da:a9:92:2a:ac:dc:63:2c:7e:05:95:
         ef:1f:df:80:f5:05:da:2f:d9:92:0c:4c:90:d3:22:9b:62:76:
         fd:a5:90:d2:65:07:2c:f1:7e:b3:e9:1f:f0:4f:af:5f:f1:11:
         46:80:35:41:d4:c9:e9:65:00:d8:82:66:b2:84:a3:f2:dd:ae:
         72:44:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:56:53 2025 by rpki-client