Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
File:                     SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json)
Hash identifier:          H5afbzPi/ElgylL7KlOgnDff7AZukmLIae+oY4g8ss4=
Subject key identifier:   4D:46:77:38:D7:22:CC:7F:D5:1B:80:C0:F2:8D:36:A7:4B:2B:DE:7C
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Certificate issuer:       /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial:       019875D0E2784EECA6D6D6F13CF8BB20174B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
Manifest number:          06D8
Signing time:             Mon 04 Aug 2025 16:01:20 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:20 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:20 +0000
Files and hashes:         1: HfFJEDDUnETMgv_-tGTektHgOG0.roa (hash: n6Dq1dMrKgJPnJf8bwIr5DpzEFmjQ+eea+XVV9e+HTg=)
                          2: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: Spnk1h+oINdV7xH4SPka8S966yhzecKMLvAnxF+4xGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:e2:78:4e:ec:a6:d6:d6:f1:3c:f8:bb:20:17:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
        Validity
            Not Before: Aug  4 16:01:20 2025 GMT
            Not After : Aug  5 16:01:20 2025 GMT
        Subject: CN=4d467738d722cc7fd51b80c0f28d36a74b2bde7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:8a:37:bc:c3:9f:61:53:01:46:24:4c:eb:
                    56:68:0f:42:19:df:9c:14:fb:81:11:d6:62:4d:91:
                    1a:ca:bd:16:c0:77:22:03:8d:d0:d9:94:50:ae:d6:
                    97:9c:f8:5f:a9:ea:b6:14:59:db:1d:54:97:e0:50:
                    c8:e2:3d:e0:b1:59:75:ee:78:27:74:10:0e:c2:5c:
                    29:8f:33:b7:d0:85:3a:95:6f:b8:13:08:1e:8b:ad:
                    0d:10:6f:e9:cf:e3:37:c8:63:c4:38:fc:58:fe:35:
                    55:f0:bf:26:eb:03:9a:dc:8d:8f:96:08:a8:26:4e:
                    97:51:bc:a7:6a:c9:b9:e3:1d:7a:59:d2:12:ed:2f:
                    ed:c4:96:70:5a:62:8d:c7:40:b5:3c:4f:70:6e:50:
                    2a:a4:04:ce:9a:d7:6f:cd:5f:a3:31:ef:c7:a5:0e:
                    67:f4:e2:62:5f:5a:42:64:d2:55:65:2b:c3:d9:46:
                    ef:73:c0:37:b3:3e:ae:3a:5b:fb:2b:45:c2:64:1b:
                    fb:b3:56:c1:5a:fe:18:8a:ca:77:4b:2a:ae:cd:df:
                    78:f0:b6:bd:92:56:47:f6:6f:a8:2f:50:11:2a:27:
                    f9:ac:0e:e9:cb:eb:02:73:e0:5f:b6:eb:d4:4d:e2:
                    e1:c5:4d:6e:87:4e:25:60:19:31:05:cd:17:9a:da:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:46:77:38:D7:22:CC:7F:D5:1B:80:C0:F2:8D:36:A7:4B:2B:DE:7C
            X509v3 Authority Key Identifier:
                keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ea:4e:7f:a8:61:a1:89:d2:c1:c1:4a:d8:05:0e:6e:6e:3f:
         77:73:20:c0:ac:a0:54:26:bf:43:7e:c9:4f:80:6c:26:72:07:
         0a:16:f0:c3:b2:2a:70:70:72:c5:cd:35:26:a6:47:9a:db:1d:
         87:3f:92:b9:39:c9:58:0f:20:70:ea:50:b6:83:dd:f2:de:4d:
         cc:0b:c9:b7:21:4d:b1:db:c3:e6:05:9f:4a:e5:54:80:f6:2f:
         cc:5e:2c:c2:ad:bc:76:9e:5c:8c:19:d5:ca:5f:44:6d:d0:33:
         ff:3e:8a:9f:e8:92:bb:cc:dc:0e:30:f1:44:d4:ed:d0:3e:93:
         ff:b8:34:02:97:a4:44:be:f5:f7:7c:69:c3:de:b9:33:b9:28:
         22:02:53:c2:c0:6e:68:7c:20:69:13:d3:e3:fe:9a:18:86:92:
         0d:2b:cf:ef:f8:92:ee:d3:6b:64:ea:50:a4:b2:4c:12:ba:d0:
         67:e4:7e:0e:66:a6:dc:7e:e6:cb:58:a4:9a:71:3a:93:77:42:
         b0:4d:2b:6d:12:69:d9:3b:28:23:ac:f2:f4:12:fa:e1:b8:b9:
         67:1d:d9:b8:1d:8d:5c:d1:a7:61:e3:13:ed:e8:8d:42:4a:ba:
         dc:0f:b4:27:9c:c7:81:0f:66:fc:99:ff:94:55:a2:5d:aa:60:
         5e:9d:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:06 2025 by rpki-client