Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
File:                     i9rBinrVAbp-oTVnkJ8X5PcydBM.mft (raw, json)
Hash identifier:          D/eKJT/hCdQFWOthh3wfmHPxMwMy3ItyIBPNRNLIkVs=
Subject key identifier:   37:5F:AC:37:78:40:19:1A:C4:CB:6C:E6:B5:EA:21:2C:8B:E3:10:EF
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Certificate issuer:       /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial:       01987AF6A3354FA64ED2073A1F5FF96B3891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
Manifest number:          158A
Signing time:             Tue 05 Aug 2025 16:00:40 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:40 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:40 +0000
Files and hashes:         1: 32R6bWlY_kT-IdzSOS6jUQoRg-4.roa (hash: xWfBJ4oVxeGqTJ5vFTiwfbecb58t1uRd3p+DZin3epw=)
                          2: HP_SsTP0iECRo2qQTfpc4ow4BYk.roa (hash: bGvpmINQH9SYwwDIsLytTIqIgfQUsNxOvfIPBHdX/N4=)
                          3: Q_hIcWDqn-PPQ56DLKDjeCBoXsw.roa (hash: MwFedjwgPwjvhrH7DUyYSiNCIyagEddbNZKwfOKaBy4=)
                          4: UbRiiNRPdI8MdUZD3H45dXG9KbE.roa (hash: ++edDwYhafn/DmjVTYR5FglX/ixBfBBX5Ov1+q3i1ek=)
                          5: _tBUXGLFeeKTNMit4od0RNATZXo.roa (hash: athIqN712Nn9ZvwJAZkQ9ogvGwW83fg7Abmm94I+u1U=)
                          6: hEJxhg9SzRAq0K6L58EjzXPZnDg.roa (hash: ccaUWhka+1gikh07jNowzbblvhiIUCKQLkaV3vwDt2Q=)
                          7: i9rBinrVAbp-oTVnkJ8X5PcydBM.crl (hash: sqpZ/coMfyxoKkSKye+CZ7jO33OTdXI9hMqwjFCREvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:a3:35:4f:a6:4e:d2:07:3a:1f:5f:f9:6b:38:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
        Validity
            Not Before: Aug  5 16:00:40 2025 GMT
            Not After : Aug  6 16:00:40 2025 GMT
        Subject: CN=375fac377840191ac4cb6ce6b5ea212c8be310ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:0d:b7:c1:b1:a4:c3:14:25:2f:df:80:0c:
                    a8:98:23:20:00:22:1b:e6:9c:c3:2b:4e:e4:f5:70:
                    15:c8:9e:4d:19:9e:d4:11:07:c7:8f:70:53:6a:12:
                    73:25:26:ad:42:7c:d6:a9:fa:85:31:d4:fe:4b:2b:
                    e9:63:c0:be:2c:ba:fe:34:5d:97:8b:f6:45:65:1f:
                    b8:63:1f:63:12:a4:12:24:43:ea:5a:6e:4f:94:1d:
                    15:d1:35:58:1f:90:cb:31:6b:73:a4:9f:52:b5:0d:
                    14:83:ea:53:78:f7:55:72:0d:a5:d7:79:87:bb:e6:
                    fb:83:82:79:b3:17:11:b9:5b:0d:75:e2:39:bc:0a:
                    c8:ef:6d:43:02:52:d1:5b:15:e5:28:e8:63:12:74:
                    01:12:4f:b9:a6:64:72:a8:92:49:35:c7:e7:58:d9:
                    12:95:51:4b:c3:96:88:2b:c3:73:53:30:97:97:af:
                    88:7b:af:cd:f3:df:bd:f6:90:83:de:25:6b:65:0b:
                    cc:5b:fc:b2:dd:da:8e:6c:2c:26:11:2b:ef:73:38:
                    4a:65:33:ba:c1:72:06:94:ac:e5:a5:d2:0a:6e:10:
                    f8:1b:1e:9e:cd:13:7c:60:b7:b7:91:90:a8:78:1a:
                    72:d5:ac:73:80:5c:e0:e0:f4:e2:fe:b0:53:03:58:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5F:AC:37:78:40:19:1A:C4:CB:6C:E6:B5:EA:21:2C:8B:E3:10:EF
            X509v3 Authority Key Identifier:
                keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0b:bc:ba:3b:c8:6c:c8:97:02:40:d1:bc:8d:39:f0:50:51:
         3a:8e:ca:a4:c4:86:7c:30:65:05:b1:4c:0b:c3:8c:d7:04:ba:
         1d:31:41:fe:f2:d7:e5:63:ad:0a:fc:da:91:f1:34:1e:a5:27:
         32:f9:76:4b:a3:9a:b8:e5:e3:fa:e6:59:30:ec:aa:67:22:84:
         24:25:f3:0d:7e:b6:81:12:6d:f3:1f:ef:e3:6b:82:64:3f:7e:
         d5:8e:f2:44:59:b0:89:93:36:a4:c8:a9:98:e4:9d:ce:ff:25:
         73:bb:ed:5c:97:29:16:b0:4a:66:11:77:55:f9:cd:a6:c8:9e:
         74:2c:8c:54:17:10:5f:9d:80:eb:dd:ca:81:10:4f:0e:e7:9e:
         ca:77:b4:29:da:56:8d:db:cf:9f:16:35:f8:ea:cd:07:84:33:
         03:f8:e8:c4:db:d4:2d:5f:10:15:4f:ee:10:2d:2d:30:7c:7f:
         25:f7:63:8e:25:40:3c:aa:1a:7a:59:20:db:cd:df:7c:44:76:
         6b:5a:4c:bc:3d:c0:0d:ff:0b:52:8a:f8:5d:54:36:f4:93:61:
         7d:9c:43:23:8c:c4:a2:ba:f6:47:7f:3f:14:6f:92:50:3e:b0:
         34:9a:8c:66:6f:12:7d:ce:b3:e7:72:9a:de:a5:1d:a5:bb:ec:
         50:93:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:21:42 2025 by rpki-client