Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File:                     m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier:          KHhj/KEXDN3lMeMcU1pluMkC1UrzroJHcrDsezFVizg=
Subject key identifier:   C7:AA:DF:2C:6B:88:1E:E9:FE:C2:83:C7:5C:49:AC:CC:5C:95:EB:93
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer:       /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial:       019875629740B928B4E556375B4616C5417A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number:          11F9
Signing time:             Mon 04 Aug 2025 14:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:52 +0000
Files and hashes:         1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: Wrcw/Jck4xMwvpBR7NMhtbriHxIe8tJ5cyW2voHCmQQ=)
                          2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:97:40:b9:28:b4:e5:56:37:5b:46:16:c5:41:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
        Validity
            Not Before: Aug  4 14:00:52 2025 GMT
            Not After : Aug  5 14:00:52 2025 GMT
        Subject: CN=c7aadf2c6b881ee9fec283c75c49accc5c95eb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:85:03:57:f7:d2:c0:b4:2e:c2:b4:c4:a6:
                    9c:03:37:a0:80:c8:53:01:73:26:de:32:35:0b:55:
                    2f:f2:d5:6a:e8:34:a1:0d:e8:ad:69:9d:af:4e:32:
                    bf:b1:ed:7b:f5:30:33:e2:c4:31:8d:b5:21:0f:45:
                    d8:b6:54:4f:64:45:d1:b5:84:77:40:68:12:da:6a:
                    5b:e7:7b:58:93:f5:1f:60:78:36:61:d2:3a:7e:07:
                    7f:8a:4a:8f:ff:92:e3:68:19:2c:47:4f:81:88:1a:
                    07:72:33:ce:6b:4c:8e:6b:74:35:8d:4c:f0:a9:26:
                    49:71:30:0e:c3:d9:8a:04:15:65:5b:f7:37:10:ad:
                    2a:0b:57:4c:b6:f0:c5:6d:31:2f:ea:09:63:0d:57:
                    66:77:a2:a9:f6:b1:51:fd:ba:1b:3f:ee:a0:e8:7c:
                    8e:c0:01:1a:cd:77:25:2f:78:b3:9b:55:fe:c4:7f:
                    2a:3a:da:61:c7:16:67:0b:d1:4a:e1:be:b0:6e:da:
                    6b:cf:d4:d2:ee:d7:87:53:54:00:2e:c9:59:f1:80:
                    c8:7b:eb:07:b3:42:ff:4f:51:48:4e:c6:6f:ff:f6:
                    2f:62:f2:fe:5b:1e:90:06:af:5a:1e:46:8d:8c:6d:
                    48:48:97:fe:2f:bb:84:4d:8d:a0:d9:af:a4:e2:59:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AA:DF:2C:6B:88:1E:E9:FE:C2:83:C7:5C:49:AC:CC:5C:95:EB:93
            X509v3 Authority Key Identifier:
                keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:db:12:c1:81:e2:eb:d4:f0:da:6e:ab:9b:71:9d:2e:b4:
         56:5c:62:94:36:59:ea:f8:a6:7e:b6:a7:f3:f7:b0:fe:94:05:
         fc:a7:94:c7:8a:18:38:54:e7:24:ab:4e:84:2d:f8:d9:dc:3f:
         cd:f5:13:c3:13:b7:3f:1e:de:d7:52:22:65:23:b4:54:5e:2d:
         de:27:25:fa:c7:40:02:6b:87:13:33:9b:00:52:af:fb:dc:da:
         b5:ab:27:b6:18:b3:23:99:48:a8:4e:f5:7d:af:70:cd:08:23:
         0d:bf:6b:b2:b0:8d:4e:16:05:3e:54:f4:ef:6e:c8:fe:d1:e7:
         db:24:67:08:d9:13:9d:f0:29:bb:21:e0:0e:55:38:a8:d6:24:
         98:7c:b9:c5:e2:54:8c:9f:3f:89:24:8a:c4:e0:74:37:a0:94:
         ae:d3:92:e1:96:1e:a2:02:43:54:43:2c:bf:ac:45:98:06:d4:
         9b:34:c7:80:c5:e6:22:a4:fb:f4:62:2c:16:f8:0a:7f:a1:ab:
         f3:dd:20:cd:40:ca:1b:32:f0:a7:56:d4:23:2f:b7:36:a1:60:
         8e:b6:fb:de:07:cd:9f:78:18:00:95:ea:01:bd:43:c6:f4:fa:
         47:ae:1b:24:6a:69:14:70:b5:60:82:5c:c2:03:6f:a6:8d:db:
         77:0f:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:30 2025 by rpki-client