Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
File:                     67wNYL06kL1eMVCd6t9EcHaweNg.mft (raw, json)
Hash identifier:          VCxKuwZk0BVFvn5tR7NYItVTqF5LHTd9NZdzzCxr8NA=
Subject key identifier:   54:D6:CF:E4:71:49:07:D7:DC:AE:4F:C7:11:8F:C7:20:63:94:6A:A5
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Certificate issuer:       /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial:       019873E3D1FD17210B4A08D488F52F6FE251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 07:02:46 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:46 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:46 +0000
Files and hashes:         1: 5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa (hash: 9aHvAui4+yZdhtJErGw75MAtLb8+QGjtqwMfMZbFd3M=)
                          2: 67wNYL06kL1eMVCd6t9EcHaweNg.crl (hash: V8SrRsUDfPlLXnNJMVhABrvthzqBBQ6u2rOtyXVNJao=)
                          3: QvxWT4xY-nx_D6ZNWO2yetZnnpQ.roa (hash: 5hYT1EwCoWhfN9hDbCeHVlJcTh6HqFEGgKcOBfv7338=)
                          4: lzphi4MxBp9BaUcphSOwLVmwZEE.roa (hash: P65ZeDMhywEETdGJgUa5vU1aMaDLOyoDprfHHXlTBBM=)
                          5: v3SWv1n837zLkNGdleDKsMBQDv0.roa (hash: O8MJh8aunH8A9IiDr50FU3GzSB/FL6Wl7jBlBla6VVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:d1:fd:17:21:0b:4a:08:d4:88:f5:2f:6f:e2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
        Validity
            Not Before: Aug  4 07:02:46 2025 GMT
            Not After : Aug  5 07:02:46 2025 GMT
        Subject: CN=54d6cfe4714907d7dcae4fc7118fc72063946aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:47:a5:c5:55:3c:11:5d:b7:38:22:b1:f8:
                    3e:51:e8:fa:0a:6e:1a:6d:8f:bf:4b:dd:31:6c:89:
                    16:ac:b8:42:9a:75:13:fc:b7:7d:d9:33:06:f3:22:
                    79:45:68:fc:9e:84:00:28:7e:a5:9f:16:18:4e:f7:
                    de:6b:9a:05:24:b7:b2:9f:76:5b:2a:a4:34:a5:82:
                    56:80:36:89:05:3f:e1:de:b9:76:36:33:29:be:10:
                    61:58:b6:bf:7f:fa:9a:ea:81:3a:a6:57:bf:20:88:
                    75:75:31:09:de:6f:c9:0f:11:5c:cd:ad:c0:09:47:
                    18:c9:0e:74:6f:03:81:ac:e4:df:4c:eb:58:7a:dd:
                    be:c8:1d:22:16:3e:d4:ef:97:23:de:d8:10:a2:ad:
                    01:9a:bb:1a:d1:94:03:d7:11:24:a7:5b:34:55:62:
                    4d:e1:ca:b5:6b:b4:fa:46:1f:9b:0b:76:30:85:ed:
                    8c:75:78:d0:ce:da:a8:66:1f:a4:b4:be:5a:28:9f:
                    ea:9c:d0:5e:7c:fc:87:dd:30:48:9a:0e:db:43:b4:
                    59:8b:8f:da:06:ee:9f:59:f2:59:32:c3:d9:1d:7c:
                    ac:73:99:d3:5b:ad:5e:d6:ac:ff:80:7d:bb:da:a1:
                    0c:2f:c0:b4:3c:e4:fc:2a:f3:92:eb:2f:fe:5c:36:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:CF:E4:71:49:07:D7:DC:AE:4F:C7:11:8F:C7:20:63:94:6A:A5
            X509v3 Authority Key Identifier:
                keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:de:49:36:b2:20:3f:95:56:bc:74:c2:36:52:06:61:c4:63:
         4c:52:cc:66:b6:28:0f:7a:ad:21:d5:84:1f:25:ac:8e:84:e1:
         dd:42:b5:a1:a9:e8:64:9a:ac:81:4e:64:b1:b2:18:8d:4e:20:
         2c:86:fc:3b:c5:ea:5e:01:d0:3e:b0:52:cc:42:43:d3:33:e7:
         8c:b3:09:99:ae:1f:5e:91:b9:58:9a:4a:bd:42:6b:61:df:3d:
         fe:1c:ef:bf:dc:a5:61:2b:7a:05:92:af:56:9a:d4:da:75:bf:
         b1:4f:cc:87:6a:3f:c6:ed:ac:1a:72:c7:77:8e:b9:81:12:e5:
         33:66:a6:ee:b6:43:e3:6c:1b:95:95:9e:72:34:2b:d6:06:ae:
         44:c1:fd:56:46:3d:0a:4e:a5:40:53:a0:1e:14:17:9a:70:d1:
         b4:c7:d9:4d:e0:dc:08:2d:fe:5f:ac:3b:4d:69:28:de:91:5a:
         8a:eb:b0:5d:6c:05:11:5e:b9:07:c6:6f:f2:ca:e6:7b:19:23:
         f7:ab:7d:c1:72:4d:c0:21:cb:0d:8c:e0:88:26:d0:54:a6:00:
         82:a8:6c:d8:17:68:84:65:6b:89:a7:a3:32:13:df:73:be:26:
         c6:15:f3:2d:bb:fe:f9:df:83:6d:56:ae:db:c2:2c:c1:20:5c:
         89:3d:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:39 2025 by rpki-client