Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File:                     _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier:          /Sw5OwJtzrGvxWd2u1z1MloaU/3DpR3pFqrnqn2SCU0=
Subject key identifier:   F4:00:B5:CC:DE:CB:2B:28:C8:28:12:55:09:7F:5F:76:C1:5A:EA:1D
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer:       /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial:       019872985A94257EB69A0FD73C215FC7A2B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number:          15A7
Signing time:             Mon 04 Aug 2025 01:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:43 +0000
Files and hashes:         1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
                          2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: uAxX4F5zqiZiBk5+At/0VU1v+MzxdSmqF7nuSKksUt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:5a:94:25:7e:b6:9a:0f:d7:3c:21:5f:c7:a2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
        Validity
            Not Before: Aug  4 01:00:43 2025 GMT
            Not After : Aug  5 01:00:43 2025 GMT
        Subject: CN=f400b5ccdecb2b28c8281255097f5f76c15aea1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:05:08:45:cc:d5:9d:39:59:94:ae:f1:1b:
                    b7:8a:07:07:96:6d:3b:f4:43:9f:8d:39:7c:81:c7:
                    12:f1:c2:24:04:c1:3a:42:5a:1a:8d:c3:2a:f8:9e:
                    7f:2f:2b:6c:87:e4:c1:53:f9:b7:37:df:33:ce:5e:
                    e0:51:38:b1:fd:fe:9f:34:dd:fd:e0:d4:17:2d:7d:
                    e9:b4:07:89:71:95:08:03:54:e0:b9:94:4b:51:79:
                    5c:13:6d:4d:97:42:e6:ba:66:03:ff:37:76:86:c9:
                    9b:ba:86:90:13:d5:18:f0:36:c6:dd:4d:63:8c:7f:
                    68:b8:ec:e1:29:bc:d5:1a:0b:7a:1a:71:b3:29:74:
                    a4:8c:38:af:34:28:ea:59:8b:85:46:75:20:1e:ad:
                    67:87:e2:4b:35:56:65:04:fe:e6:fc:c2:f6:4f:54:
                    35:bd:87:11:de:66:50:68:f4:65:66:27:3e:7f:2f:
                    c9:92:47:d5:da:0d:9f:1d:ce:57:41:a8:15:ef:c5:
                    fb:84:73:89:53:df:7d:bf:70:f2:55:7b:44:58:5c:
                    64:4e:3d:a4:8f:72:28:ce:d3:47:69:3f:00:e9:91:
                    ac:53:43:84:b7:13:4a:cb:3b:51:94:6a:b5:38:b3:
                    65:e6:74:bb:58:e1:88:ef:f7:ac:4e:a6:3b:da:b4:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:00:B5:CC:DE:CB:2B:28:C8:28:12:55:09:7F:5F:76:C1:5A:EA:1D
            X509v3 Authority Key Identifier:
                keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:06:e5:86:21:73:fe:64:02:cf:46:24:63:78:ad:84:ce:a1:
         5e:ae:00:00:e4:49:4b:12:91:ab:d1:f8:7a:ed:64:df:fa:a9:
         72:ea:bd:dd:0e:86:5e:e8:e0:63:ad:de:32:28:53:3c:bb:5e:
         db:d0:4d:51:55:d3:a9:b1:cf:9f:e5:6b:59:26:f5:69:10:22:
         c8:a4:d8:1f:24:81:3a:f3:b2:f0:ad:26:a4:77:79:f8:47:09:
         ca:97:69:50:de:05:00:19:e4:07:b6:0f:c4:9a:61:9c:24:d5:
         c2:25:8f:45:e7:4a:cf:bc:fd:f1:60:52:8b:41:71:6e:ee:f3:
         dd:6e:17:82:ca:e0:ab:ad:c4:87:b0:ea:81:52:04:97:15:5b:
         6f:f3:86:3d:3a:c1:20:ee:48:11:04:11:ec:50:09:17:8e:57:
         ed:ca:ed:97:8f:f9:12:7e:ac:0b:0c:29:ac:12:3f:2a:73:35:
         dd:03:9a:7f:a5:e3:75:cb:c2:60:00:05:65:b8:8e:98:e6:76:
         4d:b2:ae:4a:2f:58:32:69:ef:37:4a:82:0e:cd:73:22:a7:32:
         ee:e6:b8:26:bf:8e:56:3b:c5:cd:49:ef:e7:90:b6:c2:17:cf:
         b6:a7:76:47:8d:20:f4:17:48:9f:35:d5:83:e0:a3:c6:64:d5:
         c6:c8:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:35 2025 by rpki-client