Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
File:                     CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json)
Hash identifier:          RgNk9mHQMWSBMvcPTmI6NyotyOmkYTvwJ3dWlYPtjvw=
Subject key identifier:   15:FD:CD:3F:9F:C9:64:8A:F3:F2:C4:35:2B:42:3B:8C:91:36:C9:84
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Certificate issuer:       /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial:       01987418C5AE8EF1026398846272B01B38B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
Manifest number:          0978
Signing time:             Mon 04 Aug 2025 08:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:37 +0000
Files and hashes:         1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=)
                          2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=)
                          3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: tNq5ZM3usixLiZvVN8Hbz1mYFDOaTKY4CCJqSfprvY0=)
                          4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=)
                          5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=)
                          6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=)
                          7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=)
                          8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=)
                          9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=)
                          10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=)
                          11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=)
                          12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=)
                          13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=)
                          14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:c5:ae:8e:f1:02:63:98:84:62:72:b0:1b:38:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
        Validity
            Not Before: Aug  4 08:00:37 2025 GMT
            Not After : Aug  5 08:00:37 2025 GMT
        Subject: CN=15fdcd3f9fc9648af3f2c4352b423b8c9136c984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:35:41:4c:88:d4:b0:b3:89:5c:50:01:2d:
                    f2:bf:93:13:16:0d:84:73:43:6c:03:ff:80:34:46:
                    07:b1:7e:93:fe:27:c3:79:52:36:3f:53:1e:a1:71:
                    4a:ee:5f:a5:41:85:cf:71:32:e6:66:12:60:eb:dd:
                    2b:11:92:0e:ec:2e:15:30:26:98:d8:90:c1:57:22:
                    bf:8e:58:aa:24:20:bf:2f:14:b9:de:cb:df:07:62:
                    40:11:2b:37:ee:e2:94:c3:2e:00:06:a8:94:06:a8:
                    42:28:a9:e4:b8:5d:65:ef:47:ab:5b:8d:f5:d8:e7:
                    17:84:6f:fe:90:99:50:b9:47:d8:f3:aa:cf:b9:80:
                    ec:40:90:1c:0e:55:7d:13:10:7a:e1:58:2f:fc:e7:
                    da:a4:90:39:b1:88:e6:a5:4b:50:90:de:30:18:f7:
                    7b:8d:f5:4a:94:ef:85:02:57:32:73:6d:b7:d9:8b:
                    1a:a5:66:6b:89:35:fb:60:9e:f1:6c:b5:49:33:7b:
                    5f:c3:54:31:c8:5e:ae:d4:44:36:41:94:bd:69:07:
                    82:61:03:c2:38:64:eb:53:94:97:84:79:18:08:e4:
                    ce:4f:e2:04:b1:13:73:a6:67:c9:fd:9b:0f:cf:c5:
                    00:c0:86:f0:cc:3c:29:99:e6:07:51:8f:92:c1:5b:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FD:CD:3F:9F:C9:64:8A:F3:F2:C4:35:2B:42:3B:8C:91:36:C9:84
            X509v3 Authority Key Identifier:
                keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:29:dc:fc:56:e1:ca:4d:96:3c:ef:7b:0c:a8:7f:eb:16:33:
         17:3c:fd:11:65:76:3a:22:67:0a:27:05:a9:be:c9:ba:e0:dd:
         b9:69:34:d4:77:7b:34:c9:72:c1:1c:ac:4f:9c:7f:dc:91:c2:
         39:2c:52:b8:e2:fd:22:1c:4b:34:00:30:cd:8f:aa:89:98:2a:
         ad:1b:d8:f4:fd:44:4b:86:29:82:5f:3b:1a:c4:27:4e:99:d7:
         99:84:62:9c:2e:66:df:1f:fa:35:2e:e7:d9:08:fb:48:d7:ff:
         19:71:c9:9f:f2:81:e3:ee:93:bb:30:7f:b8:c6:3f:46:86:f1:
         31:ca:e4:27:93:28:d6:f6:b9:2a:30:91:2c:7b:a2:aa:04:b9:
         72:f8:12:eb:26:7a:5e:ed:81:74:d5:5e:bf:1e:88:33:49:71:
         18:bc:b0:b3:d9:1d:b2:e2:ee:3f:82:c6:df:08:b7:21:6c:f1:
         a2:85:dc:7b:3b:e1:a6:e2:1a:75:1e:90:11:6f:47:ca:24:4e:
         bd:71:75:f7:9e:90:a6:23:b5:b4:c8:cc:5a:a4:04:a1:ee:11:
         5a:6e:a5:f4:0a:7d:01:6e:3b:31:49:80:29:ab:c3:3b:a6:9e:
         6c:ba:ef:97:bd:9f:54:fe:73:ce:0e:31:9a:24:33:1e:dd:2b:
         9a:0c:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:53 2025 by rpki-client