Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File:                     ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier:          1lphlBMMim0+PSe71ZOzj3nThVnupOs0VTkZriZo7js=
Subject key identifier:   C8:79:92:11:F5:FF:79:EC:54:78:93:DD:D7:3A:EE:94:CA:95:E3:68
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer:       /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial:       019874BD9875F6A4F67DC64B8AD6864EE422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 11:00:38 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:38 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:38 +0000
Files and hashes:         1: 1-PzmF4tvuhKnjwj3wR1qNsz6zbo.roa (hash: rCQ1A+S4WfDslZlckjYnZ133GXKciaH3+lfRZ8R/JEo=)
                          2: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: PqSZlsDqo4/zaVyueuNuYXri6OgcBtwaOAbr/1faE/w=)
                          3: PU0hNxhZ9gnygWHqNr07qXkxc94.roa (hash: wzZfk5io+9qbaGJN9m6CkPiNg3q3eNTUNIPd7O5ekZA=)
                          4: nqK8kpSYyrSKMaEvvDzkkm62DuY.roa (hash: GiB9efPeR8VDxJjx4X5Yp7E1DvjQkRODPO17/HFGvF0=)
                          5: rCEPMjGu5dMMBXkuJaxe2se2R0U.roa (hash: RyS4C53Wz4c+6Gzz512GBJ/uZaj5Sg3AxTdwiKVWifk=)
                          6: zw5WHYA5TDqrVNRIt5-8FVfd80s.roa (hash: K+1DSxDhqmdzbJYUSYY3LlUaPbN/Zqn08bbsPtcXeuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:98:75:f6:a4:f6:7d:c6:4b:8a:d6:86:4e:e4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
        Validity
            Not Before: Aug  4 11:00:38 2025 GMT
            Not After : Aug  5 11:00:38 2025 GMT
        Subject: CN=c8799211f5ff79ec547893ddd73aee94ca95e368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:33:63:46:1b:50:6b:f2:49:85:97:84:44:
                    93:1c:53:aa:7b:ef:ae:b7:ee:c9:c7:26:3c:0e:43:
                    a0:82:e4:10:b3:bc:dc:57:96:7e:ff:55:db:cf:ba:
                    56:e0:0c:1c:f7:67:c1:d3:4e:7f:26:a0:4a:78:12:
                    dc:a3:29:b7:d5:87:59:e4:a2:93:c9:7b:83:dc:ad:
                    57:d4:9d:d3:16:44:c1:64:ce:56:d5:7c:1f:f0:43:
                    49:79:28:44:60:3d:98:25:b3:33:da:e0:c0:42:d8:
                    7b:96:a7:5a:01:d0:ac:24:df:e8:b6:73:b6:5b:f5:
                    7a:58:b5:95:4b:ec:75:05:c4:33:1b:09:fe:d7:ed:
                    65:3e:46:ab:f1:b2:f0:ca:80:b6:e0:1c:06:1e:81:
                    f4:1a:33:83:8d:c8:d5:1f:83:1e:1d:88:00:16:cb:
                    8d:d9:15:01:29:31:5b:6a:21:25:11:fd:7e:c9:cd:
                    30:7e:57:03:fb:35:d7:cb:24:69:50:36:45:6b:e4:
                    0b:91:c2:2a:17:cc:e8:d0:43:7f:b7:dc:04:50:b5:
                    55:88:1e:13:cf:c1:06:a9:c6:7c:24:2c:e1:65:e1:
                    f5:f3:23:74:82:24:ac:ce:3d:34:23:c9:dc:95:e9:
                    48:50:65:15:72:c1:49:42:f2:04:1a:97:28:f7:d4:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:79:92:11:F5:FF:79:EC:54:78:93:DD:D7:3A:EE:94:CA:95:E3:68
            X509v3 Authority Key Identifier:
                keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:db:1b:df:08:9c:62:b2:52:53:d6:42:bb:08:e4:77:af:12:
         fc:0a:c2:1c:63:38:6e:e0:00:0f:bb:1e:c6:43:f2:1e:2e:46:
         a3:ff:80:1f:45:99:38:52:67:d2:2b:9e:3b:ef:b7:ba:d8:38:
         9a:07:52:97:cf:3e:22:16:e2:db:9b:e7:5e:e4:ec:a3:31:ca:
         fe:b4:fc:a4:c6:ce:0c:f1:b4:c4:f9:fe:af:40:2d:87:25:f9:
         63:d8:5c:6d:61:ac:6c:74:67:ac:2a:3e:db:22:da:54:21:30:
         c7:1a:32:4e:dc:4d:5c:d5:7c:e1:f0:3a:f4:c3:e7:08:f2:d9:
         96:28:f3:dc:da:eb:6f:f1:8d:cb:c1:b4:9b:14:78:2a:a2:5d:
         57:4b:1d:33:b9:58:b9:50:9d:9e:98:af:a5:a8:55:94:23:69:
         4a:84:81:de:cf:41:36:e8:fb:ac:27:df:d8:d4:98:13:0e:41:
         70:1a:87:20:3b:ca:05:84:37:f2:56:a1:13:a6:20:7d:63:6f:
         d6:17:d7:42:2d:44:07:6f:e6:66:2f:fe:c6:3d:0f:58:3a:bc:
         b8:bb:46:e3:e8:d3:ab:36:27:dc:28:b9:94:8b:bc:84:f8:8d:
         75:1c:dd:ca:84:13:45:14:5a:54:ab:6d:3b:7f:43:a0:35:31:
         31:4e:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:48 2025 by rpki-client