Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File:                     f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier:          6ajEOSOuf2LtIE3zBooAhXypO4LPfyttdxor89mhOE4=
Subject key identifier:   71:E3:4D:D3:9B:0A:AF:E3:55:AF:19:8B:59:C4:54:0B:6D:F5:72:A6
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer:       /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial:       019873E1D331894F6A3AB1C9D784B00793E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number:          0482
Signing time:             Mon 04 Aug 2025 07:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:36 +0000
Files and hashes:         1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=)
                          2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: WySX7gzq+0zuxw47xuodoi2y7FOg4qQs7ndZsoZLt2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d3:31:89:4f:6a:3a:b1:c9:d7:84:b0:07:93:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
        Validity
            Not Before: Aug  4 07:00:36 2025 GMT
            Not After : Aug  5 07:00:36 2025 GMT
        Subject: CN=71e34dd39b0aafe355af198b59c4540b6df572a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:19:5a:97:c3:2f:4f:ee:39:82:6b:49:17:
                    44:d5:8b:22:f9:21:99:c6:35:81:88:81:a4:3f:dc:
                    2d:dd:97:90:ee:b3:9a:2b:81:63:d3:46:47:9f:80:
                    f9:fd:bd:8e:2e:35:e6:2b:3f:70:d5:41:69:1a:36:
                    b3:40:4c:68:81:12:f9:1a:b4:30:65:e0:b0:1b:f8:
                    0b:61:eb:03:8c:b6:f4:a0:88:37:5e:41:5b:18:1d:
                    c9:b9:89:54:da:fa:64:01:da:2a:02:78:60:54:cb:
                    dc:07:94:d7:23:b4:61:7d:fa:41:5a:72:9f:36:30:
                    2e:cd:81:e9:84:c8:f9:d1:c9:8b:7e:76:16:65:b3:
                    66:d7:a5:0c:56:17:df:69:ed:4d:16:8e:59:bb:7d:
                    64:5e:e6:c0:6b:a2:52:cc:c6:7a:26:79:c5:86:a1:
                    ca:ae:08:cf:ec:77:a6:25:f8:7d:cf:ca:fa:57:19:
                    23:21:8d:9c:2c:b5:27:cf:6a:99:e7:3b:41:45:32:
                    b1:c0:5f:07:48:44:00:d7:d1:2f:ee:26:e6:74:6f:
                    3a:16:4a:f6:7b:90:2b:4f:27:a9:af:b5:02:fa:4a:
                    fb:aa:90:02:b8:d5:a4:69:9f:34:f3:74:87:2a:5e:
                    a1:2e:57:67:3a:20:5d:27:27:82:17:5c:71:32:b6:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E3:4D:D3:9B:0A:AF:E3:55:AF:19:8B:59:C4:54:0B:6D:F5:72:A6
            X509v3 Authority Key Identifier:
                keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:be:05:ed:02:be:97:f7:ca:e0:13:f5:5a:41:26:5b:a0:1b:
         21:ae:c9:9a:7d:3d:3d:8d:54:06:5c:eb:18:d8:7d:4c:cc:45:
         47:82:1e:24:bb:2d:26:83:b0:4c:ce:86:ca:58:6d:c1:e4:1c:
         56:a0:ca:82:8c:d6:c6:74:dc:8f:f3:d7:af:17:7c:b1:97:b5:
         3a:a0:de:ca:f7:13:38:00:9e:0e:f1:25:32:2e:25:3a:3f:a1:
         a3:43:9b:b2:06:ba:fa:c0:8f:71:ed:81:1f:42:c9:9f:82:5f:
         af:d2:7d:3e:10:85:57:ef:fa:03:ff:d2:6f:f5:11:1e:2c:6b:
         0d:53:51:8f:23:73:3e:93:c9:89:a8:84:77:9a:48:a9:18:da:
         e2:94:f8:9f:23:1b:ba:93:6a:3f:6b:64:0b:c2:c3:64:b3:bd:
         d9:24:67:61:b1:e3:8f:94:c7:84:a7:df:2d:1c:ad:8b:41:5d:
         ef:65:21:0b:b1:0b:a1:72:8a:d4:75:06:25:0e:c7:68:20:9b:
         99:13:86:ac:4c:64:1d:32:48:6f:c4:50:1d:74:a4:e9:ac:e3:
         a6:bf:c4:35:5d:40:3e:b9:10:b4:a6:97:8b:88:82:6b:86:42:
         0e:33:71:ba:64:2b:42:26:e0:70:77:fb:b6:80:3a:20:f1:4e:
         e5:5b:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:43 2025 by rpki-client