Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File:                     1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier:          xZnR6x197bTE1TrwNJ2JTbHog2IYmFVaQHsTr9AhHbU=
Subject key identifier:   D9:25:11:78:9D:B2:94:F2:88:E5:1F:E3:88:3A:7A:B0:F7:55:0F:C1
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer:       /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial:       019873E2EEE5FC50483C3183F70A31984171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number:          0217
Signing time:             Mon 04 Aug 2025 07:01:48 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:48 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:48 +0000
Files and hashes:         1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: n7Qfc173Yv0eHm3nPgwvw8cTZl/geFalf5FTDGAbGrY=)
                          2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)
                          3: T2c08RYIJ-aF9KcWXtGkde8-Pdk.roa (hash: ugT57+pZzDU4gTFn9+sLNI0YDzkT+2i3eEwIihTAs/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:ee:e5:fc:50:48:3c:31:83:f7:0a:31:98:41:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
        Validity
            Not Before: Aug  4 07:01:48 2025 GMT
            Not After : Aug  5 07:01:48 2025 GMT
        Subject: CN=d92511789db294f288e51fe3883a7ab0f7550fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:24:ef:db:86:88:a7:86:78:c1:ac:00:23:
                    e5:37:a5:09:42:36:02:b1:6b:cc:8f:c5:c5:14:9d:
                    66:25:5b:5d:d9:ee:3e:22:2e:f1:31:cb:ae:12:3a:
                    a8:06:c4:f9:11:6d:0c:9a:09:1a:97:5e:ae:52:5e:
                    e8:f1:c1:5f:b9:5d:26:d7:66:f7:63:c1:74:7c:80:
                    0b:23:f6:67:95:cb:99:9c:c8:3a:60:13:eb:5e:56:
                    29:9c:42:df:75:d3:05:fe:9b:15:ab:87:b9:19:45:
                    89:4a:fc:23:e9:b5:10:fa:58:1a:48:85:d0:4c:a9:
                    7c:d8:81:94:b0:b8:e8:38:ef:64:9d:47:76:d7:01:
                    54:bd:cb:6c:af:c0:8a:40:eb:a5:1e:23:76:16:58:
                    5f:f3:32:0a:fd:dc:2e:4a:78:d9:00:ee:b7:a5:86:
                    bc:9a:4e:a6:0e:cf:aa:34:7d:6d:6c:e6:72:05:4f:
                    e8:0c:66:b5:5f:00:d4:8e:4f:0a:29:a4:79:18:dc:
                    27:6b:54:b4:79:ed:c7:74:ca:65:2a:4c:8d:5f:21:
                    52:2c:3a:22:78:8b:41:17:19:c2:66:e4:0f:37:dd:
                    e1:81:15:83:0f:83:26:06:51:92:0b:1c:d3:47:0e:
                    8d:56:c7:09:da:15:3b:e8:20:fd:4c:a4:3f:8b:45:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:25:11:78:9D:B2:94:F2:88:E5:1F:E3:88:3A:7A:B0:F7:55:0F:C1
            X509v3 Authority Key Identifier:
                keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:42:27:d2:76:3e:d4:db:6c:8e:a0:62:0f:88:0b:ee:c1:00:
         4e:48:e1:82:a0:25:82:96:6a:ce:0d:35:02:e8:93:aa:69:06:
         3e:00:71:b8:69:b7:f8:77:58:4e:0f:65:39:d4:73:50:35:8a:
         dc:11:4d:ce:9f:fc:d0:b7:76:84:d0:00:76:31:c1:e5:bb:45:
         fb:71:b7:c3:4e:4f:fc:44:43:1e:0f:bc:04:75:91:d0:f3:ec:
         1d:e6:fd:f2:24:81:c3:c0:0a:33:3a:2b:0f:bf:1e:2a:80:ce:
         de:93:0c:c0:9b:fe:8c:c7:1b:60:d8:92:3e:67:a4:e5:85:dd:
         f3:e0:0b:d5:11:a2:ca:bd:e8:36:f4:13:63:a7:51:d6:6a:5a:
         0d:33:e3:66:10:7c:d1:9a:75:76:c8:f2:34:bd:53:6c:1c:1c:
         90:9b:e3:1f:98:21:49:e0:86:32:65:72:1b:0c:71:15:b4:03:
         b1:e5:2c:99:7c:50:9c:a7:9a:12:f0:37:88:24:10:ec:b2:92:
         47:63:d7:e2:67:8f:9b:4e:5d:32:82:95:27:9c:43:b7:c6:13:
         e9:70:8d:8d:32:1f:fb:97:fe:22:51:e5:b1:2d:18:c5:78:0f:
         2e:bc:2b:f2:b4:2a:a9:63:bb:57:2e:c8:6e:cc:bf:9d:af:9e:
         6e:e4:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:45 2025 by rpki-client