Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
File:                     Mjq1upi-9dDZvQzqAxof4Td3pIY.mft (raw, json)
Hash identifier:          tdMkz5hVb80o9cWto7+gXHBFWNAHIVFKgUCM2kOj86I=
Subject key identifier:   75:2A:67:0F:B5:08:4B:67:04:99:A4:2A:EA:B9:DB:E4:AB:50:6F:96
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Certificate issuer:       /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial:       01987A89AC0C7BF2DD59D3E2EB9D0E787176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
Manifest number:          1621
Signing time:             Tue 05 Aug 2025 14:01:39 +0000
Manifest this update:     Tue 05 Aug 2025 14:01:39 +0000
Manifest next update:     Wed 06 Aug 2025 14:01:39 +0000
Files and hashes:         1: 1bbk3xQO4GAsakJYReXogLvLM4k.roa (hash: ma7JWfiezOV+JM83OPhYUisosrWCLMi3zSbBAzKD2O0=)
                          2: 4eUjU3FviKAA-8zjNHUXmCGN0-k.roa (hash: cYvBww/EyQVYauVbE6pk42UaaR9Wj899DGdPG2LUf3g=)
                          3: Mjq1upi-9dDZvQzqAxof4Td3pIY.crl (hash: hfAoxiwQs6IMezHLZhDVYcWY+7PxY8v8y5+BH90vjkU=)
                          4: P79q0XI6jMHcEUJUje7vbekXqMM.roa (hash: rfk192nc+MyT+AA9yTeZKZSIGbJXkqx89FY7vI7SgFM=)
                          5: qKUS3aWdXNKyGrEPIZqo9vOOxtM.roa (hash: aMMBOBw0agva6obgWYqVlq2psGGrS2vafTYjFkbH+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:89:ac:0c:7b:f2:dd:59:d3:e2:eb:9d:0e:78:71:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
        Validity
            Not Before: Aug  5 14:01:39 2025 GMT
            Not After : Aug  6 14:01:39 2025 GMT
        Subject: CN=752a670fb5084b670499a42aeab9dbe4ab506f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:8f:ed:d8:7e:0d:cb:7b:1d:42:a3:4d:88:
                    41:13:6f:53:63:d9:c1:b8:45:de:46:5e:f7:83:8b:
                    f9:9b:18:17:6f:32:ab:32:cd:ab:0c:14:03:61:53:
                    bd:d2:af:ca:d5:18:16:ab:99:ff:55:75:f6:8f:2d:
                    ea:04:b5:83:c3:6d:78:06:33:c2:04:50:33:b5:99:
                    99:f1:ab:66:ec:e0:06:9b:ec:7b:68:a2:4b:0f:91:
                    1b:ff:69:a5:a3:7b:99:de:20:30:36:58:f3:0a:71:
                    4f:50:27:5d:e6:ac:d3:be:20:5d:d6:42:be:42:fc:
                    07:c1:96:5a:b6:c8:11:0c:eb:26:47:9d:dc:61:07:
                    59:d9:aa:bf:18:59:da:a1:62:00:7e:84:b6:6b:df:
                    77:e0:84:0f:0f:9d:b0:84:43:92:21:86:a3:51:5f:
                    5e:72:aa:ff:d1:26:c3:77:e4:ca:46:57:ae:77:24:
                    f4:05:ce:10:42:20:68:f8:86:2b:c6:b5:9d:d4:61:
                    de:23:04:e8:a3:25:36:f6:5e:be:de:83:01:8c:b1:
                    0c:f4:f4:1b:ca:b6:90:74:d8:83:44:96:6e:71:00:
                    ec:37:af:7f:b8:45:05:ef:9f:df:fd:8a:ec:ec:9f:
                    7f:d2:51:85:d0:3e:df:12:5c:a6:bb:be:2e:dd:e0:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2A:67:0F:B5:08:4B:67:04:99:A4:2A:EA:B9:DB:E4:AB:50:6F:96
            X509v3 Authority Key Identifier:
                keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:36:08:45:8c:7a:9c:b4:ca:65:53:46:f8:45:81:f0:69:
         3c:70:36:68:c0:44:85:5a:bc:ba:bc:b4:a3:55:20:b5:28:7e:
         72:cc:81:3c:a0:c3:9b:ae:20:c4:6d:64:65:8f:0a:c7:c6:a8:
         aa:54:c8:e9:65:50:ac:3f:4c:95:71:fc:c3:f7:68:19:28:f5:
         fd:ab:3a:8b:8f:f2:0a:3f:74:25:c2:eb:01:1a:9e:73:cb:df:
         af:cd:80:73:23:27:4d:2b:e5:e4:b7:65:fd:ec:3f:bf:8c:9e:
         08:eb:52:b9:27:d3:14:89:71:31:4e:27:ea:53:28:a7:63:ae:
         33:07:b0:af:fb:2a:22:c5:a9:d8:55:1f:ba:8d:77:e9:82:ca:
         81:48:d5:94:38:f5:0d:5d:3b:9e:7e:a6:ed:67:40:a9:5f:b2:
         e5:e4:13:f6:c0:37:e7:28:bd:8e:47:b5:a7:17:d3:b4:7c:ca:
         06:5f:b7:0f:b6:12:03:2a:59:5d:c6:3d:05:6d:0d:82:dd:f0:
         ca:d0:60:93:9b:8c:d1:77:27:2c:b7:23:0a:d7:ea:89:2a:d8:
         b6:ba:9d:ca:4d:97:1b:b4:27:be:75:3b:51:d1:5d:4d:f5:e7:
         96:ba:2d:fb:84:61:0b:38:c6:fb:fe:70:41:e1:5f:b5:36:ce:
         b5:ac:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:57 2025 by rpki-client