Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File:                     JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier:          CbmkhFOw/rHA6kfHMWVog6nfU0IA8S8hzDwNkZ4L2MI=
Subject key identifier:   E0:FA:87:10:2D:0D:EB:E6:D3:7F:33:7D:25:F7:74:4B:26:6D:F1:DA
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer:       /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial:       01987374126ADB6138B7E1D25A118878E871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number:          03EF
Signing time:             Mon 04 Aug 2025 05:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:43 +0000
Files and hashes:         1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: XYOYqGuKhBSiKUUfT4NdOzfn/rrzlqwSX4Tcu89TiEA=)
                          2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:12:6a:db:61:38:b7:e1:d2:5a:11:88:78:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
        Validity
            Not Before: Aug  4 05:00:43 2025 GMT
            Not After : Aug  5 05:00:43 2025 GMT
        Subject: CN=e0fa87102d0debe6d37f337d25f7744b266df1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:f7:c9:c2:c6:05:0c:77:58:06:3d:ca:cd:
                    43:0d:d3:f7:a8:3b:8c:fa:6a:63:f9:30:4d:10:90:
                    50:57:4e:37:a3:75:30:15:f4:eb:ee:12:44:1c:b9:
                    1d:c9:51:0d:0a:88:95:b8:7a:d4:5b:65:59:43:78:
                    a8:be:43:4c:45:02:98:e0:7b:9c:37:53:ea:7c:57:
                    a3:23:07:11:92:09:f1:60:9e:5e:6d:f8:d8:8f:b9:
                    75:fa:37:f3:c2:c9:66:4c:78:85:6c:2d:1f:e7:7d:
                    6b:8f:3b:af:15:98:ca:12:c7:42:28:43:f5:96:fe:
                    f9:90:51:97:40:f4:19:75:a8:e8:4c:90:d2:f8:36:
                    0b:18:2b:d4:c0:bb:27:98:89:d2:e0:75:93:13:d4:
                    a7:92:40:c2:28:3a:0b:81:b9:3b:0a:5c:17:9f:ea:
                    6f:35:da:48:cd:2a:2c:0e:fd:45:9a:28:6b:3c:97:
                    1c:16:da:e5:fe:35:24:5d:72:ff:f8:fd:b0:d4:4e:
                    b0:a0:56:e2:d3:b7:db:56:85:37:b7:8c:09:7d:03:
                    d4:88:5a:2d:2e:1d:18:1f:ec:4f:f4:06:a7:50:26:
                    c6:13:03:96:6c:ec:37:97:5d:ae:43:64:5c:cc:ec:
                    76:c2:bc:98:f7:54:73:4d:19:55:46:07:b2:2b:dd:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FA:87:10:2D:0D:EB:E6:D3:7F:33:7D:25:F7:74:4B:26:6D:F1:DA
            X509v3 Authority Key Identifier:
                keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:57:f6:5d:3e:e9:3e:3b:95:02:ea:68:0f:14:88:2f:b2:
         20:a6:f3:47:1b:4f:bd:09:97:43:c7:cb:2e:83:3e:c1:3c:07:
         05:7d:4b:a8:cf:e0:21:66:57:21:1a:5f:b6:7f:be:1b:b2:47:
         22:69:73:e0:5a:2c:85:db:6e:af:00:2d:02:78:a7:26:87:93:
         d5:fa:fe:e4:cf:43:80:ef:db:58:0d:6d:6b:d4:81:5f:eb:38:
         ff:9a:16:f5:90:39:27:b2:65:b5:79:6b:69:eb:99:1d:ef:88:
         dd:9f:22:c7:80:9b:de:66:aa:45:91:85:ea:37:34:b2:2a:79:
         2e:da:c7:d9:f5:56:ea:9a:ac:e5:9b:e0:ba:20:05:23:18:f5:
         37:e9:18:74:68:62:42:d1:b8:b8:ba:b1:18:58:70:00:3e:fc:
         7e:d1:17:98:7f:d6:4b:f4:94:9c:02:d0:db:3d:5e:7f:d8:22:
         dc:3c:ac:0a:b9:e2:f6:56:7e:bf:dc:cb:f9:bc:ed:ec:90:cb:
         74:f4:d1:0e:b4:08:da:b2:60:e8:c0:0f:81:52:dd:4b:73:93:
         3f:62:1e:45:64:b6:d2:c9:e6:42:2c:d4:2e:61:06:73:64:1b:
         cd:95:53:4c:89:87:e9:d8:c3:35:0f:af:77:c3:5f:e2:fa:24:
         61:64:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:15 2025 by rpki-client