Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File:                     1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier:          9UALAt2+2zXkw2dg+aR1poVbiNscKYU29/6UYnr6w4o=
Subject key identifier:   F3:C7:93:63:A2:BC:86:9F:31:54:F5:45:88:F9:30:AF:2C:5F:33:CB
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer:       /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial:       0198895740AFFF635453A64A339181B02083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number:          0B7F
Signing time:             Fri 08 Aug 2025 11:00:53 +0000
Manifest this update:     Fri 08 Aug 2025 11:00:53 +0000
Manifest next update:     Sat 09 Aug 2025 11:00:53 +0000
Files and hashes:         1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: Mud2/2EtfHPeST3Ehm/9QQThPtrvfMe+ZK3AOtC+3RI=)
                          2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
                          3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:40:af:ff:63:54:53:a6:4a:33:91:81:b0:20:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
        Validity
            Not Before: Aug  8 11:00:53 2025 GMT
            Not After : Aug  9 11:00:53 2025 GMT
        Subject: CN=f3c79363a2bc869f3154f54588f930af2c5f33cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:68:4b:ab:37:e9:62:1c:41:55:ad:4d:85:
                    60:98:12:80:1e:47:80:05:a7:4c:6f:ed:37:50:63:
                    4e:0b:6f:2f:67:56:be:48:43:d0:1d:b6:cc:2b:9e:
                    b2:38:40:4f:bb:78:17:27:07:95:4d:e3:4a:3e:36:
                    31:c3:7a:12:7f:dc:70:23:fb:6e:aa:7d:2c:cb:12:
                    9b:85:05:9a:4a:e1:73:36:d6:df:11:3f:4e:00:7f:
                    4c:1f:bf:d1:ae:08:d5:c2:d3:10:38:f5:a5:c5:1c:
                    76:39:d8:7f:47:7d:be:6e:b5:b6:75:3c:4d:52:f3:
                    37:cb:9f:38:25:63:de:09:d1:78:45:f5:30:51:ee:
                    a9:a3:b8:e1:ca:f1:d6:53:32:3e:56:3f:82:b6:1c:
                    c5:3e:5a:bc:a9:bd:49:e8:41:85:0a:ce:f3:28:66:
                    0f:30:29:de:6e:9b:4f:2e:e0:55:90:5e:0a:da:b1:
                    b2:c7:b4:8f:e6:a2:3a:dc:86:ca:77:bc:81:93:4d:
                    17:2f:2d:3f:66:33:88:9b:77:80:56:95:bc:46:3b:
                    0b:fb:c7:35:0f:63:5c:a3:5b:6c:3c:23:a2:14:eb:
                    6d:d2:c4:f7:b6:5b:3a:b2:14:54:a8:29:90:d8:98:
                    0b:cc:be:c3:e4:0d:e8:be:28:b9:20:87:af:6f:49:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C7:93:63:A2:BC:86:9F:31:54:F5:45:88:F9:30:AF:2C:5F:33:CB
            X509v3 Authority Key Identifier:
                keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:55:8c:40:b5:2f:1b:ad:d3:1c:f0:c2:c2:82:af:77:1f:
         83:db:08:eb:59:c2:7a:ed:d0:01:81:f1:c7:9b:7c:b4:66:36:
         f8:7b:b9:92:28:79:6d:d2:3d:cb:6e:7b:21:c3:7f:ee:53:b5:
         4a:d0:e0:2d:ea:3d:fa:bc:1f:9e:9b:ff:ee:c5:4f:9b:5f:f8:
         de:b8:72:71:3d:28:d1:98:e5:cc:7f:77:5c:18:77:8a:89:9a:
         94:cc:0f:55:54:de:aa:7a:fd:60:f8:f6:ef:37:a4:6f:40:63:
         4d:95:7c:ad:a9:ce:6a:ba:af:b2:c5:c4:3a:6b:e2:b7:f6:0c:
         1a:9f:96:b7:d4:d0:cc:ee:50:1d:be:79:ab:dd:30:54:d7:ba:
         33:59:b3:8f:09:00:b3:30:04:65:ac:ce:54:b3:77:85:07:39:
         a2:8b:d3:15:05:19:33:31:9d:02:8e:f7:4e:c2:f6:2a:3d:c4:
         41:93:c8:fc:3e:1d:c7:de:a4:a7:f3:08:16:0e:69:02:3f:7e:
         dd:d6:be:8a:0e:f3:4d:b7:d4:62:2c:4d:61:a0:1e:88:5d:07:
         1c:0c:5c:6a:b5:f0:26:67:6b:55:c9:1e:76:6f:7c:34:d5:77:
         00:9e:1c:63:3f:35:f0:f6:d5:45:22:bd:69:25:5e:64:94:8b:
         61:d4:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:04 2025 by rpki-client