Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
File:                     svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json)
Hash identifier:          eUqVorETmU5mnNemvZHK9HchQtz/w3LDYKbjGqCJhNc=
Subject key identifier:   B1:4B:1F:F3:3D:8B:56:80:C6:84:6C:91:C0:E1:2E:54:CE:72:F6:F8
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Certificate issuer:       /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial:       01987DC09ADD312DF504CC7F4481F85CEE0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
Manifest number:          0FAF
Signing time:             Wed 06 Aug 2025 05:00:31 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:31 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:31 +0000
Files and hashes:         1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=)
                          2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: SXgVsjiwL2h2v6cEZpXtZhpj5NVe8N07t1C4q39CgiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:9a:dd:31:2d:f5:04:cc:7f:44:81:f8:5c:ee:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
        Validity
            Not Before: Aug  6 05:00:31 2025 GMT
            Not After : Aug  7 05:00:31 2025 GMT
        Subject: CN=b14b1ff33d8b5680c6846c91c0e12e54ce72f6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:1c:16:f0:5b:6a:a3:70:bf:e3:44:de:3a:
                    eb:84:fb:f6:a0:d2:75:bf:35:ce:46:81:22:10:fb:
                    7f:ec:fb:6a:68:e5:e2:41:65:b9:c3:04:7c:57:bb:
                    4e:f0:7f:b8:cd:21:a6:ef:0a:74:69:ee:27:f7:c0:
                    3e:bd:e1:9e:9d:c9:03:70:40:c6:5f:a3:07:51:1a:
                    ba:47:99:a3:c4:e2:84:4e:d1:32:40:fd:43:af:36:
                    88:0c:66:94:56:b4:9d:93:78:47:c0:a6:b8:64:e2:
                    b6:29:c5:b3:52:60:e6:09:15:e2:fd:c2:8e:6d:2e:
                    b6:d6:7d:2f:ca:0a:d7:85:06:5b:dd:36:77:16:e3:
                    33:1a:60:c5:d5:65:42:a5:e4:53:f8:fe:4a:62:3a:
                    1c:c1:c8:9c:db:b6:5a:98:0c:90:73:a2:6d:76:e4:
                    58:8f:04:56:cb:9f:a6:da:1d:f8:d5:1f:df:c0:71:
                    88:1b:36:88:bc:ce:7f:db:ba:aa:64:c5:61:2f:f9:
                    eb:3e:ea:3b:9b:bf:8f:b3:77:da:9b:1f:9b:00:8b:
                    99:d1:e2:1b:34:8c:d6:90:bf:67:9d:cc:80:d4:af:
                    d8:89:66:05:a1:7d:d0:41:a0:e8:28:2e:f2:a6:09:
                    d7:b2:b5:9c:d5:78:62:7b:1c:a5:74:70:bc:7f:ca:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:1F:F3:3D:8B:56:80:C6:84:6C:91:C0:E1:2E:54:CE:72:F6:F8
            X509v3 Authority Key Identifier:
                keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:5a:21:d6:85:4c:79:77:a0:e7:00:b7:6e:1f:3c:12:ed:
         be:44:f1:81:e5:86:50:b5:4b:9f:89:3e:fc:6b:9f:4d:6a:ab:
         96:e8:96:6e:41:bd:e8:f2:fc:5b:9c:e1:e6:d3:da:c7:46:9e:
         6f:db:51:97:5b:6d:11:ab:5a:6d:ef:91:25:db:03:14:bd:9d:
         9c:66:a6:9d:b7:38:7c:1f:d5:5f:01:bb:ff:e3:01:e0:f1:6a:
         9d:d4:cd:3a:8b:43:f2:4b:b2:98:8c:d0:6e:ad:98:e6:ae:ee:
         2f:cd:74:7f:95:39:cf:1e:07:a6:38:85:da:c4:6f:2f:c9:c5:
         71:1e:8b:52:28:36:c3:01:b2:a0:c2:11:4a:15:e6:6c:e4:e0:
         e7:f5:d3:f4:23:0d:aa:80:65:9c:61:df:65:be:77:ac:55:36:
         e9:6f:53:d6:4f:05:7b:f8:e1:f6:16:76:bd:60:28:9c:78:81:
         76:84:8a:a3:bd:5f:a2:43:d2:dc:09:12:72:64:1f:28:47:1c:
         a3:ff:82:03:f8:6c:ee:47:e3:f8:54:27:ec:3f:2c:d1:c8:1f:
         ae:20:87:e1:d8:d6:c5:04:6c:c2:cd:1c:d4:f0:cd:f4:da:58:
         4c:d8:14:65:07:83:1b:3a:ec:a4:62:0a:ee:a9:62:cf:68:b1:
         2c:17:26:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:17 2025 by rpki-client